Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130342e302f32322d3234203d3e20323637333537.roa
File:                     34352e3233342e3130342e302f32322d3234203d3e20323637333537.roa (raw, json)
Hash identifier:          wWsPxSQNeK/Wdi+hmkCofG3KbgylWXm0ZyElV5oez1U=
Subject key identifier:   31:DC:9E:03:84:C9:55:39:87:49:D3:EB:60:BE:4E:F8:7B:12:FE:93
Certificate issuer:       /CN=84F3B80D33C175446949AD1A64A94D5860E586A9
Certificate serial:       0A53C9D1338C31A4F7CA08AAA7E45088365CAD18
Authority key identifier: 84:F3:B8:0D:33:C1:75:44:69:49:AD:1A:64:A9:4D:58:60:E5:86:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84F3B80D33C175446949AD1A64A94D5860E586A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130342e302f32322d3234203d3e20323637333537.roa
Signing time:             Fri 26 Jan 2024 12:51:50 +0000
ROA not before:           Fri 26 Jan 2024 12:46:50 +0000
ROA not after:            Fri 24 Jan 2025 12:51:50 +0000
asID:                     267357
IP address blocks:        45.234.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:53:c9:d1:33:8c:31:a4:f7:ca:08:aa:a7:e4:50:88:36:5c:ad:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F3B80D33C175446949AD1A64A94D5860E586A9
        Validity
            Not Before: Jan 26 12:46:50 2024 GMT
            Not After : Jan 24 12:51:50 2025 GMT
        Subject: CN=31DC9E0384C955398749D3EB60BE4EF87B12FE93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:cc:14:b5:c7:62:5b:8a:35:da:77:47:aa:
                    05:59:32:be:63:10:5c:66:6c:37:57:7c:a2:90:d1:
                    a2:c5:7c:f6:49:2e:ea:6d:79:04:7f:47:d8:f9:be:
                    85:22:37:f6:13:79:66:12:61:fb:4c:bd:e8:d0:72:
                    39:4d:26:28:dc:a7:89:d4:00:ad:a3:d6:b9:01:85:
                    74:89:98:b7:b8:a6:c8:b8:71:ad:22:3a:8f:2a:8a:
                    55:3f:d8:2e:04:aa:8b:85:2b:af:45:70:9a:cc:ac:
                    df:28:dd:d2:bd:28:b5:2d:99:3c:32:fe:b8:e0:e6:
                    76:4f:89:d4:85:60:e0:e9:8a:a5:53:1e:5e:65:12:
                    52:70:3e:54:11:ef:e1:fd:19:56:02:b4:1c:3a:71:
                    ac:68:b1:82:c2:ce:2e:d7:de:50:d0:6a:f6:41:ae:
                    c6:4f:62:6d:d1:cf:a4:e0:0d:7b:b1:00:2b:32:80:
                    4e:93:b7:39:a1:dc:11:87:f3:03:67:9e:95:d3:ed:
                    2f:c6:e5:97:93:bf:0f:56:2f:eb:2c:b4:7f:1f:db:
                    bf:6a:03:33:d5:fa:b3:ab:53:8d:f0:27:7f:df:af:
                    6f:fc:24:ce:00:c9:42:af:7e:bb:10:64:a2:68:d2:
                    3b:0f:ca:c7:56:b8:22:d0:25:70:e6:8c:d0:9d:23:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DC:9E:03:84:C9:55:39:87:49:D3:EB:60:BE:4E:F8:7B:12:FE:93
            X509v3 Authority Key Identifier:
