Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/1/34352e3232352e31392e302f32342d3234203d3e20323636393230.roa
File:                     34352e3232352e31392e302f32342d3234203d3e20323636393230.roa (raw, json)
Hash identifier:          sCUxPT8zMqJYIy8TJAccLVMFE14u7y8uIA05Ra2hqG8=
Subject key identifier:   D8:7B:94:C3:C7:69:89:83:27:DA:69:E0:0D:B7:C7:05:4E:2C:46:7E
Certificate issuer:       /CN=FCA52310B4AD5095E04BE220F9C1451383E29EB9
Certificate serial:       053A47057C626134BFC7BC90EBC616ED7EAA13AE
Authority key identifier: FC:A5:23:10:B4:AD:50:95:E0:4B:E2:20:F9:C1:45:13:83:E2:9E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCA52310B4AD5095E04BE220F9C1451383E29EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/1/34352e3232352e31392e302f32342d3234203d3e20323636393230.roa
Signing time:             Thu 28 Mar 2024 18:53:50 +0000
ROA not before:           Thu 28 Mar 2024 18:48:50 +0000
ROA not after:            Thu 27 Mar 2025 18:53:50 +0000
asID:                     266920
IP address blocks:        45.225.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3a:47:05:7c:62:61:34:bf:c7:bc:90:eb:c6:16:ed:7e:aa:13:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCA52310B4AD5095E04BE220F9C1451383E29EB9
        Validity
            Not Before: Mar 28 18:48:50 2024 GMT
            Not After : Mar 27 18:53:50 2025 GMT
        Subject: CN=D87B94C3C769898327DA69E00DB7C7054E2C467E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:3c:68:c5:19:89:df:42:01:a9:fd:11:cd:
                    34:a8:f8:77:e5:35:7d:01:4a:0a:41:ba:f3:98:ea:
                    96:23:70:cd:34:da:ea:15:3f:f3:8c:24:f5:da:82:
                    79:b8:96:48:f2:b1:ec:d0:52:ca:7b:e1:78:2d:12:
                    7c:9d:14:e1:5b:33:49:b1:ba:da:69:65:93:bc:de:
                    2a:14:d3:a5:d5:e4:10:98:02:dc:d8:58:99:3d:29:
                    42:83:04:9a:50:e9:c7:d8:ea:f3:e7:82:20:71:53:
                    ba:4a:5d:b3:d2:88:f8:27:74:7b:8f:5d:0c:62:b8:
                    06:18:ef:d1:80:8e:ef:64:6a:13:d9:9c:2d:c5:94:
                    6f:18:d1:df:eb:85:ef:f4:cc:3e:4e:c8:35:81:64:
                    aa:7f:f0:76:83:cd:fe:b2:71:b7:4f:78:9b:b2:21:
                    ea:9e:c5:00:d4:99:3e:e1:e3:2a:c3:2d:29:52:52:
                    75:9d:bd:aa:4b:ea:39:ec:22:8a:a4:ca:6b:91:9d:
                    8d:6e:37:b0:31:f2:0a:d7:23:10:c2:3a:e4:c1:48:
                    66:bd:f6:bd:f6:57:f5:14:a2:60:42:77:4e:34:48:
                    1c:06:64:1b:04:ee:69:ae:5e:eb:1b:0d:53:f4:13:
                    a4:c1:ed:98:17:9f:16:26:7f:8b:ec:3a:0e:11:3b:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7B:94:C3:C7:69:89:83:27:DA:69:E0:0D:B7:C7:05:4E:2C:46:7E
            X509v3 Authority Key Identifier:
                keyid:FC:A5:23:10:B4:AD:50:95:E0:4B:E2:20:F9:C1:45:13:83:E2:9E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/1/FCA52310B4AD5095E04BE220F9C1451383E29EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCA52310B4AD5095E04BE220F9C1451383E29EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/1/34352e3232352e31392e302f32342d3234203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:28:2c:0d:5d:74:77:22:4c:9f:bd:da:0b:8d:84:5b:7e:09:
         51:25:5c:0d:53:c5:26:ba:ab:1b:14:f6:02:8f:da:be:9a:53:
         f0:19:2a:6a:93:b5:c8:a7:da:bd:71:cd:cd:68:42:65:e9:78:
         fc:ed:76:7f:f7:de:13:ea:64:01:91:d4:de:5d:29:2c:3e:d6:
         15:4e:53:50:b5:93:b7:92:c0:16:0d:8a:66:4c:7e:7a:f5:98:
         f4:02:9d:6b:9d:00:87:9b:f0:00:85:02:7e:c0:87:43:ae:e1:
         d3:c3:8b:59:5d:6a:54:2c:36:ce:ca:96:2a:06:06:33:bb:75:
         e6:ed:14:07:cf:c4:1a:51:ed:2e:ca:28:d6:7a:1d:50:b9:30:
         a4:cf:03:82:28:ab:0f:ad:da:db:6b:44:f5:b9:c2:6e:94:eb:
         db:b7:3b:2b:51:ef:d8:23:9d:e1:ad:ec:2c:a3:fa:75:0c:fe:
         79:39:d9:f8:3d:6a:50:55:6c:b4:db:59:29:1d:c9:63:c5:14:
         ea:45:26:2a:7c:84:94:5c:f0:c6:14:08:ac:c6:3d:b4:dd:83:
         70:a1:38:64:fc:ed:60:6e:ca:9a:f9:e6:8b:2f:1e:b7:35:4c:
         82:19:61:3d:a1:82:da:11:97:aa:c3:94:36:89:81:c9:76:f4:
         b8:05:3c:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBTpHBXxiYTS/x7yQ68YW7X6qE64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNBNTIzMTBCNEFENTA5NUUwNEJFMjIwRjlDMTQ1MTM4
M0UyOUVCOTAeFw0yNDAzMjgxODQ4NTBaFw0yNTAzMjcxODUzNTBaMDMxMTAvBgNV
BAMTKEQ4N0I5NEMzQzc2OTg5ODMyN0RBNjlFMDBEQjdDNzA1NEUyQzQ2N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWjxoxRmJ30IBqf0RzTSo+Hfl
NX0BSgpBuvOY6pYjcM002uoVP/OMJPXagnm4lkjysezQUsp74XgtEnydFOFbM0mx
utppZZO83ioU06XV5BCYAtzYWJk9KUKDBJpQ6cfY6vPngiBxU7pKXbPSiPgndHuP
XQxiuAYY79GAju9kahPZnC3FlG8Y0d/rhe/0zD5OyDWBZKp/8HaDzf6ycbdPeJuy
IeqexQDUmT7h4yrDLSlSUnWdvapL6jnsIoqkymuRnY1uN7Ax8grXIxDCOuTBSGa9
9r32V/UUomBCd040SBwGZBsE7mmuXusbDVP0E6TB7ZgXnxYmf4vsOg4ROxuHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2HuUw8dpiYMn2mngDbfHBU4sRn4wHwYDVR0j
BBgwFoAU/KUjELStUJXgS+Ig+cFFE4PinrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhOWVdpM1pYWnFQRXJkUkY4WkRYRVpUeXNoR0E3Q0pEVHJSWjI2QW1h
Q0wvMS9GQ0E1MjMxMEI0QUQ1MDk1RTA0QkUyMjBGOUMxNDUxMzgzRTI5RUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDQTUyMzEwQjRBRDUwOTVF
MDRCRTIyMEY5QzE0NTEzODNFMjlFQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoTllXaTNaWFpxUEVyZFJGOFpEWEVaVHlzaEdBN0NKRFRyUloyNkFtYUNMLzEv
MzQzNTJlMzIzMjM1MmUzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzkzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeETMA0GCSqGSIb3DQEBCwUAA4IBAQC1KCwNXXR3
IkyfvdoLjYRbfglRJVwNU8UmuqsbFPYCj9q+mlPwGSpqk7XIp9q9cc3NaEJl6Xj8
7XZ/994T6mQBkdTeXSksPtYVTlNQtZO3ksAWDYpmTH569Zj0Ap1rnQCHm/AAhQJ+
wIdDruHTw4tZXWpULDbOypYqBgYzu3Xm7RQHz8QaUe0uyijWeh1QuTCkzwOCKKsP
rdrba0T1ucJulOvbtzsrUe/YI53hrewso/p1DP55Odn4PWpQVWy021kpHcljxRTq
RSYqfISUXPDGFAisxj203YNwoThk/O1gbsqa+eaLLx63NUyCGWE9oYLaEZeqw5Q2
iYHJdvS4BTxQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org