Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa
File:                     34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa (raw, json)
Hash identifier:          co8Cj0Woh7ZFtU8oHLG7Ka91Im55TXsU/CuXHqY/k3Y=
Subject key identifier:   EA:07:A4:41:FE:3C:22:AF:F5:5C:2C:77:97:23:51:22:BB:E1:F7:FE
Certificate issuer:       /CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
Certificate serial:       783469212306A16106A066792CC8762A2F49114D
Authority key identifier: FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa
Signing time:             Sun 08 Oct 2023 14:30:32 +0000
ROA not before:           Sun 08 Oct 2023 14:25:32 +0000
ROA not after:            Sun 06 Oct 2024 14:30:32 +0000
asID:                     268057
IP address blocks:        45.168.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:34:69:21:23:06:a1:61:06:a0:66:79:2c:c8:76:2a:2f:49:11:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
        Validity
            Not Before: Oct  8 14:25:32 2023 GMT
            Not After : Oct  6 14:30:32 2024 GMT
        Subject: CN=EA07A441FE3C22AFF55C2C7797235122BBE1F7FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:20:39:d2:ab:86:cf:dd:56:67:ca:f5:2c:
                    19:54:5b:f5:28:79:b4:41:ef:39:c6:3c:2b:66:8c:
                    80:de:c5:73:2a:72:e1:e5:8e:b9:e3:03:4e:5a:b4:
                    66:1f:bb:ad:bb:e7:df:dd:ff:6a:85:38:32:16:98:
                    d7:d9:b5:8d:c7:e9:96:10:8c:e3:98:bf:28:5a:12:
                    20:40:ef:29:73:fa:26:da:c2:c6:74:1e:75:9b:e6:
                    ce:78:80:51:6b:10:5d:1f:47:92:34:4a:36:b5:ee:
                    31:81:5f:34:19:f4:05:53:0f:7a:12:79:4f:34:41:
                    07:e7:39:a7:fc:0f:8b:67:73:5f:6f:10:0a:75:fc:
                    23:de:bc:b5:aa:a1:f9:77:db:56:81:17:b8:f2:44:
                    c8:93:3f:c7:e6:18:3a:66:a8:df:b8:b4:19:7d:a7:
                    e7:cc:4b:7e:84:8b:ff:c7:95:e9:8e:e7:39:ba:a3:
                    4e:cf:3e:58:ca:0f:17:a1:a2:3a:54:3d:cb:67:65:
                    45:d4:c0:78:7b:f8:1f:1e:fa:30:cc:b5:9c:a7:22:
                    04:ec:7d:7b:53:82:1a:7e:27:d7:fb:59:fc:b7:93:
                    89:1e:8d:52:a6:c4:e8:51:56:df:8d:9e:25:68:53:
                    34:a2:ed:35:a8:98:0e:4f:88:50:f3:29:1c:0e:69:
                    1f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:A4:41:FE:3C:22:AF:F5:5C:2C:77:97:23:51:22:BB:E1:F7:FE
            X509v3 Authority Key Identifier:
                keyid:FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:44:84:e4:e3:7e:31:b3:0b:61:2b:37:8c:40:c6:03:ba:2d:
