Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32322d3232203d3e20323634333836.roa
File:                     34352e362e3234302e302f32322d3232203d3e20323634333836.roa (raw, json)
Hash identifier:          c0SbZd6hIcKOB9cXlWy0lmc//wc7VfOAUGhJusSlSiI=
Subject key identifier:   2A:A3:1C:9A:3B:CB:CA:41:EE:99:77:DA:6D:AB:77:5C:17:0B:58:C2
Certificate issuer:       /CN=7CAEA8972637476DBD3EB95073B9755AF312D410
Certificate serial:       335EF50E40A3F1C4137EF7664A7E06E7A81522E0
Authority key identifier: 7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32322d3232203d3e20323634333836.roa
Signing time:             Tue 12 Mar 2024 17:38:36 +0000
ROA not before:           Tue 12 Mar 2024 17:33:36 +0000
ROA not after:            Tue 11 Mar 2025 17:38:36 +0000
asID:                     264386
IP address blocks:        45.6.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5e:f5:0e:40:a3:f1:c4:13:7e:f7:66:4a:7e:06:e7:a8:15:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAEA8972637476DBD3EB95073B9755AF312D410
        Validity
            Not Before: Mar 12 17:33:36 2024 GMT
            Not After : Mar 11 17:38:36 2025 GMT
        Subject: CN=2AA31C9A3BCBCA41EE9977DA6DAB775C170B58C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:69:dc:1a:70:5e:07:63:53:16:ea:27:51:
                    b2:c7:43:5e:e3:63:96:8a:df:41:0d:c6:83:c1:00:
                    a8:42:b0:ce:f7:7b:65:61:f0:30:54:30:fa:9e:57:
                    d7:e8:12:b8:88:f6:d8:2f:b7:8e:bb:47:a5:20:84:
                    73:fc:dc:5e:c3:0c:9a:19:97:bb:ca:dd:e4:5f:89:
                    18:63:61:20:3d:6c:fa:60:be:1f:6f:39:a2:af:69:
                    ed:8e:6f:23:41:7c:23:d7:ed:ac:9b:e3:be:bc:61:
                    db:48:b0:b7:60:f7:87:e1:7a:42:31:d3:5a:b0:da:
                    ac:21:c3:0f:bd:f2:0f:2c:12:bb:53:5e:f0:22:f5:
                    61:d3:28:a2:36:ba:00:24:5a:89:9e:c2:a7:38:ab:
                    27:c8:07:a6:83:6e:b7:30:38:55:7a:2d:03:f4:94:
                    96:57:8c:c9:43:a5:ab:6d:ee:94:d5:9c:57:58:61:
                    0d:b7:28:af:b2:24:df:c2:86:e8:44:65:c4:68:7e:
                    9f:88:2f:fe:89:9f:f8:78:15:af:12:c3:f7:d3:92:
                    bf:c7:ea:8c:b3:c6:19:f9:15:e0:c1:1d:d4:b1:4f:
                    19:32:b1:3b:24:9b:a5:58:73:95:24:0d:bd:e0:f6:
                    f8:bf:94:8f:57:d8:e7:62:5b:b3:68:7b:a4:dd:93:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:1C:9A:3B:CB:CA:41:EE:99:77:DA:6D:AB:77:5C:17:0B:58:C2
            X509v3 Authority Key Identifier:
                keyid:7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/7CAEA8972637476DBD3EB95073B9755AF312D410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32322d3232203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:8a:c0:5b:26:0b:67:54:0d:68:32:5d:81:a9:82:75:ab:1c:
