Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa
File:                     34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa (raw, json)
Hash identifier:          5kwTAr5/TBdIAhvFubfTc9RwafA6TyWiG5rojgt0Seg=
Subject key identifier:   3D:ED:90:A2:2A:68:EE:EC:4C:F2:AC:84:1B:3B:D0:18:AE:0F:51:21
Certificate issuer:       /CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
Certificate serial:       199FB68B2E1F1FE2106E8A635AAE14B36A21E3CD
Authority key identifier: 7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa
Signing time:             Mon 20 Feb 2023 12:06:43 +0000
ROA not before:           Mon 20 Feb 2023 12:01:43 +0000
ROA not after:            Mon 19 Feb 2024 12:06:43 +0000
asID:                     268134
IP address blocks:        45.169.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9f:b6:8b:2e:1f:1f:e2:10:6e:8a:63:5a:ae:14:b3:6a:21:e3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
        Validity
            Not Before: Feb 20 12:01:43 2023 GMT
            Not After : Feb 19 12:06:43 2024 GMT
        Subject: CN=3DED90A22A68EEEC4CF2AC841B3BD018AE0F5121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d0:de:aa:4e:38:c2:11:68:e0:1a:8b:f6:be:
                    36:14:29:02:b0:fb:1b:aa:bc:26:47:c8:28:93:02:
                    14:16:f2:95:7c:06:6f:cd:0b:6d:e3:bd:a0:f2:2b:
                    45:8d:42:b2:7c:3f:66:68:70:ee:0d:93:3a:01:6c:
                    e4:04:01:85:e3:4c:f2:d8:97:9d:76:57:59:69:eb:
                    b2:3c:89:9b:f1:4f:ff:64:aa:a9:57:a9:0e:d1:69:
                    ca:64:6c:c3:e6:b8:b6:b7:7f:87:eb:f4:47:5b:b4:
                    0e:d1:a8:58:df:97:e2:c9:98:01:a4:2e:03:95:9a:
                    83:ce:d5:62:23:07:20:15:27:8e:89:c1:26:06:24:
                    4a:5d:61:cd:72:69:52:0e:e8:d1:df:65:fe:ec:52:
                    a7:3d:13:a0:b5:4b:00:85:a2:c8:de:d3:8f:af:dc:
                    26:ce:03:7f:fa:f1:c9:15:24:17:d2:9e:76:7f:66:
                    7d:48:f8:51:cb:75:08:89:78:88:3c:fd:97:9e:6e:
                    87:2e:ff:e5:1a:3b:c0:48:01:56:c1:3d:bd:a0:b1:
                    dc:11:58:fc:aa:19:e0:ce:0b:ea:04:3f:90:bb:93:
                    de:0d:14:f2:de:f4:23:8e:5b:66:15:07:a6:5f:b2:
                    a4:ae:24:5c:4b:d1:c5:71:bd:69:80:3b:7d:e8:a1:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:90:A2:2A:68:EE:EC:4C:F2:AC:84:1B:3B:D0:18:AE:0F:51:21
            X509v3 Authority Key Identifier:
                keyid:7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:68:1e:2c:89:71:3e:8d:47:8f:e1:44:50:db:81:36:b8:f1:
         9b:58:73:e1:13:38:c4:6a:b6:b5:d9:e0:2d:29:98:f0:ae:55:
         60:4c:87:f8:2e:b2:09:fb:62:95:6e:29:37:be:e0:4c:72:57:
         2e:1b:15:96:d7:d6:f6:c9:99:ce:40:1e:63:7f:d2:a3:34:9e:
         2f:cf:41:e9:55:a2:37:4f:ab:40:37:41:a0:41:85:42:ee:e3:
         b2:b3:c5:ce:ab:ae:de:0d:c3:9f:21:66:a5:1b:2a:8c:a3:55:
         07:4f:ee:f4:85:47:ba:d8:a3:b3:00:03:97:2a:e5:ad:7b:d6:
         ac:58:4d:cf:14:1a:24:04:da:72:67:13:e5:c5:81:8f:59:57:
         f9:d4:86:20:62:32:f0:94:99:9c:1e:11:aa:24:41:81:0d:f2:
         d5:eb:a2:f0:71:f8:47:19:50:a7:47:b5:a1:23:7f:0e:c4:52:
         34:a4:51:7d:03:63:d8:00:40:3c:45:1c:de:19:91:61:ff:7c:
         b4:02:01:7a:83:42:98:0b:2b:2e:75:e2:d0:54:ce:71:ea:cc:
         a6:bd:bb:0a:b6:21:c1:a0:5e:5f:b6:0f:19:65:14:dc:70:d1:
         1c:60:2b:40:91:a8:c5:35:ce:15:6b:c2:fa:f3:7f:c8:90:46:
         06:b2:a6:bf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGZ+2iy4fH+IQbopjWq4Us2oh480wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NDODJGMjFDNDRFMEZFQkVCN0U1MTcxNTZCNDg4MjhE
RTI4MzM3ODAeFw0yMzAyMjAxMjAxNDNaFw0yNDAyMTkxMjA2NDNaMDMxMTAvBgNV
BAMTKDNERUQ5MEEyMkE2OEVFRUM0Q0YyQUM4NDFCM0JEMDE4QUUwRjUxMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0N6qTjjCEWjgGov2vjYUKQKw
+xuqvCZHyCiTAhQW8pV8Bm/NC23jvaDyK0WNQrJ8P2ZocO4NkzoBbOQEAYXjTPLY
l512V1lp67I8iZvxT/9kqqlXqQ7RacpkbMPmuLa3f4fr9EdbtA7RqFjfl+LJmAGk
LgOVmoPO1WIjByAVJ46JwSYGJEpdYc1yaVIO6NHfZf7sUqc9E6C1SwCFosje04+v
3CbOA3/68ckVJBfSnnZ/Zn1I+FHLdQiJeIg8/Zeebocu/+UaO8BIAVbBPb2gsdwR
WPyqGeDOC+oEP5C7k94NFPLe9COOW2YVB6ZfsqSuJFxL0cVxvWmAO33ooWfHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPe2Qoipo7uxM8qyEGzvQGK4PUSEwHwYDVR0j
BBgwFoAUfMgvIcROD+vrflFxVrSIKN4oM3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlFa281RTJ6TTc2MVRkWmVTVFRRVFFxUXRnVDFwOFdGbUFEaTdUc0dp
b0YvMC83Q0M4MkYyMUM0NEUwRkVCRUI3RTUxNzE1NkI0ODgyOERFMjgzMzc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDQzgyRjIxQzQ0RTBGRUJF
QjdFNTE3MTU2QjQ4ODI4REUyODMzNzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZRWtvNUUyek03NjFUZFplU1RUUVRRcVF0Z1QxcDhXRm1BRGk3VHNHaW9GLzAv
MzQzNTJlMzEzNjM5MmUzMjM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqfAwDQYJKoZIhvcNAQELBQADggEBACFoHiyJ
cT6NR4/hRFDbgTa48ZtYc+ETOMRqtrXZ4C0pmPCuVWBMh/gusgn7YpVuKTe+4Exy
Vy4bFZbX1vbJmc5AHmN/0qM0ni/PQelVojdPq0A3QaBBhULu47Kzxc6rrt4Nw58h
ZqUbKoyjVQdP7vSFR7rYo7MAA5cq5a171qxYTc8UGiQE2nJnE+XFgY9ZV/nUhiBi
MvCUmZweEaokQYEN8tXrovBx+EcZUKdHtaEjfw7EUjSkUX0DY9gAQDxFHN4ZkWH/
fLQCAXqDQpgLKy514tBUznHqzKa9uwq2IcGgXl+2DxllFNxw0RxgK0CRqMU1zhVr
wvrzf8iQRgaypr8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org