Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31392e302f32342d3234203d3e20323637313931.roa
File:                     34352e3233312e31392e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier:          VUF0sbQS5nGBvP0ymNZavAOgiAynRRD50GJKJ2gxmHc=
Subject key identifier:   59:57:1A:05:77:EA:BD:75:C4:5E:6B:E3:BD:94:90:52:1A:27:7F:A6
Certificate issuer:       /CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
Certificate serial:       7315D295A76E554B261FFFBDB63D0D5942A347EE
Authority key identifier: 48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31392e302f32342d3234203d3e20323637313931.roa
Signing time:             Fri 15 Dec 2023 20:35:30 +0000
ROA not before:           Fri 15 Dec 2023 20:30:30 +0000
ROA not after:            Fri 13 Dec 2024 20:35:30 +0000
asID:                     267191
IP address blocks:        45.231.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:15:d2:95:a7:6e:55:4b:26:1f:ff:bd:b6:3d:0d:59:42:a3:47:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
        Validity
            Not Before: Dec 15 20:30:30 2023 GMT
            Not After : Dec 13 20:35:30 2024 GMT
        Subject: CN=59571A0577EABD75C45E6BE3BD9490521A277FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:d2:84:10:35:7b:44:e1:c3:42:87:7e:49:
                    aa:ce:63:1d:f2:8f:1b:94:ee:d2:33:7c:ff:f1:40:
                    ee:6f:37:c1:7c:ad:66:40:ea:4b:f9:84:8b:19:cd:
                    07:4d:99:4d:49:9d:54:6e:76:d0:86:95:dc:ab:ab:
                    a2:7f:3d:a4:43:31:d3:6c:cc:bb:7e:23:29:0d:87:
                    a9:2b:14:89:89:6d:da:60:2c:d1:1f:f8:37:8e:43:
                    a5:fb:6e:ed:9d:19:4f:10:8d:04:71:26:23:d2:fb:
                    db:cd:e3:1d:8a:e3:d1:60:d2:ac:e9:c7:8b:d5:8e:
                    00:db:c0:47:d7:33:c6:e5:73:55:b5:8d:44:61:91:
                    8e:b8:98:c4:70:b9:b7:bb:94:a5:68:b9:bc:8a:88:
                    dd:50:73:78:de:76:54:00:0b:e2:8e:db:b5:6e:3e:
                    a4:75:ac:66:08:09:15:82:b2:d6:8c:68:fe:7c:be:
                    15:a2:01:cc:bf:a1:94:8c:11:31:bd:28:42:23:91:
                    35:93:b5:57:11:e5:7d:63:7b:3d:85:93:da:db:8c:
                    04:66:95:0d:24:81:c1:e9:b7:fe:03:63:8d:36:9e:
                    89:bb:c3:05:83:4e:32:3e:8f:03:ba:36:35:8a:1d:
                    78:fd:df:74:55:79:1a:f5:ae:0d:17:76:61:78:31:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:57:1A:05:77:EA:BD:75:C4:5E:6B:E3:BD:94:90:52:1A:27:7F:A6
            X509v3 Authority Key Identifier:
                keyid:48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31392e302f32342d3234203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:68:97:9a:e5:ac:45:90:f6:c3:b0:de:77:54:ec:c5:41:2c:
