Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235342e302f32342d3234203d3e203631383434.roa
File:                     34352e3137372e3235342e302f32342d3234203d3e203631383434.roa (raw, json)
Hash identifier:          AVDvAixVx7GBHZYzMpDtvSplkaEYqeLyyxaCmhlX4/Y=
Subject key identifier:   10:52:F8:0A:5B:1C:7A:52:92:BE:B5:D6:4F:EF:D2:22:EA:C7:BE:60
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       151EDC6061C0C1C922B041FE865221902A203641
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235342e302f32342d3234203d3e203631383434.roa
Signing time:             Thu 28 Sep 2023 00:42:00 +0000
ROA not before:           Thu 28 Sep 2023 00:37:00 +0000
ROA not after:            Thu 26 Sep 2024 00:42:00 +0000
asID:                     61844
IP address blocks:        45.177.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1e:dc:60:61:c0:c1:c9:22:b0:41:fe:86:52:21:90:2a:20:36:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 28 00:37:00 2023 GMT
            Not After : Sep 26 00:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:3e:3c:b5:d0:78:b7:7a:86:a8:8f:c6:7a:
                    92:71:21:9d:a8:92:84:8b:d8:7c:4b:49:60:3c:29:
                    ec:db:11:d4:e7:86:80:a1:4d:04:ca:60:57:76:60:
                    97:47:30:16:fa:a1:66:2e:66:e7:3e:c7:da:2d:e8:
                    f1:06:3b:3f:1c:9d:56:2b:4c:18:f2:c3:ff:66:23:
                    d6:da:d3:38:68:b6:2c:f8:58:8a:e1:88:b7:12:6b:
                    f8:30:42:be:d7:13:ea:09:c3:54:d7:5e:39:83:e3:
                    c7:f3:59:ba:02:60:56:70:86:5e:43:d1:87:8f:ab:
                    a1:a5:8c:76:13:ed:84:e4:57:85:1b:1a:02:c2:a2:
                    8d:c3:b1:b5:d4:71:c6:1b:cf:f9:43:e9:99:02:b6:
                    b8:87:10:2b:94:7f:c7:3e:34:25:0a:1a:8d:d1:c8:
                    8f:a0:d5:82:82:c2:c8:65:d3:67:4a:70:22:83:8b:
                    4b:d0:35:7d:7d:df:7b:cd:ba:bd:a3:38:52:12:a0:
                    87:31:ec:f7:76:1e:08:f5:e8:5b:a7:39:6e:3f:b7:
                    0f:79:13:c8:47:39:31:46:c3:23:af:be:82:42:79:
                    38:01:0c:1c:27:54:71:54:a8:b2:7c:f8:a6:1e:8f:
                    db:9a:4d:5c:b2:7a:0a:fd:bc:14:32:26:18:80:a3:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:F8:0A:5B:1C:7A:52:92:BE:B5:D6:4F:EF:D2:22:EA:C7:BE:60
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235342e302f32342d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:43:e1:c2:b8:80:1e:a7:4e:32:82:77:b9:93:79:cb:ee:
         ae:85:51:cb:4b:46:a5:27:65:e3:d4:d4:bd:0f:5e:4d:de:22:
         51:ed:12:1f:f4:e0:81:9c:f0:ad:14:d5:8d:ed:61:79:94:da:
         5a:ec:2d:f0:6d:bc:10:cc:5e:c2:91:89:9d:3f:d9:99:b5:e5:
         0e:1b:ba:76:59:27:c4:df:7b:4a:1f:f4:89:9d:3e:af:d9:3f:
         68:31:18:31:af:90:ce:2b:f0:fc:5c:ea:98:50:2d:b7:90:a1:
         5d:ba:1e:83:d9:25:44:2c:1c:57:f1:79:ef:5b:76:55:4f:6b:
         4c:fe:b7:78:0e:80:bf:55:36:96:61:9e:20:be:6f:75:b2:73:
