Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/34352e3136352e36342e302f32322d3332203d3e20323638363539.roa
File:                     34352e3136352e36342e302f32322d3332203d3e20323638363539.roa (raw, json)
Hash identifier:          3E89aEMygHYmG68KdWVXR9gk3QAj5mb/hHk6j8/THCQ=
Subject key identifier:   AB:3E:2B:70:A1:0B:82:1A:66:B9:22:39:C6:27:3F:E2:1B:FA:DE:85
Certificate issuer:       /CN=C4DAA6BCF09F41036B316EE76161BD3834E13C9E
Certificate serial:       628B00C838D57303AC04EB3F70A4D7F1AB7B0F32
Authority key identifier: C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/34352e3136352e36342e302f32322d3332203d3e20323638363539.roa
Signing time:             Thu 04 Apr 2024 15:05:23 +0000
ROA not before:           Thu 04 Apr 2024 15:00:23 +0000
ROA not after:            Thu 03 Apr 2025 15:05:23 +0000
asID:                     268659
IP address blocks:        45.165.64.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8b:00:c8:38:d5:73:03:ac:04:eb:3f:70:a4:d7:f1:ab:7b:0f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4DAA6BCF09F41036B316EE76161BD3834E13C9E
        Validity
            Not Before: Apr  4 15:00:23 2024 GMT
            Not After : Apr  3 15:05:23 2025 GMT
        Subject: CN=AB3E2B70A10B821A66B92239C6273FE21BFADE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:a2:a4:b0:37:cb:b8:ae:0d:b1:7b:d8:eb:
                    e8:4d:51:fd:a9:2a:8c:51:68:41:aa:9a:99:d9:42:
                    86:06:30:61:05:b8:8d:c7:d9:0e:09:91:61:3d:2e:
                    05:24:aa:2d:15:d3:71:52:a2:17:64:da:a6:69:c7:
                    28:5d:5f:50:8b:52:74:5e:25:1d:a8:d4:75:a2:48:
                    67:36:62:2a:a5:30:9f:1f:fc:7e:fc:99:14:3c:a4:
                    12:db:11:29:9a:d3:ce:fc:89:a4:e0:98:c2:36:70:
                    fa:31:e7:5e:0b:ba:62:e4:3c:33:7b:7d:ad:91:cb:
                    5b:84:5a:59:b0:a3:8d:0f:7e:73:ac:32:8e:8d:a7:
                    72:70:ae:b1:77:22:09:27:a1:e7:f0:85:94:48:46:
                    b4:31:85:40:c6:1c:44:bf:aa:51:00:a7:83:38:a8:
                    1c:0b:e7:b5:5a:9e:44:26:13:f3:62:41:c8:b9:07:
                    88:72:29:b2:9c:81:0a:65:24:4b:9f:39:ce:f9:7a:
                    c9:58:a9:ee:d6:d4:95:28:13:03:9c:e2:13:84:d5:
                    76:fc:a9:ee:61:29:99:ab:ff:83:e1:c6:63:4a:c4:
                    d6:0f:7b:94:b7:99:1a:32:1f:bf:f3:4e:90:49:b2:
                    a4:ab:ca:e3:e1:b5:69:2b:c7:26:61:53:d5:3d:c6:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:2B:70:A1:0B:82:1A:66:B9:22:39:C6:27:3F:E2:1B:FA:DE:85
            X509v3 Authority Key Identifier:
                keyid:C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/34352e3136352e36342e302f32322d3332203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:59:cc:55:fe:7b:9a:bd:e2:a4:38:bb:85:ea:4c:f1:b7:
