Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32322d3233203d3e20323636393532.roa
File:                     34352e3232352e3235322e302f32322d3233203d3e20323636393532.roa (raw, json)
Hash identifier:          96tf2z2BGCeeNPqewwjaFpHdeRSTw3Utnaqxpn+qZdg=
Subject key identifier:   30:1D:40:45:B5:04:F1:7C:51:A2:E4:1B:83:8E:C1:93:C3:24:91:EF
Certificate issuer:       /CN=C6A48C022635EB60E68D4E85D562FD00ED1202B6
Certificate serial:       5B7A113F29B3FB707F9296C55D33F1A0BE170638
Authority key identifier: C6:A4:8C:02:26:35:EB:60:E6:8D:4E:85:D5:62:FD:00:ED:12:02:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A48C022635EB60E68D4E85D562FD00ED1202B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32322d3233203d3e20323636393532.roa
Signing time:             Tue 12 Mar 2024 23:01:18 +0000
ROA not before:           Tue 12 Mar 2024 22:56:18 +0000
ROA not after:            Tue 11 Mar 2025 23:01:18 +0000
asID:                     266952
IP address blocks:        45.225.252.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:11:3f:29:b3:fb:70:7f:92:96:c5:5d:33:f1:a0:be:17:06:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A48C022635EB60E68D4E85D562FD00ED1202B6
        Validity
            Not Before: Mar 12 22:56:18 2024 GMT
            Not After : Mar 11 23:01:18 2025 GMT
        Subject: CN=301D4045B504F17C51A2E41B838EC193C32491EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fe:07:9c:84:60:b6:20:54:8c:fc:89:74:b5:
                    2e:fa:e5:b3:b2:e4:fc:15:be:02:17:d5:d0:87:9f:
                    22:29:d5:0d:7a:93:2c:72:0f:7b:0e:a9:87:93:99:
                    86:43:88:e0:c3:e2:e6:03:b3:ea:c9:95:4f:6a:70:
                    fc:11:e7:dd:97:c9:e9:0b:ac:9b:b8:7c:86:6b:21:
                    26:71:82:36:c9:fb:fc:e0:f7:43:5e:c6:c9:51:2e:
                    64:22:13:58:ce:dc:08:b1:07:29:84:d8:c8:1e:de:
                    f3:25:2f:c3:ca:a0:fe:13:5d:4c:84:c9:91:df:4d:
                    91:f9:2b:58:1f:a0:37:52:16:05:a1:cb:18:2e:5f:
                    b6:84:c9:9e:16:2e:3f:1c:ae:69:f1:46:25:59:81:
                    b0:2c:0b:73:61:79:b1:ec:67:62:de:25:4c:da:d5:
                    e0:08:ee:ae:9e:9c:93:b3:68:2f:83:21:47:d2:ab:
                    56:eb:52:94:0f:3a:a7:f2:f3:76:ec:4c:7a:4a:02:
                    aa:33:ba:8f:67:4b:bd:d0:21:e1:96:f9:fc:fc:27:
                    d4:7c:2a:5c:06:4a:61:99:f2:e1:8e:6b:d0:17:54:
                    ba:0b:24:49:ba:0a:10:ea:75:c4:65:33:3b:68:4f:
                    61:48:30:3f:b8:83:99:9e:fb:16:f0:14:98:fa:d3:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1D:40:45:B5:04:F1:7C:51:A2:E4:1B:83:8E:C1:93:C3:24:91:EF
            X509v3 Authority Key Identifier:
                keyid:C6:A4:8C:02:26:35:EB:60:E6:8D:4E:85:D5:62:FD:00:ED:12:02:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/C6A48C022635EB60E68D4E85D562FD00ED1202B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A48C022635EB60E68D4E85D562FD00ED1202B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32322d3233203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:f8:bf:12:f4:7d:ea:22:ac:66:8f:87:fb:ce:95:75:74:c7:
         ad:15:a0:f3:a7:92:fa:43:7e:ed:6f:2d:20:b8:1d:c6:d6:8d:
         eb:46:ae:91:a9:38:7f:48:53:95:90:e6:23:6d:fb:fe:8d:52:
         d5:c8:ee:99:1e:67:0d:b2:b3:c1:09:e5:82:20:07:3e:60:22:
         41:17:a4:81:b4:44:43:2e:e1:52:f7:6c:a4:d7:6e:a5:39:7a:
         e1:c7:50:19:d4:ab:7a:c7:df:bd:1f:3d:71:dd:37:f0:ad:fa:
         78:da:6e:58:d2:5c:ff:1b:0a:e4:e4:30:da:90:90:81:9c:1b:
         16:dc:94:5f:7a:f6:48:e9:33:08:62:5b:b6:6f:db:5e:e5:3c:
         9d:b3:01:0c:4e:2c:b3:a0:61:5b:14:17:33:1c:5c:0f:12:e9:
         8f:dc:cf:ec:e0:2e:dc:a0:f7:d5:d3:d4:88:b1:f4:8d:f7:f5:
         ef:cd:a1:50:8a:a3:9f:1e:b6:d6:c3:0f:4c:14:28:ca:7c:95:
         9a:46:86:5e:15:a0:f7:38:c4:c5:56:2d:fa:e8:e0:c3:64:38:
         f6:e5:27:c6:ef:70:9a:4b:3e:83:56:7a:43:67:5e:cc:bc:42:
         d7:ed:99:b5:8f:ee:ae:8c:ae:db:53:19:73:df:aa:20:af:a8:
         aa:8f:ec:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUW3oRPymz+3B/kpbFXTPxoL4XBjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZBNDhDMDIyNjM1RUI2MEU2OEQ0RTg1RDU2MkZEMDBF
RDEyMDJCNjAeFw0yNDAzMTIyMjU2MThaFw0yNTAzMTEyMzAxMThaMDMxMTAvBgNV
BAMTKDMwMUQ0MDQ1QjUwNEYxN0M1MUEyRTQxQjgzOEVDMTkzQzMyNDkxRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0/gechGC2IFSM/Il0tS765bOy
5PwVvgIX1dCHnyIp1Q16kyxyD3sOqYeTmYZDiODD4uYDs+rJlU9qcPwR592XyekL
rJu4fIZrISZxgjbJ+/zg90NexslRLmQiE1jO3AixBymE2Mge3vMlL8PKoP4TXUyE
yZHfTZH5K1gfoDdSFgWhyxguX7aEyZ4WLj8crmnxRiVZgbAsC3NhebHsZ2LeJUza
1eAI7q6enJOzaC+DIUfSq1brUpQPOqfy83bsTHpKAqozuo9nS73QIeGW+fz8J9R8
KlwGSmGZ8uGOa9AXVLoLJEm6ChDqdcRlMztoT2FIMD+4g5me+xbwFJj60/5RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMB1ARbUE8XxRouQbg47Bk8Mkke8wHwYDVR0j
BBgwFoAUxqSMAiY162DmjU6F1WL9AO0SArYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0
Y1QvMC9DNkE0OEMwMjI2MzVFQjYwRTY4RDRFODVENTYyRkQwMEVEMTIwMkI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2QTQ4QzAyMjYzNUVCNjBF
NjhENEU4NUQ1NjJGRDAwRUQxMjAyQjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnMlRTd3RUbjRnaUNmc1E4SlpXRlNEZDRNWnNxNTY0clZGQ2Z0bVBCNGNULzAv
MzQzNTJlMzIzMjM1MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2
MzYzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4fwwDQYJKoZIhvcNAQELBQADggEBAGj4vxL0
feoirGaPh/vOlXV0x60VoPOnkvpDfu1vLSC4HcbWjetGrpGpOH9IU5WQ5iNt+/6N
UtXI7pkeZw2ys8EJ5YIgBz5gIkEXpIG0REMu4VL3bKTXbqU5euHHUBnUq3rH370f
PXHdN/Ct+njabljSXP8bCuTkMNqQkIGcGxbclF969kjpMwhiW7Zv217lPJ2zAQxO
LLOgYVsUFzMcXA8S6Y/cz+zgLtyg99XT1Iix9I339e/NoVCKo58ettbDD0wUKMp8
lZpGhl4VoPc4xMVWLfro4MNkOPblJ8bvcJpLPoNWekNnXsy8QtftmbWP7q6MrttT
GXPfqiCvqKqP7PE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org