Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/34352e3137382e3231322e302f32332d3233203d3e20323639313131.roa
File:                     34352e3137382e3231322e302f32332d3233203d3e20323639313131.roa (raw, json)
Hash identifier:          Cj0e0diU930qJnP3T6+a5HY3yPmaGOMsgBZiCARN+sw=
Subject key identifier:   01:9B:65:E5:EB:48:B3:49:83:35:1A:77:8E:BB:DA:3C:30:72:A6:EE
Certificate issuer:       /CN=D222F962EA56F1911760688F832B92229BBA6E09
Certificate serial:       407A556B8E640D3CD648472090BE0A2D800B1533
Authority key identifier: D2:22:F9:62:EA:56:F1:91:17:60:68:8F:83:2B:92:22:9B:BA:6E:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D222F962EA56F1911760688F832B92229BBA6E09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/34352e3137382e3231322e302f32332d3233203d3e20323639313131.roa
Signing time:             Wed 21 Feb 2024 02:14:04 +0000
ROA not before:           Wed 21 Feb 2024 02:09:04 +0000
ROA not after:            Wed 19 Feb 2025 02:14:04 +0000
asID:                     269111
IP address blocks:        45.178.212.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7a:55:6b:8e:64:0d:3c:d6:48:47:20:90:be:0a:2d:80:0b:15:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D222F962EA56F1911760688F832B92229BBA6E09
        Validity
            Not Before: Feb 21 02:09:04 2024 GMT
            Not After : Feb 19 02:14:04 2025 GMT
        Subject: CN=019B65E5EB48B34983351A778EBBDA3C3072A6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:61:5a:05:6a:69:0a:24:62:4d:2e:f4:9b:
                    de:42:b5:09:90:5d:98:04:7b:29:b2:95:11:76:86:
                    98:20:38:79:29:30:bb:04:20:84:03:e5:4d:d5:25:
                    83:07:47:0c:e6:cc:42:e6:71:a9:93:0d:a5:60:9e:
                    30:df:13:9a:27:91:ce:00:a9:e0:6f:af:4f:de:d5:
                    0e:ff:7d:90:63:ed:1d:98:b4:94:df:4f:0d:e6:f0:
                    83:aa:7c:58:6d:b8:c3:b7:24:47:43:16:3c:33:07:
                    2a:b4:43:6a:f0:c1:37:82:a9:0e:01:4b:1d:f6:07:
                    fb:99:5a:35:3b:35:45:9f:32:b3:6a:0f:be:30:31:
                    49:78:89:73:92:c1:17:92:3f:d4:c9:92:e5:b2:ee:
                    d1:b2:c8:06:27:4b:a6:86:1c:01:da:c8:4b:29:22:
                    ae:a2:59:e1:48:26:ea:6d:35:9d:92:fb:cc:94:24:
                    b3:5c:3b:54:32:1e:91:e7:dd:cc:c9:11:c5:e2:e6:
                    9a:41:2a:fd:cc:de:c4:f3:1e:73:02:57:15:e5:17:
                    f2:e6:4d:d5:55:2e:94:52:a9:87:4f:ec:d0:df:50:
                    fa:02:79:56:07:a7:50:f1:16:22:87:75:3c:7a:45:
                    88:28:69:0e:be:c4:5e:35:01:04:16:5a:c4:ea:48:
                    33:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9B:65:E5:EB:48:B3:49:83:35:1A:77:8E:BB:DA:3C:30:72:A6:EE
            X509v3 Authority Key Identifier:
                keyid:D2:22:F9:62:EA:56:F1:91:17:60:68:8F:83:2B:92:22:9B:BA:6E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/D222F962EA56F1911760688F832B92229BBA6E09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D222F962EA56F1911760688F832B92229BBA6E09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/34352e3137382e3231322e302f32332d3233203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:5e:02:48:cf:9f:f4:52:75:a8:29:1e:63:e8:32:1b:4b:
         59:1d:cb:90:53:cc:5a:6b:cc:50:f7:04:6f:6f:d5:cd:58:cb:
         51:a2:21:a2:ec:0f:64:6c:ee:60:da:e5:b6:2b:40:d2:93:d9:
         89:b0:91:a3:bd:40:2b:df:97:05:8c:e8:94:55:98:df:85:f1:
         ea:4e:87:a9:5a:22:dc:5a:94:27:60:47:2e:ce:e8:bf:fd:41:
         10:35:7d:b3:a8:e5:02:1f:48:32:95:54:42:75:a0:1f:5d:4a:
         4c:e3:a8:ad:24:ee:77:5e:ca:1d:da:13:2f:19:49:fe:4c:d5:
         c7:6a:32:ad:cb:b4:76:41:90:72:30:56:05:65:fb:69:f3:bb:
         dc:92:bd:5f:21:01:30:3d:73:e8:ea:44:c4:02:45:f5:76:13:
         4a:ef:6d:ba:b1:61:82:6a:de:11:d9:36:2b:d9:96:60:6f:65:
         01:87:49:b9:48:5f:90:6a:ad:a2:52:5c:b7:7c:bf:82:81:f4:
         03:5a:3d:0f:21:ec:26:06:7a:1d:40:b5:7e:55:c3:60:0e:9d:
         57:a3:ce:e5:f4:6a:c2:47:8a:7a:ed:18:fc:0f:18:d8:11:9f:
         2a:f2:a8:fc:07:38:be:f7:90:92:1f:5f:07:57:dc:8e:2e:a5:
         44:6b:6c:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQHpVa45kDTzWSEcgkL4KLYALFTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIyMkY5NjJFQTU2RjE5MTE3NjA2ODhGODMyQjkyMjI5
QkJBNkUwOTAeFw0yNDAyMjEwMjA5MDRaFw0yNTAyMTkwMjE0MDRaMDMxMTAvBgNV
BAMTKDAxOUI2NUU1RUI0OEIzNDk4MzM1MUE3NzhFQkJEQTNDMzA3MkE2RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC912FaBWppCiRiTS70m95CtQmQ
XZgEeymylRF2hpggOHkpMLsEIIQD5U3VJYMHRwzmzELmcamTDaVgnjDfE5onkc4A
qeBvr0/e1Q7/fZBj7R2YtJTfTw3m8IOqfFhtuMO3JEdDFjwzByq0Q2rwwTeCqQ4B
Sx32B/uZWjU7NUWfMrNqD74wMUl4iXOSwReSP9TJkuWy7tGyyAYnS6aGHAHayEsp
Iq6iWeFIJuptNZ2S+8yUJLNcO1QyHpHn3czJEcXi5ppBKv3M3sTzHnMCVxXlF/Lm
TdVVLpRSqYdP7NDfUPoCeVYHp1DxFiKHdTx6RYgoaQ6+xF41AQQWWsTqSDORAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAZtl5etIs0mDNRp3jrvaPDBypu4wHwYDVR0j
BBgwFoAU0iL5YupW8ZEXYGiPgyuSIpu6bgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZLdU43NjhlTTNrb3Q0SndESEFDOUhWNGNhd0hXY1l5bUNmbkp2ZFlX
b3AvMS9EMjIyRjk2MkVBNTZGMTkxMTc2MDY4OEY4MzJCOTIyMjlCQkE2RTA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyMjJGOTYyRUE1NkYxOTEx
NzYwNjg4RjgzMkI5MjIyOUJCQTZFMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y2S3VONzY4ZU0za290NEp3REhBQzlIVjRjYXdIV2NZeW1DZm5KdmRZV29wLzEv
MzQzNTJlMzEzNzM4MmUzMjMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtstQwDQYJKoZIhvcNAQELBQADggEBAJKiXgJI
z5/0UnWoKR5j6DIbS1kdy5BTzFprzFD3BG9v1c1Yy1GiIaLsD2Rs7mDa5bYrQNKT
2YmwkaO9QCvflwWM6JRVmN+F8epOh6laItxalCdgRy7O6L/9QRA1fbOo5QIfSDKV
VEJ1oB9dSkzjqK0k7ndeyh3aEy8ZSf5M1cdqMq3LtHZBkHIwVgVl+2nzu9ySvV8h
ATA9c+jqRMQCRfV2E0rvbbqxYYJq3hHZNivZlmBvZQGHSblIX5BqraJSXLd8v4KB
9ANaPQ8h7CYGeh1AtX5Vw2AOnVejzuX0asJHinrtGPwPGNgRnyryqPwHOL73kJIf
XwdX3I4upURrbBo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:53 2025 by rpki-client