         5b:eb:02:84:28:15:82:d7:0a:fd:46:0e:09:3a:26:f3:7e:20:
         45:52:cd:56:c6:7e:83:12:13:76:76:d7:cb:a1:1e:fa:e8:b3:
         b7:35:d0:c1:88:ee:17:eb:a2:46:43:df:77:30:ca:0f:19:a6:
         c4:b7:9d:4a:93:8b:97:17:7a:f6:d9:7d:58:f9:41:45:6c:50:
         63:8f:f9:8a:d5:4a:63:e8:ee:91:7f:0d:fa:99:56:90:68:fb:
         b2:64:58:62:37:09:5d:2b:75:3a:cd:14:41:f6:f8:da:0c:14:
         59:74:9d:8f:7b:ae:e0:1a:b7:58:0a:8e:d0:c2:8f:ef:81:8b:
         6e:aa:03:47:28:88:f5:a6:1f:07:2e:30:92:55:f3:47:ec:d1:
         fc:15:8a:38:d8:07:fa:aa:3b:67:ac:77:4c:d5:8c:93:a5:de:
         2b:e3:4e:56:8b:d8:1b:07:6a:b9:8f:f8:90:a6:69:61:01:dd:
         51:34:6a:b4:ab:66:68:e4:8c:cf:92:f8:c1:07:20:23:f5:61:
         e7:9e:85:cb:30:8b:cd:54:6f:33:cb:36:1e:23:36:15:5d:d8:
         24:a4:d6:57:f2:40:5a:cd:f8:f2:9a:33:c3:bd:7f:62:db:7a:
         b1:bf:e0:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYosAyDjVcwOsBOs/cKTX8at7DzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzREQUE2QkNGMDlGNDEwMzZCMzE2RUU3NjE2MUJEMzgz
NEUxM0M5RTAeFw0yNDA0MDQxNTAwMjNaFw0yNTA0MDMxNTA1MjNaMDMxMTAvBgNV
BAMTKEFCM0UyQjcwQTEwQjgyMUE2NkI5MjIzOUM2MjczRkUyMUJGQURFODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsqKksDfLuK4NsXvY6+hNUf2p
KoxRaEGqmpnZQoYGMGEFuI3H2Q4JkWE9LgUkqi0V03FSohdk2qZpxyhdX1CLUnRe
JR2o1HWiSGc2YiqlMJ8f/H78mRQ8pBLbESma0878iaTgmMI2cPox514LumLkPDN7
fa2Ry1uEWlmwo40PfnOsMo6Np3JwrrF3IgknoefwhZRIRrQxhUDGHES/qlEAp4M4
qBwL57VankQmE/NiQci5B4hyKbKcgQplJEufOc75eslYqe7W1JUoEwOc4hOE1Xb8
qe5hKZmr/4PhxmNKxNYPe5S3mRoyH7/zTpBJsqSryuPhtWkrxyZhU9U9xlxTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqz4rcKELghpmuSI5xic/4hv63oUwHwYDVR0j
BBgwFoAUxNqmvPCfQQNrMW7nYWG9ODThPJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjd2dnlQcThyTWdLa1B1a2l0WmVwR0FQZm43M1RwQ3A0NDlhcWhwSDVH
ZEUvMS9DNERBQTZCQ0YwOUY0MTAzNkIzMTZFRTc2MTYxQkQzODM0RTEzQzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0REFBNkJDRjA5RjQxMDM2
QjMxNkVFNzYxNjFCRDM4MzRFMTNDOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3dnZ5UHE4ck1nS2tQdWtpdFplcEdBUGZuNzNUcENwNDQ5YXFocEg1R2RFLzEv
MzQzNTJlMzEzNjM1MmUzNjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzYzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaVAMA0GCSqGSIb3DQEBCwUAA4IBAQAZx1nMVf57
mr3ipDi7hepM8bdb6wKEKBWC1wr9Rg4JOibzfiBFUs1Wxn6DEhN2dtfLoR766LO3
NdDBiO4X66JGQ993MMoPGabEt51Kk4uXF3r22X1Y+UFFbFBjj/mK1Upj6O6Rfw36
mVaQaPuyZFhiNwldK3U6zRRB9vjaDBRZdJ2Pe67gGrdYCo7Qwo/vgYtuqgNHKIj1
ph8HLjCSVfNH7NH8FYo42Af6qjtnrHdM1YyTpd4r405Wi9gbB2q5j/iQpmlhAd1R
NGq0q2Zo5IzPkvjBByAj9WHnnoXLMIvNVG8zyzYeIzYVXdgkpNZX8kBazfjymjPD
vX9i23qxv+AJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org