         73:12:6a:ef:64:d7:a9:6b:0b:84:2d:7d:07:b5:30:37:97:1c:
         b8:59:57:e5:5e:53:a4:f7:f7:56:85:b8:a4:cb:4c:65:28:39:
         ac:e6:b7:e9:28:d6:6c:cc:29:9a:30:f3:82:40:e4:76:6e:38:
         85:c8:1f:71:35:e4:e3:b0:6b:a9:f9:ee:3c:5b:39:94:9c:d6:
         ab:ed:8c:bf:f5:50:04:86:7c:8a:f6:53:c3:c3:9e:db:74:05:
         9d:a6:ef:9e:36:48:f4:0e:03:26:d3:ec:ea:83:5a:a7:28:0f:
         82:ca:7e:c4:00:0f:f2:87:f4:c6:7a:cb:b5:88:d3:ef:63:60:
         40:36:4b:a0:b6:60:85:be:03:c5:62:48:30:a1:29:27:df:af:
         c9:38:c5:cb:c2:05:d1:b3:89:90:a5:23:f1:b7:78:17:a8:95:
         38:51:58:31:2c:f5:9f:ea:ff:f7:78:22:d5:54:08:c6:16:f8:
         1a:d8:07:41:4d:81:18:d1:4f:bc:b0:c9:14:d0:04:fb:80:e3:
         9e:f9:41:1d:30:0e:11:c9:dc:21:e0:24:43:aa:0f:90:dd:9a:
         ff:37:75:c4:ef:f3:85:3c:8e:a7:b6:dc:2e:5c:bd:ac:36:5a:
         f3:8f:ba:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeDRpISMGoWEGoGZ5LMh2Ki9JEU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkEzMjFCQkM2N0FBODI2NDgwN0JGQjMxNzNDQ0U3QzND
RTVCOTZBQjAeFw0yMzEwMDgxNDI1MzJaFw0yNDEwMDYxNDMwMzJaMDMxMTAvBgNV
BAMTKEVBMDdBNDQxRkUzQzIyQUZGNTVDMkM3Nzk3MjM1MTIyQkJFMUY3RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYiA50quGz91WZ8r1LBlUW/Uo
ebRB7znGPCtmjIDexXMqcuHljrnjA05atGYfu62759/d/2qFODIWmNfZtY3H6ZYQ
jOOYvyhaEiBA7ylz+ibawsZ0HnWb5s54gFFrEF0fR5I0Sja17jGBXzQZ9AVTD3oS
eU80QQfnOaf8D4tnc19vEAp1/CPevLWqofl321aBF7jyRMiTP8fmGDpmqN+4tBl9
p+fMS36Ei//HlemO5zm6o07PPljKDxehojpUPctnZUXUwHh7+B8e+jDMtZynIgTs
fXtTghp+J9f7Wfy3k4kejVKmxOhRVt+NniVoUzSi7TWomA5PiFDzKRwOaR8jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6gekQf48Iq/1XCx3lyNRIrvh9/4wHwYDVR0j
BBgwFoAU+jIbvGeqgmSAe/sxc8znw85blqswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW5IUkVzTnBMdmlLQ3diNUxBQWV5TEVhRFdLV1NZYzJrQmFuWUxxVzc5
NHYvMC9GQTMyMUJCQzY3QUE4MjY0ODA3QkZCMzE3M0NDRTdDM0NFNUI5NkFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBMzIxQkJDNjdBQTgyNjQ4
MDdCRkIzMTczQ0NFN0MzQ0U1Qjk2QUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VuSFJFc05wTHZpS0N3YjVMQUFleUxFYURXS1dTWWMya0JhbllMcVc3OTR2LzAv
MzQzNTJlMzEzNjM4MmUzMTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqG8wDQYJKoZIhvcNAQELBQADggEBABlEhOTj
fjGzC2ErN4xAxgO6LXMSau9k16lrC4QtfQe1MDeXHLhZV+VeU6T391aFuKTLTGUo
Oazmt+ko1mzMKZow84JA5HZuOIXIH3E15OOwa6n57jxbOZSc1qvtjL/1UASGfIr2
U8PDntt0BZ2m7542SPQOAybT7OqDWqcoD4LKfsQAD/KH9MZ6y7WI0+9jYEA2S6C2
YIW+A8ViSDChKSffr8k4xcvCBdGziZClI/G3eBeolThRWDEs9Z/q//d4ItVUCMYW
+BrYB0FNgRjRT7ywyRTQBPuA4575QR0wDhHJ3CHgJEOqD5Ddmv83dcTv84U8jqe2
3C5cvaw2WvOPuv0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org