Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa
File:                     34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa (raw, json)
Hash identifier:          gMmkJYDsXpfIcj2fv2yhRNp9HVlq76noMtznIkdYUiI=
Subject key identifier:   B8:A5:6A:D3:13:73:40:60:C0:41:F7:36:1D:20:25:39:8B:DD:29:3B
Certificate issuer:       /CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
Certificate serial:       3D2FE9976B28A48E86FC9CDCEDFDEE89DF02D101
Authority key identifier: 67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa
Signing time:             Mon 08 Apr 2024 16:22:39 +0000
ROA not before:           Mon 08 Apr 2024 16:17:39 +0000
ROA not after:            Mon 07 Apr 2025 16:22:39 +0000
asID:                     266952
IP address blocks:        45.225.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2f:e9:97:6b:28:a4:8e:86:fc:9c:dc:ed:fd:ee:89:df:02:d1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
        Validity
            Not Before: Apr  8 16:17:39 2024 GMT
            Not After : Apr  7 16:22:39 2025 GMT
        Subject: CN=B8A56AD313734060C041F7361D2025398BDD293B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:44:d6:77:48:22:54:64:87:4e:17:e7:76:
                    4c:28:a4:b0:93:97:03:92:fc:a7:39:dd:a9:03:13:
                    7c:8d:42:01:7e:0d:4b:f4:03:d0:ce:dd:81:44:09:
                    26:9e:05:da:cd:00:c3:2d:b7:5e:69:0a:5e:61:67:
                    bc:96:4f:e2:6b:d7:60:57:be:69:71:13:7e:f9:85:
                    86:32:24:76:9c:1f:dc:f0:06:19:da:b2:dc:1c:00:
                    b6:52:9b:92:82:29:5c:7b:5b:ca:53:3d:e3:38:85:
                    d8:c5:23:df:0c:3c:94:75:64:e5:47:56:4d:8b:6a:
                    4d:f6:8e:88:58:fd:33:72:9b:a4:93:4a:b5:0e:3c:
                    dd:e9:e4:70:5b:d2:48:f0:6f:c0:1a:c8:16:d0:7c:
                    20:62:18:ce:ee:00:8c:62:c6:da:ab:0f:98:c9:62:
                    e0:3a:88:c8:99:c9:27:10:39:b5:6f:98:58:e7:0b:
                    02:52:3b:04:47:53:a5:67:6c:68:c0:1f:cd:3e:48:
                    68:0c:9f:83:7f:82:8e:37:3e:6a:f6:b0:bd:26:96:
                    70:58:e2:10:81:12:d9:92:3f:b7:f2:7e:95:6c:96:
                    e1:03:be:a8:b2:c8:19:af:28:cc:1c:1d:75:58:4b:
                    fb:0d:02:e8:73:a2:7d:bf:53:8c:14:44:06:b1:f2:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:6A:D3:13:73:40:60:C0:41:F7:36:1D:20:25:39:8B:DD:29:3B
            X509v3 Authority Key Identifier:
                keyid:67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:5c:1f:be:70:20:fa:d3:e0:67:6e:ad:fc:d1:26:f4:82:
         1a:e2:ad:bf:65:f9:a2:28:44:76:7d:a3:55:dd:20:b5:2d:2d:
         01:70:a2:6f:9a:a4:03:eb:6c:23:c3:de:c1:80:f1:73:74:eb:
         9e:72:7e:4b:4b:f4:f2:4f:1b:34:58:35:11:7d:75:12:79:60:
         99:61:1a:8a:99:94:f8:8a:c7:12:e6:74:20:40:24:8a:ca:31:
         ed:ea:a3:bc:9a:e2:8b:16:18:a5:bd:c9:43:20:05:dd:a8:ad:
         73:ee:f7:10:87:f8:8a:79:05:91:23:64:77:49:36:53:81:d7:
         1c:68:c2:01:1f:29:41:5b:09:99:7f:bf:a2:71:10:9d:4f:91:
         5c:9a:67:d4:64:11:c3:95:84:ec:d7:84:06:45:6c:5a:9c:36:
         aa:b7:ac:04:6f:a4:ee:19:93:2a:61:15:06:7a:a7:20:85:c2:
         25:f2:f6:79:91:90:ad:39:ba:14:17:74:2a:fe:b5:d6:db:29:
         a0:c7:96:45:17:ec:ae:72:30:b0:60:2d:cf:45:6e:75:dc:3f:
         66:c3:3c:77:62:cb:34:59:5f:58:54:cd:da:c5:bb:ac:08:d9:
         51:69:f2:23:28:01:2b:68:01:f2:77:46:04:ab:ac:fd:e9:4a:
         fd:bf:04:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPS/pl2sopI6G/Jzc7f3uid8C0QEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdDOUIzNkU1MkYxQkRERDg4QjEzMEYzMkIyOUU5MjMw
QTBGQUQ0MzAeFw0yNDA0MDgxNjE3MzlaFw0yNTA0MDcxNjIyMzlaMDMxMTAvBgNV
BAMTKEI4QTU2QUQzMTM3MzQwNjBDMDQxRjczNjFEMjAyNTM5OEJERDI5M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObETWd0giVGSHThfndkwopLCT
lwOS/Kc53akDE3yNQgF+DUv0A9DO3YFECSaeBdrNAMMtt15pCl5hZ7yWT+Jr12BX
vmlxE375hYYyJHacH9zwBhnastwcALZSm5KCKVx7W8pTPeM4hdjFI98MPJR1ZOVH
Vk2Lak32johY/TNym6STSrUOPN3p5HBb0kjwb8AayBbQfCBiGM7uAIxixtqrD5jJ
YuA6iMiZyScQObVvmFjnCwJSOwRHU6VnbGjAH80+SGgMn4N/go43Pmr2sL0mlnBY
4hCBEtmSP7fyfpVsluEDvqiyyBmvKMwcHXVYS/sNAuhzon2/U4wURAax8u4fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuKVq0xNzQGDAQfc2HSAlOYvdKTswHwYDVR0j
BBgwFoAUZ8mzblLxvd2IsTDzKynpIwoPrUMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0
Y1QvMS82N0M5QjM2RTUyRjFCREREODhCMTMwRjMyQjI5RTkyMzBBMEZBRDQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3QzlCMzZFNTJGMUJEREQ4
OEIxMzBGMzJCMjlFOTIzMEEwRkFENDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnMlRTd3RUbjRnaUNmc1E4SlpXRlNEZDRNWnNxNTY0clZGQ2Z0bVBCNGNULzEv
MzQzNTJlMzIzMjM1MmUzMjM1MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4fwwDQYJKoZIhvcNAQELBQADggEBACU+XB++
cCD60+Bnbq380Sb0ghrirb9l+aIoRHZ9o1XdILUtLQFwom+apAPrbCPD3sGA8XN0
655yfktL9PJPGzRYNRF9dRJ5YJlhGoqZlPiKxxLmdCBAJIrKMe3qo7ya4osWGKW9
yUMgBd2orXPu9xCH+Ip5BZEjZHdJNlOB1xxowgEfKUFbCZl/v6JxEJ1PkVyaZ9Rk
EcOVhOzXhAZFbFqcNqq3rARvpO4ZkyphFQZ6pyCFwiXy9nmRkK05uhQXdCr+tdbb
KaDHlkUX7K5yMLBgLc9FbnXcP2bDPHdiyzRZX1hUzdrFu6wI2VFp8iMoAStoAfJ3
RgSrrP3pSv2/BI0=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org