Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/34352e3138342e38382e302f32322d3234203d3e20323730323535.roa
File:                     34352e3138342e38382e302f32322d3234203d3e20323730323535.roa (raw, json)
Hash identifier:          9p994/ebtAj/cGQsILUcC3BwMO8YSjPPN4Hrc3wTJto=
Subject key identifier:   EB:7A:82:EC:6A:32:20:0A:FB:20:84:E8:2B:25:ED:1E:E5:40:E4:E2
Certificate issuer:       /CN=BCFE9D7FD2A3C25DC3911402465828615DB346CD
Certificate serial:       5D67CBE25F24286C2341C39D126FE892BDCBE785
Authority key identifier: BC:FE:9D:7F:D2:A3:C2:5D:C3:91:14:02:46:58:28:61:5D:B3:46:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/34352e3138342e38382e302f32322d3234203d3e20323730323535.roa
Signing time:             Sat 18 Nov 2023 13:00:00 +0000
ROA not before:           Sat 18 Nov 2023 12:55:00 +0000
ROA not after:            Sat 16 Nov 2024 13:00:00 +0000
asID:                     270255
IP address blocks:        45.184.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:67:cb:e2:5f:24:28:6c:23:41:c3:9d:12:6f:e8:92:bd:cb:e7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCFE9D7FD2A3C25DC3911402465828615DB346CD
        Validity
            Not Before: Nov 18 12:55:00 2023 GMT
            Not After : Nov 16 13:00:00 2024 GMT
        Subject: CN=EB7A82EC6A32200AFB2084E82B25ED1EE540E4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:5e:ed:b8:86:8c:ab:20:5a:e9:9a:1d:35:
                    dd:9c:e8:ae:ed:ed:52:9c:58:90:66:60:bc:ea:72:
                    d3:6e:a6:bd:f0:be:41:ad:02:5a:87:cf:5a:bf:48:
                    10:40:3d:66:bb:de:cc:47:e3:97:70:2d:6e:9e:60:
                    c3:df:78:56:a8:84:ab:fb:d6:0e:ce:8e:ca:02:38:
                    8a:14:18:86:80:ac:1b:65:1f:dd:b5:73:f4:70:64:
                    a4:51:c7:07:4b:69:07:85:e2:e3:9f:b2:55:af:45:
                    fd:4e:55:ea:a5:a5:75:ad:8c:61:62:60:c4:5b:c3:
                    bf:15:7e:75:bd:67:11:82:38:e0:be:f4:35:db:b6:
                    92:25:4e:74:3d:8c:c0:46:0f:5e:9c:e7:10:b4:53:
                    be:52:19:f5:36:ec:b6:a8:7d:85:7e:be:8a:45:e2:
                    8d:e9:e1:db:14:46:ce:17:33:1f:5c:aa:fe:cd:18:
                    f1:ba:a7:4b:86:d3:39:2b:aa:51:65:c0:71:68:3f:
                    b5:bb:e1:21:6f:11:5d:ba:f3:58:49:b0:13:a5:bc:
                    85:f0:b0:a9:64:2c:b9:12:0b:73:be:3a:2a:c5:77:
                    c3:a3:d0:b5:f2:6d:3c:70:8d:cf:86:0b:21:76:6a:
                    a3:ea:1f:13:fd:06:3c:f8:cf:2d:39:da:53:2c:f2:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7A:82:EC:6A:32:20:0A:FB:20:84:E8:2B:25:ED:1E:E5:40:E4:E2
            X509v3 Authority Key Identifier:
                keyid:BC:FE:9D:7F:D2:A3:C2:5D:C3:91:14:02:46:58:28:61:5D:B3:46:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/34352e3138342e38382e302f32322d3234203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:9e:cc:64:cd:5f:b2:32:b3:bd:f1:07:18:a6:90:9a:39:37:
