Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa
File:                     34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa (raw, json)
Hash identifier:          n1tLOLN8t3K0MBrDFpOGuFqjemoiTeQ2SomXsCwXNAs=
Subject key identifier:   30:D2:53:C0:AA:90:4B:C5:66:72:91:11:C2:6E:84:5D:38:82:D8:E2
Certificate issuer:       /CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
Certificate serial:       1174375F70E9EF05E5979CA6FD468D4441F09AE6
Authority key identifier: FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa
Signing time:             Thu 23 Nov 2023 03:42:16 +0000
ROA not before:           Thu 23 Nov 2023 03:37:16 +0000
ROA not after:            Thu 21 Nov 2024 03:42:16 +0000
asID:                     268057
IP address blocks:        45.168.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:74:37:5f:70:e9:ef:05:e5:97:9c:a6:fd:46:8d:44:41:f0:9a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
        Validity
            Not Before: Nov 23 03:37:16 2023 GMT
            Not After : Nov 21 03:42:16 2024 GMT
        Subject: CN=30D253C0AA904BC566729111C26E845D3882D8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:96:2c:47:c7:af:ff:61:23:1d:e3:f5:c7:
                    e3:e0:7d:7e:8b:c9:1b:10:a2:16:cc:6e:40:eb:fe:
                    8e:96:77:0e:99:d2:c3:24:5e:b6:21:ed:62:fa:24:
                    42:66:51:12:b4:6e:7d:a0:a2:4a:2c:7e:0d:1e:b9:
                    7d:c0:2e:b6:de:a6:52:ee:bd:4a:9a:9c:71:64:0e:
                    15:e7:18:28:bd:4e:8d:c0:55:01:05:d0:1a:c7:f7:
                    82:15:ed:60:b8:a1:09:a5:2a:f4:69:db:c7:15:5d:
                    2d:be:be:03:56:cf:75:95:2c:ac:6f:f7:14:95:ea:
                    f3:af:95:15:a9:e9:ba:f2:77:e7:52:3f:07:21:7d:
                    ad:fb:0d:5c:a1:ce:a3:d3:56:c3:2d:57:0a:35:29:
                    22:2d:83:b5:af:48:be:d2:7f:1f:51:e4:8c:e8:7e:
                    0c:83:49:f6:85:eb:e1:20:04:9a:89:16:cb:63:3e:
                    bc:c8:15:a9:3b:16:b5:0b:43:77:05:8a:82:ce:8b:
                    36:86:2e:fd:e7:e9:7c:01:65:7e:46:47:a6:25:00:
                    f7:8b:c5:14:31:dc:28:80:4c:dc:27:6b:ab:33:63:
                    ea:6f:f5:75:c7:d0:3f:86:30:e0:43:be:07:1e:aa:
                    fd:82:2a:a8:94:bf:52:a6:4c:c4:0d:e7:18:4c:40:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D2:53:C0:AA:90:4B:C5:66:72:91:11:C2:6E:84:5D:38:82:D8:E2
            X509v3 Authority Key Identifier:
                keyid:FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:d6:cf:89:b9:d4:f2:e4:fc:d2:3f:52:49:0e:61:30:c9:
         ab:05:5c:d7:01:69:4c:50:07:2d:fb:46:47:7f:9c:17:92:16:
         e4:3f:e9:d1:25:02:34:0b:3e:fd:27:8f:8f:fb:d5:4c:a2:2f:
         c5:d6:05:19:99:e2:bb:e5:94:03:2c:b9:05:a3:f4:3e:6f:2c:
         03:12:cd:84:e5:d6:8f:d1:b9:0d:a4:6e:66:7d:4c:d5:23:e8:
         98:aa:a1:0a:b3:d2:d4:3f:1c:bf:9e:50:bf:90:8c:12:20:34:
         b2:89:bc:cf:51:9d:88:9e:d4:fa:71:45:92:0d:76:db:25:15:
         93:37:9c:19:84:2f:4a:eb:9d:8c:5b:54:63:c5:93:ab:00:0d:
         c7:59:92:b1:29:4d:20:cd:12:a0:ec:fd:f1:fc:54:5d:58:f1:
         76:0c:65:73:d3:16:3b:3c:3a:b5:77:00:67:1c:94:c2:da:ad:
         06:51:fd:4b:ff:38:9b:a6:e8:70:4a:d2:d6:8d:27:6b:20:1c:
         e0:ec:a8:5c:4b:05:ba:a3:44:69:3d:68:0c:59:74:cb:9b:b4:
         6a:f7:32:16:1a:09:40:6a:e4:38:29:5a:16:b1:37:5e:6f:1c:
         4d:81:a1:c0:d6:2d:b0:7a:ed:ea:98:79:e8:cd:26:85:0a:5b:
         2f:5e:72:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEXQ3X3Dp7wXll5ym/UaNREHwmuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkEzMjFCQkM2N0FBODI2NDgwN0JGQjMxNzNDQ0U3QzND
RTVCOTZBQjAeFw0yMzExMjMwMzM3MTZaFw0yNDExMjEwMzQyMTZaMDMxMTAvBgNV
BAMTKDMwRDI1M0MwQUE5MDRCQzU2NjcyOTExMUMyNkU4NDVEMzg4MkQ4RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YpYsR8ev/2EjHeP1x+PgfX6L
yRsQohbMbkDr/o6Wdw6Z0sMkXrYh7WL6JEJmURK0bn2gokosfg0euX3ALrbeplLu
vUqanHFkDhXnGCi9To3AVQEF0BrH94IV7WC4oQmlKvRp28cVXS2+vgNWz3WVLKxv
9xSV6vOvlRWp6bryd+dSPwchfa37DVyhzqPTVsMtVwo1KSItg7WvSL7Sfx9R5Izo
fgyDSfaF6+EgBJqJFstjPrzIFak7FrULQ3cFioLOizaGLv3n6XwBZX5GR6YlAPeL
xRQx3CiATNwna6szY+pv9XXH0D+GMOBDvgceqv2CKqiUv1KmTMQN5xhMQNPpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMNJTwKqQS8VmcpERwm6EXTiC2OIwHwYDVR0j
BBgwFoAU+jIbvGeqgmSAe/sxc8znw85blqswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW5IUkVzTnBMdmlLQ3diNUxBQWV5TEVhRFdLV1NZYzJrQmFuWUxxVzc5
NHYvMC9GQTMyMUJCQzY3QUE4MjY0ODA3QkZCMzE3M0NDRTdDM0NFNUI5NkFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBMzIxQkJDNjdBQTgyNjQ4
MDdCRkIzMTczQ0NFN0MzQ0U1Qjk2QUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VuSFJFc05wTHZpS0N3YjVMQUFleUxFYURXS1dTWWMya0JhbllMcVc3OTR2LzAv
MzQzNTJlMzEzNjM4MmUzMTMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqGwwDQYJKoZIhvcNAQELBQADggEBACSO1s+J
udTy5PzSP1JJDmEwyasFXNcBaUxQBy37Rkd/nBeSFuQ/6dElAjQLPv0nj4/71Uyi
L8XWBRmZ4rvllAMsuQWj9D5vLAMSzYTl1o/RuQ2kbmZ9TNUj6JiqoQqz0tQ/HL+e
UL+QjBIgNLKJvM9RnYie1PpxRZINdtslFZM3nBmEL0rrnYxbVGPFk6sADcdZkrEp
TSDNEqDs/fH8VF1Y8XYMZXPTFjs8OrV3AGcclMLarQZR/Uv/OJum6HBK0taNJ2sg
HODsqFxLBbqjRGk9aAxZdMubtGr3MhYaCUBq5DgpWhaxN15vHE2BocDWLbB67eqY
eejNJoUKWy9ecq8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org