Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa
File:                     34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          tpQaAmxFp7qChyWAQKw/rVMto0EKw2EVqkzFEV31QCA=
Subject key identifier:   8E:5D:B1:1F:F7:84:20:10:39:12:32:63:DB:95:C9:21:06:21:62:5C
Certificate issuer:       /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial:       1D99B2B663E6E4D4C4DFA5904B0D1BB31FCE8375
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa
Signing time:             Thu 30 Nov 2023 20:00:00 +0000
ROA not before:           Thu 30 Nov 2023 19:55:00 +0000
ROA not after:            Thu 28 Nov 2024 20:00:00 +0000
asID:                     262595
IP address blocks:        45.179.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:99:b2:b6:63:e6:e4:d4:c4:df:a5:90:4b:0d:1b:b3:1f:ce:83:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
        Validity
            Not Before: Nov 30 19:55:00 2023 GMT
            Not After : Nov 28 20:00:00 2024 GMT
        Subject: CN=8E5DB11FF784201039123263DB95C9210621625C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a9:09:5b:30:06:f5:92:3d:dd:55:f5:fa:0a:
                    e5:78:20:fa:b8:df:90:2a:e3:04:14:d0:c9:26:5a:
                    5f:f3:63:80:20:87:34:fc:5e:12:9a:85:17:e2:c9:
                    1b:87:e5:fe:ed:b9:a0:0c:c9:91:c8:1a:3b:7c:dd:
                    2b:62:d6:0d:87:49:c6:ca:66:eb:b7:5e:9e:91:0b:
                    da:78:97:35:f6:d4:99:0a:a9:86:cc:62:8d:43:a1:
                    05:77:22:15:8a:69:49:76:ca:ac:2d:25:2e:f7:da:
                    4c:e6:fa:1f:c0:19:2a:98:ef:31:e4:ed:42:2c:bd:
                    47:2f:7b:71:1b:aa:3d:0d:d5:c6:f1:d4:35:e6:65:
                    36:86:8e:83:53:18:d3:79:e4:af:96:cf:b9:a6:5d:
                    ac:9b:93:8a:a6:8c:6e:08:62:47:1f:3f:9a:be:ce:
                    d0:5b:3e:02:8d:c0:08:e2:49:99:f6:54:57:a3:e9:
                    eb:89:56:30:ad:1d:f0:fa:4a:4e:7d:44:6e:eb:ea:
                    c3:92:4c:b9:f2:c1:cb:99:d6:7e:e0:dd:21:95:50:
                    20:92:bf:51:ef:7e:d6:0c:57:4a:d2:4e:80:b0:c7:
                    39:5f:17:f5:8a:cd:8a:67:5a:13:fa:0c:2f:e8:b5:
                    c9:af:c9:50:36:aa:bb:5e:14:c7:1e:aa:c4:e3:46:
                    13:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5D:B1:1F:F7:84:20:10:39:12:32:63:DB:95:C9:21:06:21:62:5C
            X509v3 Authority Key Identifier:
                keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:8d:9a:e6:8a:f3:9e:7a:59:b0:9d:07:fe:1d:a0:0d:94:38:
         61:68:4f:2a:32:fc:a4:77:e3:45:69:4c:0a:49:98:42:75:0a:
         0f:47:2a:8b:86:eb:f5:ff:b9:c2:ae:4e:17:d4:c9:fa:9e:10:
         cc:4f:32:70:65:93:94:11:32:63:61:0c:0a:d3:73:eb:b3:a1:
         e6:41:b1:fd:00:6c:7d:2f:cd:af:48:2a:72:be:e4:53:55:1f:
         42:5e:89:04:f4:21:a3:cc:03:83:58:b1:9c:96:07:8c:45:22:
         58:81:b6:e6:16:01:e7:00:48:fd:a0:4d:96:ef:dd:4d:91:10:
         a4:e5:33:9c:aa:3f:e0:87:d5:a4:49:28:54:cc:6e:48:3f:ae:
         46:47:ba:e7:c1:ef:36:0a:bf:e6:79:29:6c:12:2d:02:16:48:
         f4:d9:75:ce:1c:28:90:70:c3:e9:89:cc:5f:f5:29:68:9c:c1:
         b0:95:30:68:47:c4:f2:0f:52:8c:24:cc:ad:9b:1d:84:f4:19:
         0d:21:98:18:e7:f5:e0:2f:5a:53:aa:44:79:45:fc:d9:30:bd:
         38:85:5f:fa:e6:ff:b9:69:5c:5e:f8:eb:9e:11:37:4c:50:70:
         fd:83:23:4f:8a:7e:4b:9d:94:7a:59:75:9a:9d:f4:74:ee:0f:
         45:fa:b9:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHZmytmPm5NTE36WQSw0bsx/Og3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJCOUJCQzYwRjA4OTIxOERFRjBDMTFCMzI1QTdFQ0U4
RjAzNEJBRTAeFw0yMzExMzAxOTU1MDBaFw0yNDExMjgyMDAwMDBaMDMxMTAvBgNV
BAMTKDhFNURCMTFGRjc4NDIwMTAzOTEyMzI2M0RCOTVDOTIxMDYyMTYyNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxqQlbMAb1kj3dVfX6CuV4IPq4
35Aq4wQU0MkmWl/zY4AghzT8XhKahRfiyRuH5f7tuaAMyZHIGjt83Sti1g2HScbK
Zuu3Xp6RC9p4lzX21JkKqYbMYo1DoQV3IhWKaUl2yqwtJS732kzm+h/AGSqY7zHk
7UIsvUcve3Ebqj0N1cbx1DXmZTaGjoNTGNN55K+Wz7mmXaybk4qmjG4IYkcfP5q+
ztBbPgKNwAjiSZn2VFej6euJVjCtHfD6Sk59RG7r6sOSTLnywcuZ1n7g3SGVUCCS
v1HvftYMV0rSToCwxzlfF/WKzYpnWhP6DC/otcmvyVA2qrteFMceqsTjRhMrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjl2xH/eEIBA5EjJj25XJIQYhYlwwHwYDVR0j
BBgwFoAUQrm7xg8Ikhje8MEbMlp+zo8DS64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMC80MkI5QkJDNjBGMDg5MjE4REVGMEMxMUIzMjVBN0VDRThGMDM0QkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyQjlCQkM2MEYwODkyMThE
RUYwQzExQjMyNUE3RUNFOEYwMzRCQUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlRGNuZ1dYbnVxeEdLNm9mVTlUMVY3NU50b2RESnJBRWhNRGNWcnpjaDVnLzAv
MzQzNTJlMzEzNzM5MmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIts7QwDQYJKoZIhvcNAQELBQADggEBAHmNmuaK
8556WbCdB/4doA2UOGFoTyoy/KR340VpTApJmEJ1Cg9HKouG6/X/ucKuThfUyfqe
EMxPMnBlk5QRMmNhDArTc+uzoeZBsf0AbH0vza9IKnK+5FNVH0JeiQT0IaPMA4NY
sZyWB4xFIliBtuYWAecASP2gTZbv3U2REKTlM5yqP+CH1aRJKFTMbkg/rkZHuufB
7zYKv+Z5KWwSLQIWSPTZdc4cKJBww+mJzF/1KWicwbCVMGhHxPIPUowkzK2bHYT0
GQ0hmBjn9eAvWlOqRHlF/NkwvTiFX/rm/7lpXF74654RN0xQcP2DI0+KfkudlHpZ
dZqd9HTuD0X6ubM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org