Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/34352e3233342e31382e302f32342d3234203d3e20323637333336.roa
File:                     34352e3233342e31382e302f32342d3234203d3e20323637333336.roa (raw, json)
Hash identifier:          8sH115XqInO9J6ES92Jkb7lPn38excKpSzGL4hTbn6k=
Subject key identifier:   CE:96:F5:20:20:1A:1B:E2:16:B3:6A:27:5E:E5:85:79:A2:67:81:9F
Certificate issuer:       /CN=B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D
Certificate serial:       7BA31C03A67C7D91D04BDDE835FF3AC2CC4FCF1F
Authority key identifier: B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/34352e3233342e31382e302f32342d3234203d3e20323637333336.roa
Signing time:             Tue 18 Apr 2023 18:12:07 +0000
ROA not before:           Tue 18 Apr 2023 18:07:07 +0000
ROA not after:            Tue 16 Apr 2024 18:12:07 +0000
asID:                     267336
IP address blocks:        45.234.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a3:1c:03:a6:7c:7d:91:d0:4b:dd:e8:35:ff:3a:c2:cc:4f:cf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D
        Validity
            Not Before: Apr 18 18:07:07 2023 GMT
            Not After : Apr 16 18:12:07 2024 GMT
        Subject: CN=CE96F520201A1BE216B36A275EE58579A267819F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:1f:2a:2c:61:ff:54:17:b4:80:c2:3b:80:
                    0c:46:01:04:c1:31:ca:7f:1f:85:0e:9b:b0:17:90:
                    68:7b:8c:a9:9e:46:a5:89:e9:a4:2b:e3:2e:7e:45:
                    d8:81:92:bf:ff:f5:d5:a5:0b:c3:29:38:ad:18:00:
                    45:92:98:25:ec:c4:4d:b5:e9:79:4e:60:6e:6b:c6:
                    5f:3a:16:04:dd:e5:61:cc:21:d5:b1:17:e9:04:37:
                    89:e3:85:21:3a:7a:a4:29:97:51:70:d2:c9:7d:37:
                    e9:80:7a:29:40:17:7f:ef:a5:0c:6a:e3:b2:83:a3:
                    7d:9f:93:b9:69:a0:4c:f8:2c:ae:e8:20:d9:ff:10:
                    7a:d5:56:ff:6a:43:cd:86:6c:84:27:66:da:ce:7a:
                    28:21:d4:64:13:4d:3d:17:c8:70:f6:f0:e8:36:39:
                    63:d8:aa:75:c2:96:52:0c:0a:42:cd:f4:02:7a:a2:
                    bb:5c:c8:d9:e3:8f:fe:2e:01:8e:c3:72:ee:b7:ed:
                    91:52:6d:f2:b2:d6:48:6e:e2:6b:05:79:a3:a8:54:
                    b2:00:63:e8:e0:19:50:8c:5c:f3:44:da:55:64:ad:
                    07:88:a0:a6:7a:9c:55:77:73:bf:93:ed:b6:97:68:
                    3b:81:6c:fb:06:2b:30:41:18:0d:23:da:7e:14:96:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:96:F5:20:20:1A:1B:E2:16:B3:6A:27:5E:E5:85:79:A2:67:81:9F
            X509v3 Authority Key Identifier:
                keyid:B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/34352e3233342e31382e302f32342d3234203d3e20323637333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:fb:99:8a:ca:00:b7:e7:05:80:2e:c6:c9:bc:05:41:0c:ea:
