Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139342e302f32332d3233203d3e20323636323637.roa
File:                     34352e36352e3139342e302f32332d3233203d3e20323636323637.roa (raw, json)
Hash identifier:          nysFa4zH90tx97DATOYyCrjrqU+kQ7u1HCYOHE+dicQ=
Subject key identifier:   21:48:82:EB:CE:8E:0B:CC:12:0C:D9:62:C3:7C:4C:9B:28:BB:E9:A1
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       169FFC89905CCCDD1E309AD266A3B14D08B3C627
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139342e302f32332d3233203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:35:12 +0000
ROA not before:           Thu 03 Aug 2023 17:30:12 +0000
ROA not after:            Thu 01 Aug 2024 17:35:12 +0000
asID:                     266267
IP address blocks:        45.65.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9f:fc:89:90:5c:cc:dd:1e:30:9a:d2:66:a3:b1:4d:08:b3:c6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:30:12 2023 GMT
            Not After : Aug  1 17:35:12 2024 GMT
        Subject: CN=214882EBCE8E0BCC120CD962C37C4C9B28BBE9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:19:10:34:d1:51:2f:ce:1c:40:ea:3b:c0:
                    d4:6f:b7:20:89:35:4c:13:10:8e:5f:03:d5:f5:7d:
                    a4:86:79:5b:c4:b7:f2:7a:50:36:9e:60:7f:64:8b:
                    49:15:b5:31:86:c2:bf:f1:c7:ed:de:cf:ef:eb:1a:
                    09:7b:da:4c:31:9b:ca:cb:7c:9a:79:72:41:3f:6f:
                    c5:90:b9:67:1f:8b:8a:38:50:bf:86:fd:c2:2c:56:
                    0b:75:02:5c:d3:19:c7:7e:20:df:f5:c6:30:b0:e6:
                    e6:d8:1a:25:74:e3:66:f2:ce:18:6a:0d:c9:01:da:
                    7f:52:c4:05:a9:0f:cc:b6:47:f7:cb:0d:96:6e:19:
                    5f:a1:b9:c8:06:56:34:04:5c:7a:ed:ec:9c:d6:cd:
                    ca:d1:42:6e:19:86:dc:d9:a9:09:76:15:33:62:c5:
                    2c:78:46:f5:6c:32:63:bb:a5:d2:37:0f:09:f9:1f:
                    4e:f8:6f:9e:b6:3c:21:da:18:4b:ed:93:ee:27:7a:
                    88:e2:b2:92:52:e3:37:d3:82:2a:27:1a:6b:d9:13:
                    2c:3c:21:68:80:af:15:97:12:eb:26:90:df:ac:31:
                    83:dc:f8:00:9c:5e:cf:f8:90:a0:e6:c6:13:f2:1e:
                    98:46:c8:5d:da:ab:db:92:78:c6:13:3a:b4:19:bc:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:48:82:EB:CE:8E:0B:CC:12:0C:D9:62:C3:7C:4C:9B:28:BB:E9:A1
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139342e302f32332d3233203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:c6:78:e8:15:f0:8e:8d:02:2b:37:18:f4:cc:dd:bd:06:99:
         59:ae:12:44:a5:c2:d3:3f:85:3f:bc:2f:1f:f4:f9:66:9e:54:
         61:2a:44:4d:8e:f4:45:a8:21:e5:0d:6b:4b:59:56:19:ec:e0:
         e6:5b:94:e9:e2:1c:96:50:f6:87:96:d6:8a:d8:19:9c:4f:0c:
         49:83:c8:05:da:46:b7:64:c7:f6:58:86:6d:65:a3:0f:37:e8:
         9d:c9:ce:55:4b:46:36:cf:86:36:46:a9:3a:49:f2:ea:de:7b:
         1b:3a:3d:f7:c8:7e:36:14:ea:e2:eb:2e:29:c6:bf:53:ef:d4:
         77:2b:5b:ec:fa:c0:f1:75:d0:56:11:75:62:fe:cf:50:c7:5b:
         47:09:79:be:f4:0f:aa:bf:52:63:3c:c6:95:f6:9f:7f:2a:1e:
         30:9a:6a:4e:c1:9e:dd:7a:b4:b2:d3:e3:ec:b2:a5:eb:17:19:
         90:0f:3d:57:37:e1:f5:d6:36:75:66:67:0b:c3:96:fe:9b:7c:
         88:88:1b:a8:e6:13:e3:d5:a5:da:ab:a7:1a:45:9a:9c:c5:2a:
         c2:da:be:3a:aa:35:2a:2c:36:3a:f1:27:2a:85:5a:e8:67:69:
         46:0f:36:fb:3d:55:a1:29:93:92:b7:b3:99:52:e1:ba:3b:30:
         38:07:2f:8c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFp/8iZBczN0eMJrSZqOxTQizxicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM4Rjg5NDgzMjQxRjdGNjU3REU2ODQ2Q0JEQjJCQTA0
NDM4N0Y5ODAeFw0yMzA4MDMxNzMwMTJaFw0yNDA4MDExNzM1MTJaMDMxMTAvBgNV
BAMTKDIxNDg4MkVCQ0U4RTBCQ0MxMjBDRDk2MkMzN0M0QzlCMjhCQkU5QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69hkQNNFRL84cQOo7wNRvtyCJ
NUwTEI5fA9X1faSGeVvEt/J6UDaeYH9ki0kVtTGGwr/xx+3ez+/rGgl72kwxm8rL
fJp5ckE/b8WQuWcfi4o4UL+G/cIsVgt1AlzTGcd+IN/1xjCw5ubYGiV042byzhhq
DckB2n9SxAWpD8y2R/fLDZZuGV+hucgGVjQEXHrt7JzWzcrRQm4ZhtzZqQl2FTNi
xSx4RvVsMmO7pdI3Dwn5H074b562PCHaGEvtk+4neojispJS4zfTgionGmvZEyw8
IWiArxWXEusmkN+sMYPc+ACcXs/4kKDmxhPyHphGyF3aq9uSeMYTOrQZvLO/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIUiC686OC8wSDNliw3xMmyi76aEwHwYDVR0j
BBgwFoAU3I+JSDJB9/ZX3mhGy9sroEQ4f5gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdVckREWGdnN1JOVjZaRHJSeEhYV0NKd0x1SFVmaldhaTZrV1dRaTV1
cVQvMC9EQzhGODk0ODMyNDFGN0Y2NTdERTY4NDZDQkRCMkJBMDQ0Mzg3Rjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDOEY4OTQ4MzI0MUY3RjY1
N0RFNjg0NkNCREIyQkEwNDQzODdGOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3VXJERFhnZzdSTlY2WkRyUnhIWFdDSndMdUhVZmpXYWk2a1dXUWk1dXFULzAv
MzQzNTJlMzYzNTJlMzEzOTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzIzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUHCMA0GCSqGSIb3DQEBCwUAA4IBAQCXxnjoFfCO
jQIrNxj0zN29BplZrhJEpcLTP4U/vC8f9PlmnlRhKkRNjvRFqCHlDWtLWVYZ7ODm
W5Tp4hyWUPaHltaK2BmcTwxJg8gF2ka3ZMf2WIZtZaMPN+idyc5VS0Y2z4Y2Rqk6
SfLq3nsbOj33yH42FOri6y4pxr9T79R3K1vs+sDxddBWEXVi/s9Qx1tHCXm+9A+q
v1JjPMaV9p9/Kh4wmmpOwZ7derSy0+PssqXrFxmQDz1XN+H11jZ1ZmcLw5b+m3yI
iBuo5hPj1aXaq6caRZqcxSrC2r46qjUqLDY68ScqhVroZ2lGDzb7PVWhKZOSt7OZ
UuG6OzA4By+M
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org