Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa
File:                     34352e3233302e32382e302f32322d3234203d3e20323637313435.roa (raw, json)
Hash identifier:          3za1rWm/vBme77+QNEHmql3WmQkIXb8wa9duc91PBC8=
Subject key identifier:   CF:9A:2A:38:BF:D8:4A:E7:A6:1E:CF:33:9B:7F:6B:6C:8F:98:BE:35
Certificate issuer:       /CN=7B5759C375D861C7409D94AFE284881988AE6013
Certificate serial:       300F303BC321267CB7503D729F210C377E781A74
Authority key identifier: 7B:57:59:C3:75:D8:61:C7:40:9D:94:AF:E2:84:88:19:88:AE:60:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B5759C375D861C7409D94AFE284881988AE6013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa
Signing time:             Wed 14 Feb 2024 13:21:12 +0000
ROA not before:           Wed 14 Feb 2024 13:16:12 +0000
ROA not after:            Wed 12 Feb 2025 13:21:12 +0000
asID:                     267145
IP address blocks:        45.230.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0f:30:3b:c3:21:26:7c:b7:50:3d:72:9f:21:0c:37:7e:78:1a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5759C375D861C7409D94AFE284881988AE6013
        Validity
            Not Before: Feb 14 13:16:12 2024 GMT
            Not After : Feb 12 13:21:12 2025 GMT
        Subject: CN=CF9A2A38BFD84AE7A61ECF339B7F6B6C8F98BE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:34:6f:db:bc:c4:53:c2:30:b7:8b:9b:a1:
                    15:45:45:e8:f3:5c:1c:99:b0:bb:47:74:2c:5e:c3:
                    3c:6c:c1:f8:d3:7f:4c:5e:30:5c:35:b7:e2:df:e8:
                    00:b9:89:70:63:0b:dc:1d:2c:77:35:54:3c:43:c6:
                    65:27:d9:4e:b2:1f:8c:4d:5d:c5:58:01:cd:3b:14:
                    bd:83:e4:b7:5a:10:c2:2a:bc:f5:55:d3:ea:05:9f:
                    b7:8c:1b:75:ad:bc:8c:3b:36:66:ed:f7:68:72:3b:
                    86:b8:6b:51:ff:45:24:7d:82:58:80:4c:d1:4c:b8:
                    ca:f0:8c:45:28:1e:fd:30:72:ff:90:59:e8:4e:2d:
                    ba:52:0c:b2:39:31:5e:36:b5:c7:56:7a:1a:0d:22:
                    23:9d:20:98:f1:fb:86:a6:82:26:d9:03:47:56:8e:
                    9b:1a:6a:45:f1:14:b5:f3:d9:77:6a:60:5a:53:e4:
                    2d:f0:4a:1b:f0:52:01:65:1c:ba:fb:75:e5:f5:b8:
                    54:ad:bd:fd:81:2c:7b:f5:65:cc:f4:d8:93:ca:b8:
                    d7:85:26:0d:eb:9c:82:39:46:66:bd:8d:cc:56:30:
                    4c:9a:12:a7:50:15:c5:91:94:82:31:bc:12:58:74:
                    d4:8b:48:a1:c5:4e:27:29:76:fe:d3:05:20:7e:f9:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9A:2A:38:BF:D8:4A:E7:A6:1E:CF:33:9B:7F:6B:6C:8F:98:BE:35
            X509v3 Authority Key Identifier:
                keyid:7B:57:59:C3:75:D8:61:C7:40:9D:94:AF:E2:84:88:19:88:AE:60:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/7B5759C375D861C7409D94AFE284881988AE6013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B5759C375D861C7409D94AFE284881988AE6013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:9e:c5:a8:4e:dd:68:8f:5e:e0:6e:1d:72:fe:2a:33:61:7b:
         dc:a5:bc:3b:ee:e4:41:c2:31:aa:da:9f:60:31:de:66:b7:c4:
         e1:df:60:c6:03:39:37:c1:b8:42:84:11:c3:36:90:8b:1a:95:
         49:c7:5b:e4:c8:2d:15:ab:69:af:0d:6d:2f:72:bd:63:e5:93:
         ff:5c:fa:77:71:10:0f:58:ee:a8:7c:90:39:fd:2a:92:4b:79:
         4c:62:8f:2f:3b:7c:bd:7c:53:22:d3:89:43:2d:0a:0b:f1:7f:
         b8:0e:fa:bf:fa:95:8a:7e:67:64:77:79:7c:51:e8:69:67:97:
         65:f4:78:3e:94:81:4c:af:2b:25:5f:ce:09:5b:3f:b1:42:04:
         1b:fc:a2:81:17:bc:05:10:e0:b5:9f:be:54:d0:f5:21:34:d1:
         fd:5a:f6:a6:65:dc:44:39:a9:7a:21:f2:43:3b:47:51:af:e7:
         05:22:0a:fc:13:78:11:72:88:10:63:46:0c:3d:0e:19:65:7f:
         b6:82:28:10:c9:05:0d:f9:c0:c8:a3:4a:57:c5:83:21:29:d8:
         23:f5:f1:76:f6:ce:29:9c:56:2a:f9:fa:cb:17:05:f8:d9:00:
         6a:d6:8a:4d:dd:70:dd:22:99:49:57:20:41:29:14:8b:1f:c2:
         b5:16:4e:c8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMA8wO8MhJny3UD1ynyEMN354GnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1NzU5QzM3NUQ4NjFDNzQwOUQ5NEFGRTI4NDg4MTk4
OEFFNjAxMzAeFw0yNDAyMTQxMzE2MTJaFw0yNTAyMTIxMzIxMTJaMDMxMTAvBgNV
BAMTKENGOUEyQTM4QkZEODRBRTdBNjFFQ0YzMzlCN0Y2QjZDOEY5OEJFMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SjRv27zEU8Iwt4uboRVFRejz
XByZsLtHdCxewzxswfjTf0xeMFw1t+Lf6AC5iXBjC9wdLHc1VDxDxmUn2U6yH4xN
XcVYAc07FL2D5LdaEMIqvPVV0+oFn7eMG3WtvIw7Nmbt92hyO4a4a1H/RSR9gliA
TNFMuMrwjEUoHv0wcv+QWehOLbpSDLI5MV42tcdWehoNIiOdIJjx+4amgibZA0dW
jpsaakXxFLXz2XdqYFpT5C3wShvwUgFlHLr7deX1uFStvf2BLHv1Zcz02JPKuNeF
Jg3rnII5Rma9jcxWMEyaEqdQFcWRlIIxvBJYdNSLSKHFTicpdv7TBSB++edlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUz5oqOL/YSuemHs8zm39rbI+YvjUwHwYDVR0j
BBgwFoAUe1dZw3XYYcdAnZSv4oSIGYiuYBMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREppNUQzRk1iVzFrTldDdE5NZXBiMmkxRm9acEhQSm50ZkJvTUtzTk5q
Y0ovMC83QjU3NTlDMzc1RDg2MUM3NDA5RDk0QUZFMjg0ODgxOTg4QUU2MDEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdCNTc1OUMzNzVEODYxQzc0
MDlEOTRBRkUyODQ4ODE5ODhBRTYwMTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RKaTVEM0ZNYlcxa05XQ3ROTWVwYjJpMUZvWnBIUEpudGZCb01Lc05OamNKLzAv
MzQzNTJlMzIzMzMwMmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeYcMA0GCSqGSIb3DQEBCwUAA4IBAQCsnsWoTt1o
j17gbh1y/iozYXvcpbw77uRBwjGq2p9gMd5mt8Th32DGAzk3wbhChBHDNpCLGpVJ
x1vkyC0Vq2mvDW0vcr1j5ZP/XPp3cRAPWO6ofJA5/SqSS3lMYo8vO3y9fFMi04lD
LQoL8X+4Dvq/+pWKfmdkd3l8UehpZ5dl9Hg+lIFMryslX84JWz+xQgQb/KKBF7wF
EOC1n75U0PUhNNH9WvamZdxEOal6IfJDO0dRr+cFIgr8E3gRcogQY0YMPQ4ZZX+2
gigQyQUN+cDIo0pXxYMhKdgj9fF29s4pnFYq+frLFwX42QBq1opN3XDdIplJVyBB
KRSLH8K1Fk7I
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org