         26:35:52:cb:f6:1e:33:b4:a8:8a:26:d6:33:eb:74:cb:a5:01:
         b4:b4:4b:10:fd:a0:57:fd:99:eb:b4:f3:8c:ba:2b:a0:a9:bb:
         bf:5a:6c:ec:71:dc:60:62:e2:71:84:27:80:f0:41:0b:79:f7:
         7f:74:b1:bc:6d:9c:30:0f:a1:aa:de:4a:e1:77:30:72:c2:4a:
         13:64:46:cf:38:7c:25:50:7c:4c:07:64:f5:bc:50:aa:76:88:
         23:e1:69:bb:6d:c0:e7:04:91:d6:51:98:c3:c2:bf:fa:a2:68:
         a2:2c:1b:ba:b8:5c:1c:85:37:35:fc:f5:46:96:3e:b7:3e:55:
         8d:53:fb:e4:4f:11:9c:85:44:f2:74:69:0e:89:01:c6:ee:75:
         47:03:31:cf:ab:96:7f:d9:c1:fe:37:d0:40:66:00:e6:49:f4:
         47:19:62:5f:b0:30:2a:ec:09:f3:e5:d3:1f:c9:8b:f5:ef:66:
         ce:7f:3d:92:5c:bf:a4:96:99:33:fb:1b:52:18:f2:2b:58:64:
         da:b7:30:ce:4d:f3:33:8d:8c:b2:14:3d:65:7d:8c:b8:a5:a2:
         64:b3:90:d7:6e:3f:89:95:5b:c1:a5:c4:24:05:11:82:99:6d:
         a5:6c:c6:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXWfL4l8kKGwjQcOdEm/okr3L54UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNGRTlEN0ZEMkEzQzI1REMzOTExNDAyNDY1ODI4NjE1
REIzNDZDRDAeFw0yMzExMTgxMjU1MDBaFw0yNDExMTYxMzAwMDBaMDMxMTAvBgNV
BAMTKEVCN0E4MkVDNkEzMjIwMEFGQjIwODRFODJCMjVFRDFFRTU0MEU0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt417tuIaMqyBa6ZodNd2c6K7t
7VKcWJBmYLzqctNupr3wvkGtAlqHz1q/SBBAPWa73sxH45dwLW6eYMPfeFaohKv7
1g7OjsoCOIoUGIaArBtlH921c/RwZKRRxwdLaQeF4uOfslWvRf1OVeqlpXWtjGFi
YMRbw78VfnW9ZxGCOOC+9DXbtpIlTnQ9jMBGD16c5xC0U75SGfU27LaofYV+vopF
4o3p4dsURs4XMx9cqv7NGPG6p0uG0zkrqlFlwHFoP7W74SFvEV2681hJsBOlvIXw
sKlkLLkSC3O+OirFd8Oj0LXybTxwjc+GCyF2aqPqHxP9Bjz4zy052lMs8gRXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU63qC7GoyIAr7IIToKyXtHuVA5OIwHwYDVR0j
BBgwFoAUvP6df9Kjwl3DkRQCRlgoYV2zRs0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREVDUGd3YWNkUU0yeURRZnNZTlVzR3VHV0F6QkJYeENQZmpkV05SUTdR
czMvMC9CQ0ZFOUQ3RkQyQTNDMjVEQzM5MTE0MDI0NjU4Mjg2MTVEQjM0NkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDRkU5RDdGRDJBM0MyNURD
MzkxMTQwMjQ2NTgyODYxNURCMzQ2Q0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFQ1Bnd2FjZFFNMnlEUWZzWU5Vc0d1R1dBekJCWHhDUGZqZFdOUlE3UXMzLzAv
MzQzNTJlMzEzODM0MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzIzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbhYMA0GCSqGSIb3DQEBCwUAA4IBAQCqnsxkzV+y
MrO98QcYppCaOTcmNVLL9h4ztKiKJtYz63TLpQG0tEsQ/aBX/ZnrtPOMuiugqbu/
WmzscdxgYuJxhCeA8EELefd/dLG8bZwwD6Gq3krhdzBywkoTZEbPOHwlUHxMB2T1
vFCqdogj4Wm7bcDnBJHWUZjDwr/6omiiLBu6uFwchTc1/PVGlj63PlWNU/vkTxGc
hUTydGkOiQHG7nVHAzHPq5Z/2cH+N9BAZgDmSfRHGWJfsDAq7Anz5dMfyYv172bO
fz2SXL+klpkz+xtSGPIrWGTatzDOTfMzjYyyFD1lfYy4paJks5DXbj+JlVvBpcQk
BRGCmW2lbMbP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org