         b5:d0:db:63:05:d6:4e:d3:fe:c4:dc:12:16:05:18:0c:02:e4:
         81:f5:89:36:77:44:dd:2e:c9:d4:a2:0d:0d:6f:0d:e6:ad:59:
         9b:d7:71:2c:a8:6c:81:81:e9:19:87:34:c9:7d:d8:d6:75:6b:
         3f:40:22:64:6e:f4:43:8e:46:1b:5c:d9:8e:56:b1:20:ec:b0:
         27:81:f6:be:5a:a5:4f:2c:38:a7:7b:c2:1d:61:48:95:92:87:
         c0:0d:0a:05:e8:ec:2f:64:08:bc:86:a4:76:64:0c:5b:4d:07:
         25:7c:ce:76:4f:2d:e5:ad:3b:db:62:c2:c2:7f:94:b6:ac:fa:
         d5:8d:23:4e:99:42:cc:3b:21:b1:71:c7:6d:ce:d4:44:5e:99:
         4f:ec:14:64:f6:77:fe:80:3f:b5:69:18:89:69:f5:6a:fd:23:
         56:97:59:5b:5f:24:59:53:03:7d:4c:c9:82:10:c9:74:23:fe:
         37:a7:23:fb:1e:ff:0f:96:14:1b:d5:de:f5:fc:86:79:59:89:
         2e:80:37:3c:5e:0e:c8:52:8f:a7:7d:66:1a:a0:84:d4:ab:8e:
         eb:fe:9f:72:a1:bd:54:94:2e:44:19:2d:4d:61:fc:93:06:3c:
         97:b2:d6:8e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcxXSladuVUsmH/+9tj0NWUKjR+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgyMkM2NjJCN0MwQTc1REExNUI1ODI3Qzg2MkUyQ0FE
RDQzNzFEMTAeFw0yMzEyMTUyMDMwMzBaFw0yNDEyMTMyMDM1MzBaMDMxMTAvBgNV
BAMTKDU5NTcxQTA1NzdFQUJENzVDNDVFNkJFM0JEOTQ5MDUyMUEyNzdGQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUAdKEEDV7ROHDQod+SarOYx3y
jxuU7tIzfP/xQO5vN8F8rWZA6kv5hIsZzQdNmU1JnVRudtCGldyrq6J/PaRDMdNs
zLt+IykNh6krFImJbdpgLNEf+DeOQ6X7bu2dGU8QjQRxJiPS+9vN4x2K49Fg0qzp
x4vVjgDbwEfXM8blc1W1jURhkY64mMRwube7lKVoubyKiN1Qc3jedlQAC+KO27Vu
PqR1rGYICRWCstaMaP58vhWiAcy/oZSMETG9KEIjkTWTtVcR5X1jez2Fk9rbjARm
lQ0kgcHpt/4DY402nom7wwWDTjI+jwO6NjWKHXj933RVeRr1rg0XdmF4MUP5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWVcaBXfqvXXEXmvjvZSQUhonf6YwHwYDVR0j
BBgwFoAUSCLGYrfAp12hW1gnyGLiyt1DcdEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtTbXQxZXlKWXlMVWpBQ1g4TFZrVFUxZktkQ3dkNjF3Vlh1VnZYU04y
OXQvMC80ODIyQzY2MkI3QzBBNzVEQTE1QjU4MjdDODYyRTJDQURENDM3MUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4MjJDNjYyQjdDMEE3NURB
MTVCNTgyN0M4NjJFMkNBREQ0MzcxRDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrU210MWV5Sll5TFVqQUNYOExWa1RVMWZLZEN3ZDYxd1ZYdVZ2WFNOMjl0LzAv
MzQzNTJlMzIzMzMxMmUzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALecTMA0GCSqGSIb3DQEBCwUAA4IBAQAyaJea5axF
kPbDsN53VOzFQSy10NtjBdZO0/7E3BIWBRgMAuSB9Yk2d0TdLsnUog0Nbw3mrVmb
13EsqGyBgekZhzTJfdjWdWs/QCJkbvRDjkYbXNmOVrEg7LAngfa+WqVPLDine8Id
YUiVkofADQoF6OwvZAi8hqR2ZAxbTQclfM52Ty3lrTvbYsLCf5S2rPrVjSNOmULM
OyGxccdtztREXplP7BRk9nf+gD+1aRiJafVq/SNWl1lbXyRZUwN9TMmCEMl0I/43
pyP7Hv8PlhQb1d71/IZ5WYkugDc8Xg7IUo+nfWYaoITUq47r/p9yob1UlC5EGS1N
YfyTBjyXstaO
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org