Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232342e302f32342d3234203d3e20323638323931.roa
File:                     34352e3233372e3232342e302f32342d3234203d3e20323638323931.roa (raw, json)
Hash identifier:          iwfiJVw9YT+MRR1xn5RUfocK79usa71mwgaXbr5IFpo=
Subject key identifier:   89:AF:B7:53:53:23:F6:A6:26:35:27:DA:CB:CA:7A:7F:B3:71:05:E5
Certificate issuer:       /CN=280D14903D50E598F2992FA0F6A628B2C1FB24B4
Certificate serial:       73CF9CEE42A304601347EEE6574C4D1C84C286AA
Authority key identifier: 28:0D:14:90:3D:50:E5:98:F2:99:2F:A0:F6:A6:28:B2:C1:FB:24:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232342e302f32342d3234203d3e20323638323931.roa
Signing time:             Wed 06 Sep 2023 12:39:01 +0000
ROA not before:           Wed 06 Sep 2023 12:34:01 +0000
ROA not after:            Wed 04 Sep 2024 12:39:01 +0000
asID:                     268291
IP address blocks:        45.237.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cf:9c:ee:42:a3:04:60:13:47:ee:e6:57:4c:4d:1c:84:c2:86:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280D14903D50E598F2992FA0F6A628B2C1FB24B4
        Validity
            Not Before: Sep  6 12:34:01 2023 GMT
            Not After : Sep  4 12:39:01 2024 GMT
        Subject: CN=89AFB7535323F6A6263527DACBCA7A7FB37105E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:59:ed:04:42:bb:60:f0:ac:4b:5b:5d:8b:
                    a1:4e:e4:ca:56:55:71:72:00:77:1e:fa:9c:41:a5:
                    b6:61:a1:19:b9:e8:61:8b:40:30:b6:60:59:63:5c:
                    46:e5:70:7f:84:63:28:e7:c0:42:97:7f:39:10:b9:
                    39:03:63:15:d5:bf:15:9b:c5:c4:b5:f8:62:19:13:
                    10:ce:96:89:20:f9:9c:51:b8:7f:36:ad:fc:c9:b7:
                    c6:d2:60:9f:7e:e0:6b:85:1b:56:a9:a8:a6:e8:33:
                    88:72:b9:f6:7f:ff:0f:c6:c4:d6:86:58:fa:46:f1:
                    c5:2c:61:ad:e0:97:50:a4:eb:ba:02:fd:ed:7c:30:
                    b0:9d:46:74:95:dc:9b:df:61:db:e4:a3:a8:fd:c6:
                    f4:be:3c:0a:c2:fe:ec:1b:22:87:04:76:45:b2:7d:
                    ab:78:76:e1:00:9f:4e:c6:41:4e:06:3d:f3:2e:2b:
                    82:f0:d1:32:54:c2:55:45:6f:a6:65:fb:c2:71:9a:
                    f4:c1:e2:de:03:a6:c2:27:0f:b9:76:56:8a:6e:b3:
                    12:55:f8:a8:1b:11:90:d1:a7:70:46:43:92:70:7b:
                    1e:30:4e:ff:f4:e6:d9:7b:0d:63:51:ee:0e:77:b7:
                    41:46:a8:6c:05:69:7f:c2:b6:ba:64:70:51:77:40:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AF:B7:53:53:23:F6:A6:26:35:27:DA:CB:CA:7A:7F:B3:71:05:E5
            X509v3 Authority Key Identifier:
                keyid:28:0D:14:90:3D:50:E5:98:F2:99:2F:A0:F6:A6:28:B2:C1:FB:24:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232342e302f32342d3234203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:f2:c5:90:3c:17:74:83:66:f7:53:13:ee:da:62:03:b1:
         52:05:b5:3d:12:3f:7f:45:35:03:bc:31:a5:fd:f4:5d:31:f1:
         06:0d:73:58:05:f2:7c:e3:9c:6d:24:4d:21:98:fa:a4:1c:68:
         06:0f:2c:d2:33:2d:77:28:ad:1d:f3:aa:10:16:68:ef:9b:ee:
         b3:76:18:20:eb:b3:e9:53:ff:23:c7:91:6d:8b:43:fe:13:78:
         6f:c5:31:59:06:af:85:38:f6:df:45:36:cd:4e:79:f7:4f:4d:
         fb:95:18:f8:a4:81:ed:1e:5e:06:42:25:65:73:85:3e:70:7c:
         55:6d:5c:7d:c7:45:47:30:5a:71:04:61:8a:85:9a:51:02:e3:
         5d:b4:81:d0:b5:d4:ca:c1:e0:2b:5e:1a:5b:52:58:97:89:3d:
         21:fb:d0:54:e6:bc:cc:c7:0e:a0:4c:ed:38:5c:c2:c5:c8:cf:
         ae:48:4d:d8:45:de:63:11:b2:e8:d9:f5:5d:39:ba:36:9a:03:
         0c:68:97:2d:60:e6:95:92:46:79:82:46:27:c3:a2:a0:da:8c:
         2f:03:2d:3f:91:e5:c3:b2:ad:ca:b5:c2:81:04:bf:7d:bb:7e:
         0e:4e:8a:65:3f:6d:b7:2a:c3:4d:e8:ee:38:81:8a:43:a7:e2:
         c2:d9:ff:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc8+c7kKjBGATR+7mV0xNHITChqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgwRDE0OTAzRDUwRTU5OEYyOTkyRkEwRjZBNjI4QjJD
MUZCMjRCNDAeFw0yMzA5MDYxMjM0MDFaFw0yNDA5MDQxMjM5MDFaMDMxMTAvBgNV
BAMTKDg5QUZCNzUzNTMyM0Y2QTYyNjM1MjdEQUNCQ0E3QTdGQjM3MTA1RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUVntBEK7YPCsS1tdi6FO5MpW
VXFyAHce+pxBpbZhoRm56GGLQDC2YFljXEblcH+EYyjnwEKXfzkQuTkDYxXVvxWb
xcS1+GIZExDOlokg+ZxRuH82rfzJt8bSYJ9+4GuFG1apqKboM4hyufZ//w/GxNaG
WPpG8cUsYa3gl1Ck67oC/e18MLCdRnSV3JvfYdvko6j9xvS+PArC/uwbIocEdkWy
fat4duEAn07GQU4GPfMuK4Lw0TJUwlVFb6Zl+8JxmvTB4t4DpsInD7l2VopusxJV
+KgbEZDRp3BGQ5Jwex4wTv/05tl7DWNR7g53t0FGqGwFaX/CtrpkcFF3QLslAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUia+3U1Mj9qYmNSfay8p6f7NxBeUwHwYDVR0j
BBgwFoAUKA0UkD1Q5ZjymS+g9qYossH7JLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGU0OHJXaUVEUVk3TXBjZUExQ0ZRa1Z2YU5Md3dGZWlSVTF0V0dEaWdm
VlEvMC8yODBEMTQ5MDNENTBFNTk4RjI5OTJGQTBGNkE2MjhCMkMxRkIyNEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4MEQxNDkwM0Q1MEU1OThG
Mjk5MkZBMEY2QTYyOEIyQzFGQjI0QjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlNDhyV2lFRFFZN01wY2VBMUNGUWtWdmFOTHd3RmVpUlUxdFdHRGlnZlZRLzAv
MzQzNTJlMzIzMzM3MmUzMjMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7eAwDQYJKoZIhvcNAQELBQADggEBAATW8sWQ
PBd0g2b3UxPu2mIDsVIFtT0SP39FNQO8MaX99F0x8QYNc1gF8nzjnG0kTSGY+qQc
aAYPLNIzLXcorR3zqhAWaO+b7rN2GCDrs+lT/yPHkW2LQ/4TeG/FMVkGr4U49t9F
Ns1OefdPTfuVGPikge0eXgZCJWVzhT5wfFVtXH3HRUcwWnEEYYqFmlEC4120gdC1
1MrB4CteGltSWJeJPSH70FTmvMzHDqBM7ThcwsXIz65ITdhF3mMRsujZ9V05ujaa
Awxoly1g5pWSRnmCRifDoqDajC8DLT+R5cOyrcq1woEEv327fg5OimU/bbcqw03o
7jiBikOn4sLZ/3I=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org