                keyid:84:F3:B8:0D:33:C1:75:44:69:49:AD:1A:64:A9:4D:58:60:E5:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/84F3B80D33C175446949AD1A64A94D5860E586A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84F3B80D33C175446949AD1A64A94D5860E586A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130342e302f32322d3234203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:b5:3e:36:c8:b5:72:30:e5:a1:a9:69:73:d3:cc:cf:dc:
         bc:9b:9b:af:fe:bc:a8:3c:ae:a1:ca:5e:07:7b:f5:b3:93:a0:
         53:19:02:fe:3a:92:d3:53:f4:cf:47:20:db:73:7e:69:ce:9e:
         00:8e:58:3e:80:e1:7c:8c:fb:34:e4:3d:7a:db:12:93:02:1d:
         b0:19:fa:93:6f:59:31:b1:25:cd:1a:90:3a:53:6e:eb:da:4b:
         ad:b2:0c:a9:ce:d5:a0:11:a2:29:94:9a:4b:a2:78:8f:00:7a:
         c5:3e:47:20:96:48:23:75:db:3d:cb:32:20:80:73:fb:cb:81:
         1c:6f:b0:73:5d:20:04:dd:45:ab:00:39:2c:c0:7c:7b:61:59:
         27:68:37:63:69:49:61:43:c1:af:39:4b:18:25:e3:c7:18:0f:
         5f:e5:4e:7c:79:c5:45:2e:3d:90:11:9c:08:24:c4:e8:c9:c4:
         af:e9:86:d2:da:7d:65:bc:8b:80:b9:93:35:41:95:8a:24:04:
         26:58:eb:fa:5b:37:77:83:cd:7a:0a:7c:32:02:4e:1b:b2:50:
         eb:d5:14:e3:39:c1:25:f1:97:51:25:03:37:75:01:30:09:cf:
         3d:f9:74:56:41:b5:aa:e7:35:42:f1:76:9a:9a:cd:94:66:19:
         6a:16:dc:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUClPJ0TOMMaT3ygiqp+RQiDZcrRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRGM0I4MEQzM0MxNzU0NDY5NDlBRDFBNjRBOTRENTg2
MEU1ODZBOTAeFw0yNDAxMjYxMjQ2NTBaFw0yNTAxMjQxMjUxNTBaMDMxMTAvBgNV
BAMTKDMxREM5RTAzODRDOTU1Mzk4NzQ5RDNFQjYwQkU0RUY4N0IxMkZFOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpWswUtcdiW4o12ndHqgVZMr5j
EFxmbDdXfKKQ0aLFfPZJLupteQR/R9j5voUiN/YTeWYSYftMvejQcjlNJijcp4nU
AK2j1rkBhXSJmLe4psi4ca0iOo8qilU/2C4EqouFK69FcJrMrN8o3dK9KLUtmTwy
/rjg5nZPidSFYODpiqVTHl5lElJwPlQR7+H9GVYCtBw6caxosYLCzi7X3lDQavZB
rsZPYm3Rz6TgDXuxACsygE6Ttzmh3BGH8wNnnpXT7S/G5ZeTvw9WL+sstH8f279q
AzPV+rOrU43wJ3/fr2/8JM4AyUKvfrsQZKJo0jsPysdWuCLQJXDmjNCdI+gpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMdyeA4TJVTmHSdPrYL5O+HsS/pMwHwYDVR0j
BBgwFoAUhPO4DTPBdURpSa0aZKlNWGDlhqkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTZKUnVycnlCVHpVS2dpNVViVU5KUE1Qa0ptckt1TjJxSFBLVWlrWjM4
OVUvMC84NEYzQjgwRDMzQzE3NTQ0Njk0OUFEMUE2NEE5NEQ1ODYwRTU4NkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg0RjNCODBEMzNDMTc1NDQ2
OTQ5QUQxQTY0QTk0RDU4NjBFNTg2QTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U2SlJ1cnJ5QlR6VUtnaTVVYlVOSlBNUGtKbXJLdU4ycUhQS1Vpa1ozODlVLzAv
MzQzNTJlMzIzMzM0MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6mgwDQYJKoZIhvcNAQELBQADggEBAD/htT42
yLVyMOWhqWlz08zP3Lybm6/+vKg8rqHKXgd79bOToFMZAv46ktNT9M9HINtzfmnO
ngCOWD6A4XyM+zTkPXrbEpMCHbAZ+pNvWTGxJc0akDpTbuvaS62yDKnO1aARoimU
mkuieI8AesU+RyCWSCN12z3LMiCAc/vLgRxvsHNdIATdRasAOSzAfHthWSdoN2Np
SWFDwa85Sxgl48cYD1/lTnx5xUUuPZARnAgkxOjJxK/phtLafWW8i4C5kzVBlYok
BCZY6/pbN3eDzXoKfDICThuyUOvVFOM5wSXxl1ElAzd1ATAJzz35dFZBtarnNULx
dpqazZRmGWoW3NE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org