Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/34352e3136302e3138342e302f32332d3233203d3e20323638343231.roa
File:                     34352e3136302e3138342e302f32332d3233203d3e20323638343231.roa (raw, json)
Hash identifier:          1DVldwin87lUD0Xp2oQtyfjRm9CR0CLnDwNySGemuDk=
Subject key identifier:   37:61:6F:45:A9:28:05:1D:E4:98:80:D2:E3:7E:09:E2:5F:99:AD:A7
Certificate issuer:       /CN=CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E
Certificate serial:       1DA8A05393204ADEA9E9329960A5E1E466A9C942
Authority key identifier: CF:A5:D2:D3:1F:F7:C5:65:2C:6C:CC:8C:08:D9:F1:1E:F9:DE:CE:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/34352e3136302e3138342e302f32332d3233203d3e20323638343231.roa
Signing time:             Mon 22 May 2023 00:31:54 +0000
ROA not before:           Mon 22 May 2023 00:26:54 +0000
ROA not after:            Mon 20 May 2024 00:31:54 +0000
asID:                     268421
IP address blocks:        45.160.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a8:a0:53:93:20:4a:de:a9:e9:32:99:60:a5:e1:e4:66:a9:c9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E
        Validity
            Not Before: May 22 00:26:54 2023 GMT
            Not After : May 20 00:31:54 2024 GMT
        Subject: CN=37616F45A928051DE49880D2E37E09E25F99ADA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:84:77:0e:36:41:c8:0a:54:0b:fd:50:5e:
                    2d:88:af:80:99:27:f5:c2:4a:07:12:c6:d9:5c:ec:
                    b3:56:4e:a7:10:e0:ac:f9:75:ae:c4:72:d5:59:cd:
                    6e:64:d6:7c:62:1c:4b:11:be:90:4c:f3:80:02:9f:
                    c2:ec:de:52:89:3e:08:3a:a6:3b:e2:45:20:0c:a6:
                    cd:2f:b0:7d:0a:03:3c:35:4b:13:3e:00:96:77:31:
                    b5:ef:5f:6b:b6:8a:38:00:c0:b8:c8:72:41:1f:87:
                    e2:fe:cf:a8:e7:ae:56:4d:4a:9f:6f:b2:79:ac:53:
                    39:df:f6:c2:b9:21:8c:eb:ee:3e:12:1e:42:e3:05:
                    2f:0f:a6:1e:e6:62:84:8c:e5:d5:c4:2c:d3:38:29:
                    ac:04:41:01:8f:ef:82:25:45:40:6f:c4:34:52:68:
                    0a:b9:5b:b4:83:85:a1:77:21:08:e1:2a:ea:e0:f6:
                    ec:36:5e:2e:df:91:ba:a5:96:cf:de:52:2f:84:23:
                    a3:5b:0a:7e:58:66:1c:b7:63:fa:c5:7a:15:d2:08:
                    86:c7:7d:09:a7:b0:cc:1a:fc:e1:d0:6f:44:3f:fa:
                    63:0b:b9:72:94:4c:a7:05:ef:e9:df:10:9b:1e:35:
                    39:ed:67:85:da:4c:63:10:92:35:a3:cf:38:c6:cd:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:61:6F:45:A9:28:05:1D:E4:98:80:D2:E3:7E:09:E2:5F:99:AD:A7
            X509v3 Authority Key Identifier:
                keyid:CF:A5:D2:D3:1F:F7:C5:65:2C:6C:CC:8C:08:D9:F1:1E:F9:DE:CE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/34352e3136302e3138342e302f32332d3233203d3e20323638343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:b0:5f:48:b9:5e:9e:61:7a:e8:cb:12:d5:0f:02:60:fe:b5:
         7a:26:c2:32:ed:93:6d:ad:08:83:ce:ec:a2:ba:2e:41:67:30:
         85:a2:81:f0:36:99:b1:04:31:e7:7e:cb:44:eb:17:2d:dd:8b:
         e6:f8:dc:57:c6:ad:04:6e:07:c3:1c:44:35:dd:53:39:54:51:
         3c:37:0f:d9:c5:98:03:23:08:60:28:fd:1d:d0:f1:69:5d:97:
         36:18:11:3e:8f:5e:d5:46:df:2d:6f:08:63:43:3e:47:d6:38:
         c3:81:55:19:d7:f8:88:fe:a7:cd:24:e7:89:7b:c0:e3:84:6f:
         02:ea:74:72:66:65:af:75:55:8a:06:ba:92:34:99:a7:81:09:
         e0:cf:0c:86:bd:61:7f:3f:ff:70:40:30:2a:e6:f4:6a:cd:bd:
         2a:f9:29:cc:16:36:3f:f9:df:d5:9b:68:88:28:75:c4:62:1c:
         f9:e8:b5:32:94:c6:40:39:4b:47:c1:8e:56:2c:83:4f:2a:31:
         bb:52:07:17:fc:f5:21:98:6f:12:bd:0c:ea:3f:8f:bd:a8:b1:
         e8:0b:ff:3a:f4:01:42:a6:7e:56:f1:50:4d:79:21:86:15:a9:
         a8:e5:b7:37:3f:41:94:67:4d:fc:7b:f7:03:dc:a0:65:11:07:
         17:f9:d6:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHaigU5MgSt6p6TKZYKXh5GapyUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZBNUQyRDMxRkY3QzU2NTJDNkNDQzhDMDhEOUYxMUVG
OURFQ0U1RTAeFw0yMzA1MjIwMDI2NTRaFw0yNDA1MjAwMDMxNTRaMDMxMTAvBgNV
BAMTKDM3NjE2RjQ1QTkyODA1MURFNDk4ODBEMkUzN0UwOUUyNUY5OUFEQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+YR3DjZByApUC/1QXi2Ir4CZ
J/XCSgcSxtlc7LNWTqcQ4Kz5da7EctVZzW5k1nxiHEsRvpBM84ACn8Ls3lKJPgg6
pjviRSAMps0vsH0KAzw1SxM+AJZ3MbXvX2u2ijgAwLjIckEfh+L+z6jnrlZNSp9v
snmsUznf9sK5IYzr7j4SHkLjBS8Pph7mYoSM5dXELNM4KawEQQGP74IlRUBvxDRS
aAq5W7SDhaF3IQjhKurg9uw2Xi7fkbqlls/eUi+EI6NbCn5YZhy3Y/rFehXSCIbH
fQmnsMwa/OHQb0Q/+mMLuXKUTKcF7+nfEJseNTntZ4XaTGMQkjWjzzjGzX1NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUN2FvRakoBR3kmIDS434J4l+ZracwHwYDVR0j
BBgwFoAUz6XS0x/3xWUsbMyMCNnxHvnezl4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHduOWkxMk01MWhTWDFaR0N0Qzc0UURITVJRVFFjOXgyU0RoVDhZWXB6
V1ovMC9DRkE1RDJEMzFGRjdDNTY1MkM2Q0NDOEMwOEQ5RjExRUY5REVDRTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGQTVEMkQzMUZGN0M1NjUy
QzZDQ0M4QzA4RDlGMTFFRjlERUNFNUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3bjlpMTJNNTFoU1gxWkdDdEM3NFFESE1SUVRRYzl4MlNEaFQ4WVlweldaLzAv
MzQzNTJlMzEzNjMwMmUzMTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtoLgwDQYJKoZIhvcNAQELBQADggEBAGewX0i5
Xp5heujLEtUPAmD+tXomwjLtk22tCIPO7KK6LkFnMIWigfA2mbEEMed+y0TrFy3d
i+b43FfGrQRuB8McRDXdUzlUUTw3D9nFmAMjCGAo/R3Q8WldlzYYET6PXtVG3y1v
CGNDPkfWOMOBVRnX+Ij+p80k54l7wOOEbwLqdHJmZa91VYoGupI0maeBCeDPDIa9
YX8//3BAMCrm9GrNvSr5KcwWNj/539WbaIgodcRiHPnotTKUxkA5S0fBjlYsg08q
MbtSBxf89SGYbxK9DOo/j72osegL/zr0AUKmflbxUE15IYYVqajltzc/QZRnTfx7
9wPcoGURBxf51tY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org