Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32322d3232203d3e20323637333639.roa
File:                     34352e3233342e3137362e302f32322d3232203d3e20323637333639.roa (raw, json)
Hash identifier:          6VYyIggbsuzTawWTpWHM0FARGLAl3s2qfRKJqHmPCHI=
Subject key identifier:   C9:27:1F:3E:0A:9B:5C:C8:50:CE:E4:9E:36:02:26:67:0A:38:4C:F1
Certificate issuer:       /CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
Certificate serial:       0E939B2CC96EBF977910EEFE2B96FE31DC9C6D82
Authority key identifier: DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32322d3232203d3e20323637333639.roa
Signing time:             Sat 21 Oct 2023 14:54:04 +0000
ROA not before:           Sat 21 Oct 2023 14:49:04 +0000
ROA not after:            Sat 19 Oct 2024 14:54:04 +0000
asID:                     267369
IP address blocks:        45.234.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:93:9b:2c:c9:6e:bf:97:79:10:ee:fe:2b:96:fe:31:dc:9c:6d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
        Validity
            Not Before: Oct 21 14:49:04 2023 GMT
            Not After : Oct 19 14:54:04 2024 GMT
        Subject: CN=C9271F3E0A9B5CC850CEE49E360226670A384CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:e9:20:60:f7:cc:bc:3a:98:e5:1a:9b:f2:
                    67:3c:e7:9a:99:20:1e:19:69:0a:75:d9:e2:c1:08:
                    2c:67:86:4a:74:77:48:5b:9d:80:0b:cf:f9:9e:5e:
                    5c:92:42:f7:f0:cd:d0:ef:d8:29:3b:6b:7f:6f:00:
                    43:98:e6:3f:52:2f:ed:c8:cf:68:ab:19:0e:95:4b:
                    91:b4:98:a3:77:63:91:e8:8e:b9:76:32:79:b6:31:
                    85:0a:bd:70:7c:fb:77:16:bf:bf:35:44:27:e5:ad:
                    b4:8c:56:f1:d7:36:d5:74:5b:eb:42:ed:92:4a:db:
                    7b:f3:16:e9:03:37:12:de:69:20:1f:d5:41:1c:7a:
                    d2:26:d9:96:d0:83:db:a2:69:77:82:ad:9b:7d:30:
                    8d:79:d5:d5:5a:03:98:f2:21:ff:cb:d4:8a:ea:80:
                    73:42:42:81:3a:c1:cc:8b:5e:9f:9a:d5:28:62:17:
                    b8:13:83:f1:6f:39:d5:e4:e4:5e:eb:d8:78:c1:8c:
                    10:02:8b:12:48:7f:db:c6:1c:a7:ad:1b:91:bf:2f:
                    07:ad:d6:a8:4e:47:6d:40:1a:9e:26:b5:ae:7c:84:
                    c8:ec:5e:fa:8d:be:8d:ae:62:3b:eb:0c:f5:ee:45:
                    72:c9:98:0f:97:b7:fc:22:1a:d0:54:01:f1:15:31:
                    9b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:27:1F:3E:0A:9B:5C:C8:50:CE:E4:9E:36:02:26:67:0A:38:4C:F1
            X509v3 Authority Key Identifier:
                keyid:DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32322d3232203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:30:31:db:02:c1:1d:15:54:fd:bc:c1:0d:44:fa:0b:01:90:
         fb:ab:e4:64:0f:30:69:3b:d5:ea:9e:1f:69:ce:39:4a:4e:5a:
         ae:4c:fb:a7:ad:ee:02:d0:f2:2a:f1:3f:02:39:68:ab:9f:bc:
         8e:56:6f:86:7d:69:3d:7b:ba:35:7a:13:3c:08:e5:3e:d4:21:
         ed:9f:1e:5b:9b:0e:f7:6e:7a:cd:aa:18:db:6a:fc:38:7f:df:
         9f:fb:45:ef:7b:7b:ad:57:60:aa:ed:6e:56:f7:2a:6d:4c:41:
         c5:26:63:10:bd:3a:68:3d:77:59:43:f6:fc:2b:ce:f7:3a:67:
         aa:72:b9:ce:41:d9:28:06:04:97:2b:78:13:08:a7:2a:e3:73:
         08:f1:5f:82:90:1f:0e:24:70:d4:5c:0f:d8:ff:59:a9:d1:a5:
         ff:56:dd:77:d4:31:b0:12:b3:7f:79:22:9a:85:e1:63:90:cd:
         01:1b:a6:3d:01:55:fa:64:fa:4e:a2:6c:53:75:10:ec:44:dc:
         4b:73:61:8e:0c:84:8d:bc:85:50:d9:96:21:a0:6a:fd:88:da:
         d1:d5:2c:60:3a:3b:1c:40:10:4f:6f:38:72:c7:f5:79:09:f2:
         5d:d4:1e:bc:0e:d4:73:b4:1d:2e:f1:c1:c0:af:16:a4:5d:73:
         4a:4f:a6:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDpObLMluv5d5EO7+K5b+MdycbYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2NzU2M0RBRDY0RTNGMzAyQjdGNDNFOTZBOEQyRTRB
RUI2M0U5MDAeFw0yMzEwMjExNDQ5MDRaFw0yNDEwMTkxNDU0MDRaMDMxMTAvBgNV
BAMTKEM5MjcxRjNFMEE5QjVDQzg1MENFRTQ5RTM2MDIyNjY3MEEzODRDRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlwukgYPfMvDqY5Rqb8mc855qZ
IB4ZaQp12eLBCCxnhkp0d0hbnYALz/meXlySQvfwzdDv2Ck7a39vAEOY5j9SL+3I
z2irGQ6VS5G0mKN3Y5Hojrl2Mnm2MYUKvXB8+3cWv781RCflrbSMVvHXNtV0W+tC
7ZJK23vzFukDNxLeaSAf1UEcetIm2ZbQg9uiaXeCrZt9MI151dVaA5jyIf/L1Irq
gHNCQoE6wcyLXp+a1ShiF7gTg/FvOdXk5F7r2HjBjBACixJIf9vGHKetG5G/Lwet
1qhOR21AGp4mta58hMjsXvqNvo2uYjvrDPXuRXLJmA+Xt/wiGtBUAfEVMZs/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyScfPgqbXMhQzuSeNgImZwo4TPEwHwYDVR0j
BBgwFoAU22dWPa1k4/MCt/Q+lqjS5K62PpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRExVU0N4U21FRzdqTlFkUGt5cXFCamJyTkF2TFBDUnVucVhMQzFveEFl
QWsvMC9EQjY3NTYzREFENjRFM0YzMDJCN0Y0M0U5NkE4RDJFNEFFQjYzRTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCNjc1NjNEQUQ2NEUzRjMw
MkI3RjQzRTk2QThEMkU0QUVCNjNFOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RMVVNDeFNtRUc3ak5RZFBreXFxQmpick5BdkxQQ1J1bnFYTEMxb3hBZUFrLzAv
MzQzNTJlMzIzMzM0MmUzMTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6rAwDQYJKoZIhvcNAQELBQADggEBAGkwMdsC
wR0VVP28wQ1E+gsBkPur5GQPMGk71eqeH2nOOUpOWq5M+6et7gLQ8irxPwI5aKuf
vI5Wb4Z9aT17ujV6EzwI5T7UIe2fHlubDvdues2qGNtq/Dh/35/7Re97e61XYKrt
blb3Km1MQcUmYxC9Omg9d1lD9vwrzvc6Z6pyuc5B2SgGBJcreBMIpyrjcwjxX4KQ
Hw4kcNRcD9j/WanRpf9W3XfUMbASs395IpqF4WOQzQEbpj0BVfpk+k6ibFN1EOxE
3EtzYY4MhI28hVDZliGgav2I2tHVLGA6OxxAEE9vOHLH9XkJ8l3UHrwO1HO0HS7x
wcCvFqRdc0pPpkg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org