Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e352e33322e302f32322d3234203d3e20323636393331.roa
File:                     34352e352e33322e302f32322d3234203d3e20323636393331.roa (raw, json)
Hash identifier:          BXpOiFJAMGxN/wwY81z6jlHwvCiIuXyrjBV2p5JJNHo=
Subject key identifier:   34:C6:D1:85:83:72:E8:9C:CB:24:F7:AA:73:C1:97:76:C7:7B:9F:6F
Certificate issuer:       /CN=C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E
Certificate serial:       469E549BB4E4955316ED2FD09AA77125DFFC3DF9
Authority key identifier: C6:51:5F:0A:A1:B8:05:AF:93:CE:49:3D:07:9C:E2:D3:C8:7E:BA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e352e33322e302f32322d3234203d3e20323636393331.roa
Signing time:             Fri 26 May 2023 22:00:00 +0000
ROA not before:           Fri 26 May 2023 21:55:00 +0000
ROA not after:            Fri 24 May 2024 22:00:00 +0000
asID:                     266931
IP address blocks:        45.5.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9e:54:9b:b4:e4:95:53:16:ed:2f:d0:9a:a7:71:25:df:fc:3d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E
        Validity
            Not Before: May 26 21:55:00 2023 GMT
            Not After : May 24 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:6a:5c:dc:38:21:b4:24:22:f6:e0:b8:39:
                    92:ca:d9:fe:28:46:b9:bd:d0:e9:a1:72:1d:05:47:
                    09:07:88:82:72:40:3c:0e:0e:1c:87:b5:f8:0c:22:
                    a2:a3:56:60:00:41:c0:1b:29:22:5d:28:1e:b6:1c:
                    46:13:c4:ce:cf:6f:da:ee:5e:7d:6d:f7:54:a2:0f:
                    89:9d:df:7b:04:7f:cc:7e:8c:26:d0:e2:21:38:14:
                    17:df:28:98:aa:df:fe:bc:f7:25:81:50:d5:e1:c9:
                    a1:54:3e:2b:20:45:b7:4a:e1:5e:65:40:91:a9:13:
                    8b:0d:0e:87:cf:9c:66:ed:77:a5:8e:9c:10:d6:67:
                    0d:79:bf:ab:42:00:95:1e:f5:31:66:05:ea:aa:c4:
                    a4:a3:14:ec:7c:39:6d:97:c7:f8:67:3c:7e:16:f9:
                    f6:c0:5d:ae:db:7c:05:2e:17:08:e9:78:c1:fe:8f:
                    05:32:b9:82:cd:1f:07:b3:8c:09:3b:9e:ab:f0:07:
                    68:cd:a9:8d:af:ec:82:55:72:28:96:30:82:19:25:
                    1d:35:c9:f3:14:fb:a8:f3:cf:a9:81:af:b0:46:f4:
                    94:45:88:ac:76:31:48:6b:c0:6b:73:35:a5:37:83:
                    23:f3:3a:7e:35:fe:30:44:51:ea:11:32:11:d7:80:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C6:D1:85:83:72:E8:9C:CB:24:F7:AA:73:C1:97:76:C7:7B:9F:6F
            X509v3 Authority Key Identifier:
                keyid:C6:51:5F:0A:A1:B8:05:AF:93:CE:49:3D:07:9C:E2:D3:C8:7E:BA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e352e33322e302f32322d3234203d3e20323636393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:54:50:28:c9:43:09:f3:2c:db:35:b8:82:c6:5c:f2:1b:
         29:83:41:a7:0a:f7:64:12:23:b2:43:96:31:fc:b5:cd:97:c2:
         4e:a5:be:e0:39:fc:b2:42:57:d9:a2:70:fb:2f:6c:63:36:34:
         33:fa:62:3a:92:bc:28:d5:e9:29:a5:2e:b7:88:1a:f8:6e:10:
         0f:44:cd:99:e7:a2:4d:af:45:1f:72:e0:80:bc:cb:98:43:b9:
         16:ac:cc:a1:86:4b:8e:61:c4:81:56:11:86:f6:eb:74:ae:1c:
         07:f3:d2:bb:8e:f6:84:d1:15:d2:d6:5f:a4:51:62:0a:88:21:
         d8:69:56:f5:00:c9:54:78:94:be:9c:b8:5c:81:31:b9:22:e6:
         70:ae:08:a2:e7:5d:b9:b6:60:fe:a8:5e:03:ef:78:ff:72:9d:
         e5:69:f7:df:99:d1:98:70:aa:4c:40:07:1e:ef:8e:c2:ea:81:
         09:9d:a5:c1:b2:35:d4:02:98:d2:33:73:20:ae:4a:fd:6c:a7:
         97:23:73:78:34:88:17:32:12:03:c8:3e:b6:b3:8c:89:0f:1d:
         b9:64:27:7a:83:8f:f1:99:32:63:b7:ad:a4:06:38:7c:3c:e8:
         eb:f4:d4:a5:29:e5:aa:48:92:3d:9d:a6:b2:2a:59:31:1b:b8:
         26:9a:83:71
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIURp5Um7TklVMW7S/QmqdxJd/8PfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY1MTVGMEFBMUI4MDVBRjkzQ0U0OTNEMDc5Q0UyRDND
ODdFQkExRTAeFw0yMzA1MjYyMTU1MDBaFw0yNDA1MjQyMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFEQzZBNUNEQzM4MjFCNDI0
MjJGNkUwQjgzOTkyQ0FEOUZFMjg0NkI5QkREMEU5QTE3MjFEMDU0NzA5MDc4ODgy
NzI0MDNDMEUwRTFDODdCNUY4MEMyMkEyQTM1NjYwMDA0MUMwMUIyOTIyNUQyODFF
QjYxQzQ2MTNDNENFQ0Y2RkRBRUU1RTdENkRGNzU0QTIwRjg5OURERjdCMDQ3RkND
N0U4QzI2RDBFMjIxMzgxNDE3REYyODk4QUFERkZFQkNGNzI1ODE1MEQ1RTFDOUEx
NTQzRTJCMjA0NUI3NEFFMTVFNjU0MDkxQTkxMzhCMEQwRTg3Q0Y5QzY2RUQ3N0E1
OEU5QzEwRDY2NzBENzlCRkFCNDIwMDk1MUVGNTMxNjYwNUVBQUFDNEE0QTMxNEVD
N0MzOTZEOTdDN0Y4NjczQzdFMTZGOUY2QzA1REFFREI3QzA1MkUxNzA4RTk3OEMx
RkU4RjA1MzJCOTgyQ0QxRjA3QjM4QzA5M0I5RUFCRjAwNzY4Q0RBOThEQUZFQzgy
NTU3MjI4OTYzMDgyMTkyNTFEMzVDOUYzMTRGQkE4RjNDRkE5ODFBRkIwNDZGNDk0
NDU4OEFDNzYzMTQ4NkJDMDZCNzMzNUE1Mzc4MzIzRjMzQTdFMzVGRTMwNDQ1MUVB
MTEzMjExRDc4MDYzMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwdxqXNw4IbQkIvbguDmSytn+KEa5vdDpoXIdBUcJB4iCckA8Dg4c
h7X4DCKio1ZgAEHAGykiXSgethxGE8TOz2/a7l59bfdUog+Jnd97BH/Mfowm0OIh
OBQX3yiYqt/+vPclgVDV4cmhVD4rIEW3SuFeZUCRqROLDQ6Hz5xm7XeljpwQ1mcN
eb+rQgCVHvUxZgXqqsSkoxTsfDltl8f4Zzx+Fvn2wF2u23wFLhcI6XjB/o8FMrmC
zR8Hs4wJO56r8AdozamNr+yCVXIoljCCGSUdNcnzFPuo88+pga+wRvSURYisdjFI
a8BrczWlN4Mj8zp+Nf4wRFHqETIR14BjCQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FDTG0YWDcuicyyT3qnPBl3bHe59vMB8GA1UdIwQYMBaAFMZRXwqhuAWvk85JPQec
4tPIfroeMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RBdExlR0VqTUczaUFR
YVBDWHJTNlRtdW9Ed0RFazVNQTEzR2M5bnVzbUs1LzAvQzY1MTVGMEFBMUI4MDVB
RjkzQ0U0OTNEMDc5Q0UyRDNDODdFQkExRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DNjUxNUYwQUExQjgwNUFGOTNDRTQ5M0QwNzlDRTJEM0M4N0VC
QTFFLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EQXRMZUdFak1HM2lBUWFQQ1hy
UzZUbXVvRHdERWs1TUExM0djOW51c21LNS8wLzM0MzUyZTM1MmUzMzMyMmUzMDJm
MzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzkzMzMxLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQUgMA0G
CSqGSIb3DQEBCwUAA4IBAQAQwFRQKMlDCfMs2zW4gsZc8hspg0GnCvdkEiOyQ5Yx
/LXNl8JOpb7gOfyyQlfZonD7L2xjNjQz+mI6krwo1ekppS63iBr4bhAPRM2Z56JN
r0UfcuCAvMuYQ7kWrMyhhkuOYcSBVhGG9ut0rhwH89K7jvaE0RXS1l+kUWIKiCHY
aVb1AMlUeJS+nLhcgTG5IuZwrgii5125tmD+qF4D73j/cp3lafffmdGYcKpMQAce
747C6oEJnaXBsjXUApjSM3Mgrkr9bKeXI3N4NIgXMhIDyD62s4yJDx25ZCd6g4/x
mTJjt62kBjh8POjr9NSlKeWqSJI9naayKlkxG7gmmoNx
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org