         42:d8:6a:0b:bf:d7:43:b1:d2:c1:3c:4a:34:ed:20:ab:ce:5d:
         e0:67:ef:f3:b6:fc:e4:20:2b:25:90:1b:2c:37:4b:bd:be:26:
         f2:1d:ec:5b:be:5a:61:47:f7:c6:88:68:4f:20:f8:8f:83:a9:
         62:09:84:f4:23:30:0b:29:e0:a5:26:3a:19:82:7a:75:20:84:
         54:96:b8:69:8e:dd:13:bf:b4:30:9b:89:25:16:ed:94:49:0e:
         04:bb:da:2f:d1:39:7b:be:f6:2c:31:f7:a9:0e:1a:a0:99:4c:
         1c:bf:42:9b:bd:60:41:f2:70:3c:66:83:53:50:e3:b0:97:0e:
         a9:cc:a3:11:89:e9:4f:ad:ec:d9:58:5d:38:cf:f9:fa:98:60:
         a4:62:7b:49:28:06:28:c8:3b:19:f4:f1:ab:ba:ef:1f:22:81:
         df:43:47:36:8a:6c:08:ff:03:7f:37:95:0f:57:6c:b5:14:54:
         c4:c1:15:8c:4d:5f:9b:44:e6:58:7c:cc:2f:4a:d2:d8:43:47:
         cf:9e:7d:bf:14:4c:e1:dd:a6:e7:ea:a8:d9:98:21:1f:34:08:
         c5:42:8c:79:f3:f4:53:89:4c:de:27:81:30:52:3a:58:ca:da:
         88:ef:4f:ec
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUM171DkCj8cQTfvdmSn4G56gVIuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRUE4OTcyNjM3NDc2REJEM0VCOTUwNzNCOTc1NUFG
MzEyRDQxMDAeFw0yNDAzMTIxNzMzMzZaFw0yNTAzMTExNzM4MzZaMDMxMTAvBgNV
BAMTKDJBQTMxQzlBM0JDQkNBNDFFRTk5NzdEQTZEQUI3NzVDMTcwQjU4QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWWncGnBeB2NTFuonUbLHQ17j
Y5aK30ENxoPBAKhCsM73e2Vh8DBUMPqeV9foEriI9tgvt467R6UghHP83F7DDJoZ
l7vK3eRfiRhjYSA9bPpgvh9vOaKvae2ObyNBfCPX7ayb4768YdtIsLdg94fhekIx
01qw2qwhww+98g8sErtTXvAi9WHTKKI2ugAkWomewqc4qyfIB6aDbrcwOFV6LQP0
lJZXjMlDpatt7pTVnFdYYQ23KK+yJN/ChuhEZcRofp+IL/6Jn/h4Fa8Sw/fTkr/H
6oyzxhn5FeDBHdSxTxkysTskm6VYc5UkDb3g9vi/lI9X2OdiW7Noe6Tdk18DAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUKqMcmjvLykHumXfabat3XBcLWMIwHwYDVR0j
BBgwFoAUfK6olyY3R229PrlQc7l1WvMS1BAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMC83Q0FFQTg5NzI2Mzc0NzZEQkQzRUI5NTA3M0I5NzU1QUYzMTJENDEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDQUVBODk3MjYzNzQ3NkRC
RDNFQjk1MDczQjk3NTVBRjMxMkQ0MTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzAv
MzQzNTJlMzYyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNDMz
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0G8DANBgkqhkiG9w0BAQsFAAOCAQEAgorAWyYLZ1QN
aDJdgamCdascQthqC7/XQ7HSwTxKNO0gq85d4Gfv87b85CArJZAbLDdLvb4m8h3s
W75aYUf3xohoTyD4j4OpYgmE9CMwCyngpSY6GYJ6dSCEVJa4aY7dE7+0MJuJJRbt
lEkOBLvaL9E5e772LDH3qQ4aoJlMHL9Cm71gQfJwPGaDU1DjsJcOqcyjEYnpT63s
2VhdOM/5+phgpGJ7SSgGKMg7GfTxq7rvHyKB30NHNopsCP8DfzeVD1dstRRUxMEV
jE1fm0TmWHzML0rS2ENHz559vxRM4d2m5+qo2ZghHzQIxUKMefP0U4lM3ieBMFI6
WMraiO9P7A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org