Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          LuX7c+W3QheJhurmeCehoI881o9iGSCJN/jlNJnCH3Q=
Subject key identifier:   71:9D:39:82:37:56:35:29:56:BF:B1:AB:B4:0C:E5:CE:2F:33:34:CB
Certificate issuer:       /CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
Certificate serial:       4238B30001FE2DB0AD89B44F0A3203A229B535D6
Authority key identifier: E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa
Signing time:             Thu 04 Apr 2024 07:14:14 +0000
ROA not before:           Thu 04 Apr 2024 07:09:14 +0000
ROA not after:            Thu 03 Apr 2025 07:14:14 +0000
asID:                     268248
IP address blocks:        45.236.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:38:b3:00:01:fe:2d:b0:ad:89:b4:4f:0a:32:03:a2:29:b5:35:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Validity
            Not Before: Apr  4 07:09:14 2024 GMT
            Not After : Apr  3 07:14:14 2025 GMT
        Subject: CN=719D39823756352956BFB1ABB40CE5CE2F3334CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:1b:ab:66:d8:46:6a:a0:6a:78:26:a8:5f:
                    a2:53:fb:70:11:63:1e:1a:74:82:ed:c4:df:75:06:
                    04:d3:0e:a5:77:ac:70:2f:a1:55:a8:9f:8d:48:8e:
                    65:1f:d1:32:1f:37:f5:73:2a:c5:a0:e1:83:f7:02:
                    37:81:cd:0e:00:0a:7f:65:f5:00:54:79:c0:e3:4e:
                    31:68:58:53:28:ad:98:87:86:f3:59:42:e2:99:cc:
                    77:60:57:8a:4e:40:16:16:d2:14:54:19:f4:18:50:
                    6b:a0:c6:6f:92:e5:92:23:a7:1c:1a:c5:c2:17:de:
                    71:36:f8:08:db:75:d3:d5:83:7e:22:21:87:ad:4f:
                    35:d8:6b:6b:1a:64:af:2b:1f:93:86:ac:a2:dd:c6:
                    ae:1c:f8:94:a3:2b:e2:8d:50:5c:e4:5a:19:5b:6a:
                    46:8a:1c:58:26:43:cc:59:45:f4:c4:86:2f:ce:ff:
                    0e:10:ea:ed:f3:6a:5e:e9:97:43:17:fc:a7:84:3b:
                    45:fc:2b:e6:33:4a:15:b2:fa:48:fa:18:6b:b7:d3:
                    4e:65:b3:e1:fd:5a:01:4b:f5:22:a0:48:84:ee:d0:
                    68:c6:58:dd:fc:73:10:1f:e9:ac:fe:cf:e2:d3:c1:
                    d1:22:72:0d:61:51:a0:9d:4c:ee:d0:1b:ac:0e:75:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9D:39:82:37:56:35:29:56:BF:B1:AB:B4:0C:E5:CE:2F:33:34:CB
            X509v3 Authority Key Identifier:
                keyid:E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:b1:c6:4a:eb:d1:fd:86:c9:91:d8:94:5c:09:a2:66:7a:
         7b:27:82:20:ad:cf:58:a4:66:53:72:3a:aa:0e:64:3e:07:71:
         44:ab:67:ab:07:2a:02:67:9b:93:20:af:37:ec:39:79:06:7a:
         64:e7:d6:2a:32:a4:1e:b1:17:c9:db:69:36:99:70:c4:43:f0:
         5b:ef:20:09:9d:7b:27:0b:b6:3f:56:16:24:68:8c:7e:da:77:
         15:ed:c4:d1:52:80:ec:47:48:51:ca:27:da:42:df:59:97:9d:
         e1:77:d2:35:79:9b:82:d3:f2:24:5e:6e:f8:03:03:5b:9d:fb:
         1f:a4:51:6f:59:4d:93:3b:28:a3:e1:51:8d:c6:79:7d:83:02:
         ab:9c:56:d4:83:6c:05:8a:d8:c5:fc:60:16:e4:9c:26:d9:19:
         35:d7:21:ec:69:bd:3e:a0:68:8e:81:5c:ef:55:39:98:a2:15:
         0f:24:07:03:44:b9:38:05:f9:fa:28:38:e4:6d:8e:6d:03:6a:
         52:4e:79:7d:f6:ef:f9:0f:f9:11:2c:f3:72:3e:2e:19:79:4d:
         b5:5a:a6:31:f4:bb:73:f1:fe:7e:25:6b:f7:50:f6:d8:29:09:
         b6:f8:7c:70:26:9d:f4:28:88:93:49:bb:93:41:90:f8:3b:b5:
         e4:38:00:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQjizAAH+LbCtibRPCjIDoim1NdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThBNUE0ODEyRkMyQkU3ODJEMjgzQjc2MTlEN0ZEQTJB
N0REQUI3MzAeFw0yNDA0MDQwNzA5MTRaFw0yNTA0MDMwNzE0MTRaMDMxMTAvBgNV
BAMTKDcxOUQzOTgyMzc1NjM1Mjk1NkJGQjFBQkI0MENFNUNFMkYzMzM0Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdBurZthGaqBqeCaoX6JT+3AR
Yx4adILtxN91BgTTDqV3rHAvoVWon41IjmUf0TIfN/VzKsWg4YP3AjeBzQ4ACn9l
9QBUecDjTjFoWFMorZiHhvNZQuKZzHdgV4pOQBYW0hRUGfQYUGugxm+S5ZIjpxwa
xcIX3nE2+AjbddPVg34iIYetTzXYa2saZK8rH5OGrKLdxq4c+JSjK+KNUFzkWhlb
akaKHFgmQ8xZRfTEhi/O/w4Q6u3zal7pl0MX/KeEO0X8K+YzShWy+kj6GGu3005l
s+H9WgFL9SKgSITu0GjGWN38cxAf6az+z+LTwdEicg1hUaCdTO7QG6wOdYCbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcZ05gjdWNSlWv7GrtAzlzi8zNMswHwYDVR0j
BBgwFoAU6KWkgS/CvngtKDt2Gdf9oqfdq3MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZWRERaZVA4Skt6QzJtUndhRnVIQXRiMnpuYU5IQ3p4NFU1RUh0VllQ
SEwvMi9FOEE1QTQ4MTJGQzJCRTc4MkQyODNCNzYxOUQ3RkRBMkE3RERBQjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QTVBNDgxMkZDMkJFNzgy
RDI4M0I3NjE5RDdGREEyQTdEREFCNzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWVkREWmVQOEpLekMybVJ3YUZ1SEF0YjJ6bmFOSEN6eDRVNUVIdFZZUEhMLzIv
MzQzNTJlMzIzMzM2MmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7N8wDQYJKoZIhvcNAQELBQADggEBAGukscZK
69H9hsmR2JRcCaJmensngiCtz1ikZlNyOqoOZD4HcUSrZ6sHKgJnm5MgrzfsOXkG
emTn1ioypB6xF8nbaTaZcMRD8FvvIAmdeycLtj9WFiRojH7adxXtxNFSgOxHSFHK
J9pC31mXneF30jV5m4LT8iRebvgDA1ud+x+kUW9ZTZM7KKPhUY3GeX2DAqucVtSD
bAWK2MX8YBbknCbZGTXXIexpvT6gaI6BXO9VOZiiFQ8kBwNEuTgF+fooOORtjm0D
alJOeX327/kP+REs83I+Lhl5TbVapjH0u3Px/n4la/dQ9tgpCbb4fHAmnfQoiJNJ
u5NBkPg7teQ4AKU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org