Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232352e302f32342d3234203d3e20323638323931.roa
File:                     34352e3233372e3232352e302f32342d3234203d3e20323638323931.roa (raw, json)
Hash identifier:          u8oHUk4WWSPDTzOU9y88QJ5DWucHryxABRnoMN7ZO7M=
Subject key identifier:   F1:91:5B:CD:CF:75:03:95:71:89:02:CF:70:89:9E:35:D3:DD:F3:F5
Certificate issuer:       /CN=280D14903D50E598F2992FA0F6A628B2C1FB24B4
Certificate serial:       4683159872D42088CD1795994F5EDA5AD316551D
Authority key identifier: 28:0D:14:90:3D:50:E5:98:F2:99:2F:A0:F6:A6:28:B2:C1:FB:24:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232352e302f32342d3234203d3e20323638323931.roa
Signing time:             Wed 06 Sep 2023 12:39:03 +0000
ROA not before:           Wed 06 Sep 2023 12:34:03 +0000
ROA not after:            Wed 04 Sep 2024 12:39:03 +0000
asID:                     268291
IP address blocks:        45.237.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:83:15:98:72:d4:20:88:cd:17:95:99:4f:5e:da:5a:d3:16:55:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280D14903D50E598F2992FA0F6A628B2C1FB24B4
        Validity
            Not Before: Sep  6 12:34:03 2023 GMT
            Not After : Sep  4 12:39:03 2024 GMT
        Subject: CN=F1915BCDCF750395718902CF70899E35D3DDF3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:b1:f5:82:fd:3b:02:ea:49:95:89:ec:f2:
                    e3:3d:7b:ca:bb:0c:1d:c2:ae:c7:03:19:17:4b:b6:
                    dc:92:ed:95:95:07:2c:00:b5:41:d6:45:c9:38:d5:
                    8a:09:d0:ca:39:f4:20:12:26:56:9c:ec:35:17:8e:
                    d3:4b:92:69:79:7c:ab:0e:1e:6a:d4:3d:f8:82:40:
                    03:2b:c7:75:ab:5a:94:61:60:e7:ef:9d:e6:7b:86:
                    d8:39:8d:b8:9f:c4:fe:9d:07:e6:2e:4b:a9:8e:97:
                    bd:b6:03:68:0e:98:54:f4:65:6e:8c:33:46:7c:d4:
                    d0:ff:74:92:bf:d6:e8:c6:bb:24:79:df:b2:a1:77:
                    e2:a0:76:71:5d:0b:7a:b5:d4:c5:1d:ee:2c:7f:60:
                    f5:8d:cd:56:72:f8:cb:44:22:dd:5b:bb:3d:82:a0:
                    57:17:59:f3:1a:9a:bb:52:64:43:23:1b:c6:72:b1:
                    36:38:0b:29:cd:23:f2:1a:2f:cc:b1:51:b8:6f:ec:
                    e3:ee:e4:87:dc:6d:0c:45:89:a0:51:e8:bd:1c:0c:
                    ee:2a:7c:c6:03:8c:37:9b:44:39:5d:12:7b:96:f4:
                    a8:15:2c:88:1b:f0:e6:ea:d7:c6:9b:c3:06:de:55:
                    81:00:52:8f:d3:e1:36:af:c1:77:25:db:a3:44:b3:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:5B:CD:CF:75:03:95:71:89:02:CF:70:89:9E:35:D3:DD:F3:F5
            X509v3 Authority Key Identifier:
