Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/34352e3137352e32342e302f32342d3234203d3e20323638383739.roa
File:                     34352e3137352e32342e302f32342d3234203d3e20323638383739.roa (raw, json)
Hash identifier:          Sv6lKSdXlI18Haynwdee5lXjyx4KeA10AlV05vSUELM=
Subject key identifier:   AB:88:C1:97:00:92:EB:21:0C:65:91:66:22:CF:1A:6A:78:75:C7:AC
Certificate issuer:       /CN=82337F52BCD667E487FB8E99A59915EF7746BFAF
Certificate serial:       0FC439ABC76924BDD2F8ED08A0F08A8C4C3FB70B
Authority key identifier: 82:33:7F:52:BC:D6:67:E4:87:FB:8E:99:A5:99:15:EF:77:46:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82337F52BCD667E487FB8E99A59915EF7746BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/34352e3137352e32342e302f32342d3234203d3e20323638383739.roa
Signing time:             Wed 17 May 2023 00:41:45 +0000
ROA not before:           Wed 17 May 2023 00:36:45 +0000
ROA not after:            Wed 15 May 2024 00:41:45 +0000
asID:                     268879
IP address blocks:        45.175.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c4:39:ab:c7:69:24:bd:d2:f8:ed:08:a0:f0:8a:8c:4c:3f:b7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82337F52BCD667E487FB8E99A59915EF7746BFAF
        Validity
            Not Before: May 17 00:36:45 2023 GMT
            Not After : May 15 00:41:45 2024 GMT
        Subject: CN=AB88C1970092EB210C65916622CF1A6A7875C7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:22:93:7a:da:69:e1:5c:3d:ec:70:77:fb:72:
                    34:84:f9:d3:84:88:26:8e:a8:95:e1:4a:d5:0d:17:
                    17:91:74:fd:ba:dc:01:84:8c:2f:0a:6b:10:2a:c5:
                    f3:1b:c8:6a:1d:2a:a0:e7:f5:2b:f4:3a:0e:6f:d3:
                    2e:f3:3d:59:bf:d2:5e:8d:b7:5c:cb:5e:ec:27:9e:
                    77:5c:76:1a:e5:8e:22:f1:b5:fb:cc:1f:18:b3:06:
                    5b:3f:eb:05:2e:ac:0b:99:f8:f1:4b:6e:86:2f:99:
                    98:a7:bd:9f:8c:c9:1b:6f:43:e0:2c:e4:2b:a7:60:
                    b1:32:eb:bd:bf:58:18:a2:02:7c:bb:95:2a:57:4e:
                    bc:be:88:ee:88:0b:6c:57:63:ab:ab:30:48:6b:f6:
                    b4:cf:86:0e:56:54:b9:20:7d:d8:ee:53:9c:be:54:
                    c5:46:e3:2c:13:65:83:e8:ad:7c:39:ca:06:53:82:
                    97:18:3c:5a:4c:26:55:95:31:96:cf:50:cc:c5:13:
                    d1:4a:ca:a9:6c:9e:81:6c:b8:f1:36:b9:7f:1b:c7:
                    7f:49:9d:bb:32:96:1b:2f:df:37:1d:48:c9:5c:0f:
                    85:f6:75:4b:38:6a:cf:3b:c0:a1:bc:1c:6b:a6:5d:
                    be:d4:9d:bf:a4:a1:09:a7:d8:da:47:bc:cf:be:07:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:88:C1:97:00:92:EB:21:0C:65:91:66:22:CF:1A:6A:78:75:C7:AC
            X509v3 Authority Key Identifier:
                keyid:82:33:7F:52:BC:D6:67:E4:87:FB:8E:99:A5:99:15:EF:77:46:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/82337F52BCD667E487FB8E99A59915EF7746BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82337F52BCD667E487FB8E99A59915EF7746BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/34352e3137352e32342e302f32342d3234203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ca:b5:26:f8:8b:8a:18:c4:91:10:f7:60:4f:8d:28:84:79:
         88:f8:af:4c:60:8c:af:d9:0b:e7:80:4c:25:01:d4:de:39:da:
         9a:e6:4d:c5:59:b3:40:66:f2:5e:e2:7c:6c:25:d5:bb:3d:33:
         28:46:60:27:19:fe:2c:b3:be:24:0c:9c:c9:bc:dd:9d:fd:14:
         1c:b3:e3:ac:7e:6d:c8:7c:52:71:2c:4a:36:1f:72:53:1b:52:
         89:6a:09:8c:8d:b3:44:0a:03:a9:92:0a:09:cd:52:56:dc:bc:
         b8:e4:db:61:84:e6:96:e7:10:e1:12:19:ab:d4:63:5a:8d:2a:
         be:ab:8e:73:d0:19:90:1e:0e:5c:5e:22:53:f6:4e:1a:8a:a2:
         9e:1a:98:d0:51:08:b1:cd:c6:af:cf:ed:9d:ed:43:b8:c6:e6:
         8d:dd:a9:cd:3b:9d:fb:93:52:85:8b:6a:4f:64:6b:24:bd:5a:
         8a:cd:78:0e:90:ba:7e:0d:4c:14:45:15:0e:0c:41:4d:d8:98:
         14:cc:e7:85:df:85:f6:c2:12:f5:89:d2:a4:f3:9b:bf:97:78:
         c7:2c:a4:79:7a:50:aa:33:fb:f6:e4:6e:60:f5:b6:64:f2:65:
         dc:aa:ab:38:11:11:ca:2a:bf:d9:e1:9d:98:1c:1e:7e:40:06:
         06:7f:1b:90
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD8Q5q8dpJL3S+O0IoPCKjEw/twswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIzMzdGNTJCQ0Q2NjdFNDg3RkI4RTk5QTU5OTE1RUY3
NzQ2QkZBRjAeFw0yMzA1MTcwMDM2NDVaFw0yNDA1MTUwMDQxNDVaMDMxMTAvBgNV
BAMTKEFCODhDMTk3MDA5MkVCMjEwQzY1OTE2NjIyQ0YxQTZBNzg3NUM3QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdIpN62mnhXD3scHf7cjSE+dOE
iCaOqJXhStUNFxeRdP263AGEjC8KaxAqxfMbyGodKqDn9Sv0Og5v0y7zPVm/0l6N
t1zLXuwnnndcdhrljiLxtfvMHxizBls/6wUurAuZ+PFLboYvmZinvZ+MyRtvQ+As
5CunYLEy672/WBiiAny7lSpXTry+iO6IC2xXY6urMEhr9rTPhg5WVLkgfdjuU5y+
VMVG4ywTZYPorXw5ygZTgpcYPFpMJlWVMZbPUMzFE9FKyqlsnoFsuPE2uX8bx39J
nbsylhsv3zcdSMlcD4X2dUs4as87wKG8HGumXb7Unb+koQmn2NpHvM++B2ivAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq4jBlwCS6yEMZZFmIs8aanh1x6wwHwYDVR0j
BBgwFoAUgjN/UrzWZ+SH+46ZpZkV73dGv68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRlNU5LRnZmUDk2TEt6OG1IdWFHa0ZlZVRmREMxeUJVeGtyb3VmTnNU
cEMvMC84MjMzN0Y1MkJDRDY2N0U0ODdGQjhFOTlBNTk5MTVFRjc3NDZCRkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgyMzM3RjUyQkNENjY3RTQ4
N0ZCOEU5OUE1OTkxNUVGNzc0NkJGQUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUZTVOS0Z2ZlA5NkxLejhtSHVhR2tGZWVUZkRDMXlCVXhrcm91Zk5zVHBDLzAv
MzQzNTJlMzEzNzM1MmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa8YMA0GCSqGSIb3DQEBCwUAA4IBAQBryrUm+IuK
GMSREPdgT40ohHmI+K9MYIyv2QvngEwlAdTeOdqa5k3FWbNAZvJe4nxsJdW7PTMo
RmAnGf4ss74kDJzJvN2d/RQcs+Osfm3IfFJxLEo2H3JTG1KJagmMjbNECgOpkgoJ
zVJW3Ly45NthhOaW5xDhEhmr1GNajSq+q45z0BmQHg5cXiJT9k4aiqKeGpjQUQix
zcavz+2d7UO4xuaN3anNO537k1KFi2pPZGskvVqKzXgOkLp+DUwURRUODEFN2JgU
zOeF34X2whL1idKk85u/l3jHLKR5elCqM/v25G5g9bZk8mXcqqs4ERHKKr/Z4Z2Y
HB5+QAYGfxuQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org