Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/34352e3232352e3234342e302f32342d3234203d3e20323636393734.roa
File:                     34352e3232352e3234342e302f32342d3234203d3e20323636393734.roa (raw, json)
Hash identifier:          0UMQB18mzYGA0X+e9leJiJAsOo6yHSEODeKHo7a1zjs=
Subject key identifier:   20:90:05:BC:23:D3:68:1B:93:9F:6D:CC:45:0F:44:F9:9D:BA:9B:F9
Certificate issuer:       /CN=0235C205EEA5BA52A9BB0B493973047D04CAAFB3
Certificate serial:       4FF65167F74885BCA6032C2DDF8A880E82D6A77E
Authority key identifier: 02:35:C2:05:EE:A5:BA:52:A9:BB:0B:49:39:73:04:7D:04:CA:AF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0235C205EEA5BA52A9BB0B493973047D04CAAFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/34352e3232352e3234342e302f32342d3234203d3e20323636393734.roa
Signing time:             Tue 11 Apr 2023 15:00:25 +0000
ROA not before:           Tue 11 Apr 2023 14:55:25 +0000
ROA not after:            Tue 09 Apr 2024 15:00:25 +0000
asID:                     266974
IP address blocks:        45.225.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f6:51:67:f7:48:85:bc:a6:03:2c:2d:df:8a:88:0e:82:d6:a7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0235C205EEA5BA52A9BB0B493973047D04CAAFB3
        Validity
            Not Before: Apr 11 14:55:25 2023 GMT
            Not After : Apr  9 15:00:25 2024 GMT
        Subject: CN=209005BC23D3681B939F6DCC450F44F99DBA9BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3c:f8:45:7b:cf:b4:28:80:b8:87:50:42:dd:
                    f9:ac:28:2b:ae:d6:98:91:b1:19:11:a7:58:41:5d:
                    10:cf:3a:13:ba:02:d2:e3:47:4e:54:2f:36:c4:54:
                    0b:9a:ad:98:e7:7f:bc:f3:71:c9:a1:bf:14:3e:f1:
                    93:88:b6:4d:04:f3:b9:38:ca:42:55:9a:e2:88:28:
                    39:58:73:86:29:67:01:2a:fc:c6:b0:2a:f5:57:e4:
                    e5:3e:ef:c5:62:16:7d:54:7e:05:ba:bb:da:f7:15:
                    85:2f:e8:35:8a:b9:3f:30:ab:37:27:18:0c:27:45:
                    d7:ad:e4:09:6f:4b:34:2e:a7:b7:5d:e2:0e:2c:80:
                    ad:0a:dc:94:e2:13:23:22:d6:7c:f0:43:d7:cb:38:
                    af:80:90:a5:3a:3b:8b:a6:f8:85:b1:07:8d:1e:96:
                    8e:64:c3:0b:9b:c2:16:a2:b1:43:c3:09:22:38:f7:
                    39:38:00:e1:62:7c:cc:1f:8a:31:ed:96:e5:db:42:
                    c9:83:ea:72:bc:90:42:a4:2a:5a:1f:a4:d2:3f:51:
                    40:e4:ca:e6:af:fd:45:2f:4e:45:13:cc:cb:ad:c2:
                    e3:47:af:b3:90:35:ad:6c:af:8e:48:4d:1a:3b:d7:
                    ab:f0:a2:21:26:0b:d5:28:15:53:23:e4:56:fa:4e:
                    de:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:90:05:BC:23:D3:68:1B:93:9F:6D:CC:45:0F:44:F9:9D:BA:9B:F9
            X509v3 Authority Key Identifier:
                keyid:02:35:C2:05:EE:A5:BA:52:A9:BB:0B:49:39:73:04:7D:04:CA:AF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/0235C205EEA5BA52A9BB0B493973047D04CAAFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0235C205EEA5BA52A9BB0B493973047D04CAAFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/34352e3232352e3234342e302f32342d3234203d3e20323636393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:26:75:9b:00:68:95:7d:51:6c:bb:f7:cf:99:87:aa:2d:68:
         45:e5:03:7d:42:3e:2b:65:c2:5c:27:b3:3d:2c:2f:3d:19:e7:
         15:d2:b2:b0:ae:f2:a5:20:00:99:62:a9:51:67:af:a7:9c:43:
         e9:f4:77:6a:0e:97:2b:48:e8:fe:3e:a1:47:c7:1e:ca:41:b7:
         c1:7c:96:40:ef:b0:5f:9b:d3:92:41:83:c8:14:74:fe:bf:87:
         4b:99:be:60:d8:5a:6f:d5:4f:1e:5b:11:82:dd:b4:34:a2:91:
         1d:fb:2a:0b:fd:ca:e4:85:92:d0:32:c7:c6:96:b8:65:23:4f:
         03:64:5b:49:56:17:59:4a:d8:76:0f:ba:e0:97:39:1d:d5:61:
         7a:ad:b0:13:52:e6:c4:d7:21:ab:48:9a:f1:bc:b1:67:30:4e:
         58:70:7e:f5:56:9e:6b:df:13:81:48:e8:e8:48:40:0c:f0:25:
         80:1f:ef:2b:15:36:d6:93:19:27:f3:16:bb:7c:ff:a4:b4:dc:
         1d:75:be:59:b4:a1:c4:c2:ec:e3:29:77:68:0a:cc:61:03:75:
         f5:4e:b0:d3:07:ce:64:05:e9:48:d0:a0:e5:6e:ad:cd:56:5f:
         8d:12:0f:bc:3a:ef:ef:68:84:1a:d7:4f:f9:9b:85:1b:d8:33:
         8e:44:d4:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT/ZRZ/dIhbymAywt34qIDoLWp34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIzNUMyMDVFRUE1QkE1MkE5QkIwQjQ5Mzk3MzA0N0Qw
NENBQUZCMzAeFw0yMzA0MTExNDU1MjVaFw0yNDA0MDkxNTAwMjVaMDMxMTAvBgNV
BAMTKDIwOTAwNUJDMjNEMzY4MUI5MzlGNkRDQzQ1MEY0NEY5OURCQTlCRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwPPhFe8+0KIC4h1BC3fmsKCuu
1piRsRkRp1hBXRDPOhO6AtLjR05ULzbEVAuarZjnf7zzccmhvxQ+8ZOItk0E87k4
ykJVmuKIKDlYc4YpZwEq/MawKvVX5OU+78ViFn1UfgW6u9r3FYUv6DWKuT8wqzcn
GAwnRdet5AlvSzQup7dd4g4sgK0K3JTiEyMi1nzwQ9fLOK+AkKU6O4um+IWxB40e
lo5kwwubwhaisUPDCSI49zk4AOFifMwfijHtluXbQsmD6nK8kEKkKlofpNI/UUDk
yuav/UUvTkUTzMutwuNHr7OQNa1sr45ITRo716vwoiEmC9UoFVMj5Fb6Tt4DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIJAFvCPTaBuTn23MRQ9E+Z26m/kwHwYDVR0j
BBgwFoAUAjXCBe6lulKpuwtJOXMEfQTKr7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUhEYWN2VXFMclRZWndGQWRDaEtnUDV4QWZHMUZ5ZkRIZXJFVTl5RGFB
anEvMC8wMjM1QzIwNUVFQTVCQTUyQTlCQjBCNDkzOTczMDQ3RDA0Q0FBRkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyMzVDMjA1RUVBNUJBNTJB
OUJCMEI0OTM5NzMwNDdEMDRDQUFGQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VIRGFjdlVxTHJUWVp3RkFkQ2hLZ1A1eEFmRzFGeWZESGVyRVU5eURhQWpxLzAv
MzQzNTJlMzIzMjM1MmUzMjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4fQwDQYJKoZIhvcNAQELBQADggEBAF8mdZsA
aJV9UWy798+Zh6otaEXlA31CPitlwlwnsz0sLz0Z5xXSsrCu8qUgAJliqVFnr6ec
Q+n0d2oOlytI6P4+oUfHHspBt8F8lkDvsF+b05JBg8gUdP6/h0uZvmDYWm/VTx5b
EYLdtDSikR37Kgv9yuSFktAyx8aWuGUjTwNkW0lWF1lK2HYPuuCXOR3VYXqtsBNS
5sTXIatImvG8sWcwTlhwfvVWnmvfE4FI6OhIQAzwJYAf7ysVNtaTGSfzFrt8/6S0
3B11vlm0ocTC7OMpd2gKzGEDdfVOsNMHzmQF6UjQoOVurc1WX40SD7w67+9ohBrX
T/mbhRvYM45E1CY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org