                keyid:28:0D:14:90:3D:50:E5:98:F2:99:2F:A0:F6:A6:28:B2:C1:FB:24:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232352e302f32342d3234203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c5:e1:6d:ba:8b:ca:5b:67:52:a5:74:70:f6:80:2a:3c:a9:
         b2:fc:d9:5b:1f:6b:36:50:e4:88:fc:f4:a8:0f:f6:39:a7:08:
         b0:c0:26:12:49:48:fc:86:af:48:65:cc:fb:fb:96:50:dc:62:
         af:7a:ca:b7:09:5a:0c:fa:e6:31:e2:f0:3c:f9:4b:cb:31:21:
         af:f9:30:90:4f:2c:da:05:0b:e3:bc:d4:61:29:9a:13:82:9a:
         e6:ab:e7:47:54:99:e2:ef:ae:ff:5b:06:f4:0b:9c:5b:c0:13:
         87:b7:dc:f2:ad:4c:1c:e6:d0:08:a3:72:77:be:60:fb:7f:6f:
         04:8e:7d:8c:cb:e8:74:9f:04:cd:96:a6:92:b0:0a:8a:f7:c6:
         5f:bb:30:f0:26:0b:ad:d6:3e:9a:4c:c0:94:e1:19:3d:bd:9f:
         d9:bf:27:77:f1:b3:54:ad:e9:c2:0c:30:c4:e1:d2:4c:1e:ce:
         56:70:a2:4b:4a:f9:54:1d:d4:96:db:3a:42:72:7d:c7:84:22:
         a7:b5:ee:32:37:a2:78:72:2d:aa:70:ad:10:a1:2d:b2:9c:8c:
         69:f6:9f:3e:6f:68:08:3e:16:3a:9e:75:e5:52:e3:72:a0:53:
         87:59:2b:cd:d8:0f:d8:8c:f5:86:99:aa:79:94:b4:6a:22:bd:
         4b:28:18:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURoMVmHLUIIjNF5WZT17aWtMWVR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgwRDE0OTAzRDUwRTU5OEYyOTkyRkEwRjZBNjI4QjJD
MUZCMjRCNDAeFw0yMzA5MDYxMjM0MDNaFw0yNDA5MDQxMjM5MDNaMDMxMTAvBgNV
BAMTKEYxOTE1QkNEQ0Y3NTAzOTU3MTg5MDJDRjcwODk5RTM1RDNEREYzRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIArH1gv07AupJlYns8uM9e8q7
DB3CrscDGRdLttyS7ZWVBywAtUHWRck41YoJ0Mo59CASJlac7DUXjtNLkml5fKsO
HmrUPfiCQAMrx3WrWpRhYOfvneZ7htg5jbifxP6dB+YuS6mOl722A2gOmFT0ZW6M
M0Z81ND/dJK/1ujGuyR537Khd+KgdnFdC3q11MUd7ix/YPWNzVZy+MtEIt1buz2C
oFcXWfMamrtSZEMjG8ZysTY4CynNI/IaL8yxUbhv7OPu5IfcbQxFiaBR6L0cDO4q
fMYDjDebRDldEnuW9KgVLIgb8Obq18abwwbeVYEAUo/T4TavwXcl26NEs8IXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8ZFbzc91A5VxiQLPcImeNdPd8/UwHwYDVR0j
BBgwFoAUKA0UkD1Q5ZjymS+g9qYossH7JLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGU0OHJXaUVEUVk3TXBjZUExQ0ZRa1Z2YU5Md3dGZWlSVTF0V0dEaWdm
VlEvMC8yODBEMTQ5MDNENTBFNTk4RjI5OTJGQTBGNkE2MjhCMkMxRkIyNEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4MEQxNDkwM0Q1MEU1OThG
Mjk5MkZBMEY2QTYyOEIyQzFGQjI0QjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlNDhyV2lFRFFZN01wY2VBMUNGUWtWdmFOTHd3RmVpUlUxdFdHRGlnZlZRLzAv
MzQzNTJlMzIzMzM3MmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7eEwDQYJKoZIhvcNAQELBQADggEBAIvF4W26
i8pbZ1KldHD2gCo8qbL82VsfazZQ5Ij89KgP9jmnCLDAJhJJSPyGr0hlzPv7llDc
Yq96yrcJWgz65jHi8Dz5S8sxIa/5MJBPLNoFC+O81GEpmhOCmuar50dUmeLvrv9b
BvQLnFvAE4e33PKtTBzm0Aijcne+YPt/bwSOfYzL6HSfBM2WppKwCor3xl+7MPAm
C63WPppMwJThGT29n9m/J3fxs1St6cIMMMTh0kwezlZwoktK+VQd1JbbOkJyfceE
Iqe17jI3onhyLapwrRChLbKcjGn2nz5vaAg+FjqedeVS43KgU4dZK83YD9iM9YaZ
qnmUtGoivUsoGGo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org