Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33382e302f32342d3234203d3e20323636303830.roa
File:                     34352e352e33382e302f32342d3234203d3e20323636303830.roa (raw, json)
Hash identifier:          3bWkRQqOn7hXH52JU8SekkG0wuR7YmEZmjeklUX5sc4=
Subject key identifier:   A4:A7:20:20:CC:76:E9:84:E3:80:1C:E3:6F:20:BE:69:23:48:1D:CC
Certificate issuer:       /CN=332114655712F86B1FFE277DAA3E55AC2887C145
Certificate serial:       1DB651E0EAEEBFD0A69CBCCB3417ABCF60F35540
Authority key identifier: 33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33382e302f32342d3234203d3e20323636303830.roa
Signing time:             Fri 15 Sep 2023 12:42:16 +0000
ROA not before:           Fri 15 Sep 2023 12:37:16 +0000
ROA not after:            Fri 13 Sep 2024 12:42:16 +0000
asID:                     266080
IP address blocks:        45.5.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b6:51:e0:ea:ee:bf:d0:a6:9c:bc:cb:34:17:ab:cf:60:f3:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332114655712F86B1FFE277DAA3E55AC2887C145
        Validity
            Not Before: Sep 15 12:37:16 2023 GMT
            Not After : Sep 13 12:42:16 2024 GMT
        Subject: CN=A4A72020CC76E984E3801CE36F20BE6923481DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:76:da:2b:d2:59:96:83:2d:8c:a1:0f:a9:
                    52:45:a3:fd:8d:3b:40:a9:f9:fc:6e:91:4c:bd:5b:
                    7c:06:ad:02:aa:44:db:15:ed:ad:f0:7c:5b:16:61:
                    61:b7:ce:1d:02:35:4c:2b:2a:a8:89:54:85:11:c7:
                    f2:14:10:ea:4f:5e:c1:c4:f6:56:4d:93:4f:07:73:
                    84:c6:9a:d5:92:81:70:8a:4b:70:e9:32:c0:6f:23:
                    c5:e4:cd:6f:73:68:84:6e:6a:91:9d:d5:97:58:a4:
                    71:d9:1e:91:fe:fe:06:fd:63:8d:c5:f1:0e:6b:50:
                    eb:5c:5b:be:75:f2:db:62:da:e4:cc:4b:95:df:59:
                    7e:8e:91:dc:b9:6b:7e:01:db:40:2f:0b:0b:65:12:
                    c8:19:e6:06:f7:78:f2:ba:4c:69:ac:77:b4:35:62:
                    c2:3c:cd:3d:fb:d9:36:f5:a5:ea:45:42:04:e8:dd:
                    76:07:88:79:10:1f:fd:d1:82:0b:6d:f5:ea:ce:bc:
                    c0:d3:cb:7d:fd:f2:ee:e4:71:1f:8d:83:08:68:97:
                    5a:76:89:f2:b6:1d:54:05:82:4a:c6:85:1d:f1:21:
                    2f:ee:ee:17:fb:5f:f5:c1:ff:05:62:bc:7f:21:51:
                    67:a1:ea:2d:32:9a:09:db:b2:60:23:23:a2:e0:52:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:20:20:CC:76:E9:84:E3:80:1C:E3:6F:20:BE:69:23:48:1D:CC
            X509v3 Authority Key Identifier:
                keyid:33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/332114655712F86B1FFE277DAA3E55AC2887C145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33382e302f32342d3234203d3e20323636303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d9:af:db:27:09:7c:50:3b:a5:e5:d5:50:9c:38:95:28:b6:
         c4:04:eb:05:f5:ee:23:bf:84:c7:7f:49:5a:74:ab:1c:e8:00:
         5d:e1:1b:3b:ba:60:24:53:31:88:40:9d:63:20:42:f5:f9:7c:
         9d:b2:74:f4:cd:2a:15:d7:7a:fb:2c:dd:57:52:13:40:de:82:
         f7:c3:9a:cc:67:b5:8c:a1:2a:70:91:e4:10:33:f5:11:4c:8e:
         da:fc:36:47:20:2c:70:74:3c:7b:3d:e6:11:a9:ac:73:ba:e2:
         d6:27:21:40:8a:69:e9:87:f7:09:a8:04:43:1c:3f:c7:75:22:
         9a:0c:dd:42:24:d1:49:86:58:53:ca:5c:36:82:9e:83:9b:82:
         67:5d:30:3d:b7:99:2c:b9:df:2e:0d:a6:f5:2f:66:6a:4c:5b:
         1a:7e:65:37:63:52:87:d3:b1:af:70:3f:58:a3:df:04:0e:cd:
         2f:30:75:13:21:25:4f:a6:30:02:21:ac:0b:ad:f1:3f:df:8d:
         06:fd:d0:8c:d5:67:58:29:43:4b:18:fe:c1:2a:0b:fd:fe:26:
         ee:d6:de:a3:8c:48:e6:28:c1:bb:04:52:00:ca:02:b5:02:48:
         bc:14:64:d5:b8:82:0d:a5:0e:4c:98:03:0a:b7:9b:2e:96:3d:
         74:95:52:b8
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUHbZR4Oruv9CmnLzLNBerz2DzVUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMyMTE0NjU1NzEyRjg2QjFGRkUyNzdEQUEzRTU1QUMy
ODg3QzE0NTAeFw0yMzA5MTUxMjM3MTZaFw0yNDA5MTMxMjQyMTZaMDMxMTAvBgNV
BAMTKEE0QTcyMDIwQ0M3NkU5ODRFMzgwMUNFMzZGMjBCRTY5MjM0ODFEQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHnbaK9JZloMtjKEPqVJFo/2N
O0Cp+fxukUy9W3wGrQKqRNsV7a3wfFsWYWG3zh0CNUwrKqiJVIURx/IUEOpPXsHE
9lZNk08Hc4TGmtWSgXCKS3DpMsBvI8XkzW9zaIRuapGd1ZdYpHHZHpH+/gb9Y43F
8Q5rUOtcW7518tti2uTMS5XfWX6Okdy5a34B20AvCwtlEsgZ5gb3ePK6TGmsd7Q1
YsI8zT372Tb1pepFQgTo3XYHiHkQH/3Rggtt9erOvMDTy3398u7kcR+Ngwhol1p2
ifK2HVQFgkrGhR3xIS/u7hf7X/XB/wVivH8hUWeh6i0ymgnbsmAjI6LgUu49AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUpKcgIMx26YTjgBzjbyC+aSNIHcwwHwYDVR0j
BBgwFoAUMyEUZVcS+Gsf/id9qj5VrCiHwUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVo4RlJ2NTh4cHZ0RWdiSEpSRUpVYm5lZWVTZmRLc1BKSERaVHZobmt4
amcvMC8zMzIxMTQ2NTU3MTJGODZCMUZGRTI3N0RBQTNFNTVBQzI4ODdDMTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzMjExNDY1NTcxMkY4NkIx
RkZFMjc3REFBM0U1NUFDMjg4N0MxNDUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VaOEZSdjU4eHB2dEVnYkhKUkVKVWJuZWVlU2ZkS3NQSkhEWlR2aG5reGpnLzAv
MzQzNTJlMzUyZTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM4
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtBSYwDQYJKoZIhvcNAQELBQADggEBAHfZr9snCXxQO6Xl
1VCcOJUotsQE6wX17iO/hMd/SVp0qxzoAF3hGzu6YCRTMYhAnWMgQvX5fJ2ydPTN
KhXXevss3VdSE0DegvfDmsxntYyhKnCR5BAz9RFMjtr8NkcgLHB0PHs95hGprHO6
4tYnIUCKaemH9wmoBEMcP8d1IpoM3UIk0UmGWFPKXDaCnoObgmddMD23mSy53y4N
pvUvZmpMWxp+ZTdjUofTsa9wP1ij3wQOzS8wdRMhJU+mMAIhrAut8T/fjQb90IzV
Z1gpQ0sY/sEqC/3+Ju7W3qOMSOYowbsEUgDKArUCSLwUZNW4gg2lDkyYAwq3my6W
PXSVUrg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org