         b7:7c:2f:36:01:76:ad:3f:c7:71:f6:75:3f:eb:e8:54:02:0d:
         99:7a:0f:89:66:b4:85:bc:f9:bd:ad:db:f6:97:8b:f2:8e:34:
         ed:7e:46:a1:a8:cd:69:5f:3d:26:f9:97:c9:15:fc:e4:27:44:
         c9:56:6c:59:3f:35:b9:78:b3:77:7e:9d:bb:db:7d:0e:67:2f:
         55:e5:a1:aa:b5:80:74:8f:05:74:bf:56:3b:3b:48:60:f3:a2:
         6c:34:3f:2c:89:d1:08:20:d2:7a:26:54:fe:f6:76:62:2a:9b:
         4c:a5:45:a1
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUFR7cYGHAwckisEH+hlIhkCogNkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNEODgzMDNDRTJFODk3RDM0RkMyMDc3MzM3NTkwODA1
MEZCMjk5RTAeFw0yMzA5MjgwMDM3MDBaFw0yNDA5MjYwMDQyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTI0NDNFM0NCNUQwNzhCNzdB
ODZBODhGQzY3QTkyNzEyMTlEQTg5Mjg0OEJEODdDNEI0OTYwM0MyOUVDREIxMUQ0
RTc4NjgwQTE0RDA0Q0E2MDU3NzY2MDk3NDczMDE2RkFBMTY2MkU2NkU3M0VDN0RB
MkRFOEYxMDYzQjNGMUM5RDU2MkI0QzE4RjJDM0ZGNjYyM0Q2REFEMzM4NjhCNjJD
Rjg1ODhBRTE4OEI3MTI2QkY4MzA0MkJFRDcxM0VBMDlDMzU0RDc1RTM5ODNFM0M3
RjM1OUJBMDI2MDU2NzA4NjVFNDNEMTg3OEZBQkExQTU4Qzc2MTNFRDg0RTQ1Nzg1
MUIxQTAyQzJBMjhEQzNCMUI1RDQ3MUM2MUJDRkY5NDNFOTk5MDJCNkI4ODcxMDJC
OTQ3RkM3M0UzNDI1MEExQThERDFDODhGQTBENTgyODJDMkM4NjVEMzY3NEE3MDIy
ODM4QjRCRDAzNTdEN0RERjdCQ0RCQUJEQTMzODUyMTJBMDg3MzFFQ0Y3NzYxRTA4
RjVFODVCQTczOTZFM0ZCNzBGNzkxM0M4NDczOTMxNDZDMzIzQUZCRTgyNDI3OTM4
MDEwQzFDMjc1NDcxNTRBOEIyN0NGOEE2MUU4RkRCOUE0RDVDQjI3QTBBRkRCQzE0
MzIyNjE4ODBBM0VCNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4kQ+PLXQeLd6hqiPxnqScSGdqJKEi9h8S0lgPCns2xHU54aAoU0E
ymBXdmCXRzAW+qFmLmbnPsfaLejxBjs/HJ1WK0wY8sP/ZiPW2tM4aLYs+FiK4Yi3
Emv4MEK+1xPqCcNU1145g+PH81m6AmBWcIZeQ9GHj6uhpYx2E+2E5FeFGxoCwqKN
w7G11HHGG8/5Q+mZAra4hxArlH/HPjQlChqN0ciPoNWCgsLIZdNnSnAig4tL0DV9
fd97zbq9ozhSEqCHMez3dh4I9ehbpzluP7cPeRPIRzkxRsMjr76CQnk4AQwcJ1Rx
VKiyfPimHo/bmk1csnoK/bwUMiYYgKPrbQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FBBS+ApbHHpSkr611k/v0iLqx75gMB8GA1UdIwQYMBaAFLzYgwPOLol9NPwgdzN1
kIBQ+ymeMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y0YWZDTHhrcUh3NHNq
TmlzbVRNTDVNNXU3VDl1TEdCWW5EbVNMNWE3cVhmLzAvQkNEODgzMDNDRTJFODk3
RDM0RkMyMDc3MzM3NTkwODA1MEZCMjk5RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQ0Q4ODMwM0NFMkU4OTdEMzRGQzIwNzczMzc1OTA4MDUwRkIy
OTlFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GNGFmQ0x4a3FIdzRzak5pc21U
TUw1TTV1N1Q5dUxHQlluRG1TTDVhN3FYZi8wLzM0MzUyZTMxMzczNzJlMzIzNTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM4MzQzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2x
/jANBgkqhkiG9w0BAQsFAAOCAQEAFB9D4cK4gB6nTjKCd7mTecvuroVRy0tGpSdl
49TUvQ9eTd4iUe0SH/TggZzwrRTVje1heZTaWuwt8G28EMxewpGJnT/ZmbXlDhu6
dlknxN97Sh/0iZ0+r9k/aDEYMa+Qzivw/FzqmFAtt5ChXboeg9klRCwcV/F571t2
VU9rTP63eA6Av1U2lmGeIL5vdbJzt3wvNgF2rT/HcfZ1P+voVAINmXoPiWa0hbz5
va3b9peL8o407X5GoajNaV89JvmXyRX85CdEyVZsWT81uXizd36du9t9DmcvVeWh
qrWAdI8FdL9WOztIYPOibDQ/LInRCCDSeiZU/vZ2YiqbTKVFoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org