         0c:50:2c:c0:af:e2:bd:a1:f1:f6:bc:96:c6:fa:ef:d8:f4:84:
         60:99:97:89:a1:f8:96:89:88:42:cd:61:ae:5f:67:f3:02:bb:
         62:53:6b:74:8f:fa:8c:6b:59:f7:de:99:b6:32:1e:70:19:13:
         d3:30:f6:00:e0:2f:09:f3:32:bb:5a:1a:46:ff:08:ae:ab:a8:
         5e:ff:cd:c9:af:b2:fa:d2:1f:70:86:f7:02:84:47:88:3b:87:
         c5:93:17:4d:cc:83:94:8f:27:86:e6:7c:7a:cb:e0:38:88:59:
         d5:e9:91:80:af:97:ea:34:2f:55:48:f5:dd:7a:d3:64:2b:ce:
         c5:13:16:08:9a:db:1b:de:b8:4c:d3:b7:1f:20:4b:7f:3b:d6:
         e9:09:4d:cf:6a:cf:2c:b4:6e:22:09:da:0d:97:49:47:07:80:
         9e:cf:f8:ef:f7:63:f8:cc:b7:4b:8e:ff:23:3f:c7:60:c7:a4:
         2f:ff:81:2b:09:72:b4:67:3c:46:86:21:d8:3f:53:4e:1e:44:
         e7:dc:c7:2f:49:ee:ec:9a:e3:37:c7:dd:a1:e1:2b:2a:08:79:
         e5:fb:e7:8d:2d:0a:54:b0:38:64:fa:d4:10:4d:11:49:0b:c0:
         24:17:b2:f2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe6McA6Z8fZHQS93oNf86wsxPzx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZCRDc0RjRBMURGNjBGQ0MzREI0ODY3Q0ExQ0U4NEVG
NjQzODg5RDAeFw0yMzA0MTgxODA3MDdaFw0yNDA0MTYxODEyMDdaMDMxMTAvBgNV
BAMTKENFOTZGNTIwMjAxQTFCRTIxNkIzNkEyNzVFRTU4NTc5QTI2NzgxOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kB8qLGH/VBe0gMI7gAxGAQTB
Mcp/H4UOm7AXkGh7jKmeRqWJ6aQr4y5+RdiBkr//9dWlC8MpOK0YAEWSmCXsxE21
6XlOYG5rxl86FgTd5WHMIdWxF+kEN4njhSE6eqQpl1Fw0sl9N+mAeilAF3/vpQxq
47KDo32fk7lpoEz4LK7oINn/EHrVVv9qQ82GbIQnZtrOeigh1GQTTT0XyHD28Og2
OWPYqnXCllIMCkLN9AJ6ortcyNnjj/4uAY7Dcu637ZFSbfKy1khu4msFeaOoVLIA
Y+jgGVCMXPNE2lVkrQeIoKZ6nFV3c7+T7baXaDuBbPsGKzBBGA0j2n4UltAxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzpb1ICAaG+IWs2onXuWFeaJngZ8wHwYDVR0j
BBgwFoAUtr109KHfYPzD20hnyhzoTvZDiJ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTcxdkx1QjNieVc4R24yQ2I0cEppUnU2d01RVlBFcGYzNW1FQzk1M0hq
dUwvMS9CNkJENzRGNEExREY2MEZDQzNEQjQ4NjdDQTFDRTg0RUY2NDM4ODlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I2QkQ3NEY0QTFERjYwRkND
M0RCNDg2N0NBMUNFODRFRjY0Mzg4OUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U3MXZMdUIzYnlXOEduMkNiNHBKaVJ1NndNUVZQRXBmMzVtRUM5NTNIanVMLzEv
MzQzNTJlMzIzMzM0MmUzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeoSMA0GCSqGSIb3DQEBCwUAA4IBAQCe+5mKygC3
5wWALsbJvAVBDOoMUCzAr+K9ofH2vJbG+u/Y9IRgmZeJofiWiYhCzWGuX2fzArti
U2t0j/qMa1n33pm2Mh5wGRPTMPYA4C8J8zK7WhpG/wiuq6he/83Jr7L60h9whvcC
hEeIO4fFkxdNzIOUjyeG5nx6y+A4iFnV6ZGAr5fqNC9VSPXdetNkK87FExYImtsb
3rhM07cfIEt/O9bpCU3Pas8stG4iCdoNl0lHB4Cez/jv92P4zLdLjv8jP8dgx6Qv
/4ErCXK0ZzxGhiHYP1NOHkTn3McvSe7smuM3x92h4SsqCHnl++eNLQpUsDhk+tQQ
TRFJC8AkF7Ly
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org