Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa
File:                     34352e37312e3131362e302f32322d3234203d3e20323637363035.roa (raw, json)
Hash identifier:          gtPhbyMIaSrkRGn9D0O8zO7k/+o7xQjuVDpBluf6YCc=
Subject key identifier:   1A:BC:28:E8:19:0E:49:56:1F:50:44:62:60:B5:7E:EC:A5:F9:BF:6C
Certificate issuer:       /CN=47D8D5FEE9032D80A186B4EBC0BF422F045F309B
Certificate serial:       12D7214687C276E3565A33FFB3E6042890D4EB9C
Authority key identifier: 47:D8:D5:FE:E9:03:2D:80:A1:86:B4:EB:C0:BF:42:2F:04:5F:30:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa
Signing time:             Tue 19 Mar 2024 18:57:01 +0000
ROA not before:           Tue 19 Mar 2024 18:52:01 +0000
ROA not after:            Tue 18 Mar 2025 18:57:01 +0000
asID:                     267605
IP address blocks:        45.71.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d7:21:46:87:c2:76:e3:56:5a:33:ff:b3:e6:04:28:90:d4:eb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47D8D5FEE9032D80A186B4EBC0BF422F045F309B
        Validity
            Not Before: Mar 19 18:52:01 2024 GMT
            Not After : Mar 18 18:57:01 2025 GMT
        Subject: CN=1ABC28E8190E49561F50446260B57EECA5F9BF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:4e:2b:6f:96:23:03:6c:b7:8d:23:0a:69:
                    35:80:c1:c5:28:b5:43:81:81:1f:0e:14:c4:47:0f:
                    92:96:9c:d8:0f:5a:5d:d0:c7:94:77:c0:ec:ef:01:
                    b0:1d:e5:e2:14:d2:12:4e:5e:3c:e2:8d:79:10:6a:
                    ab:eb:29:fc:bd:4c:82:7a:52:63:eb:c3:96:7c:2f:
                    b4:9c:2d:38:a6:0e:32:36:56:d3:e7:da:c4:13:a1:
                    21:d5:98:c6:54:e1:fd:5e:c2:c6:32:1e:97:24:97:
                    2a:59:1d:44:fc:ef:31:f2:cf:a2:91:bb:cd:e4:70:
                    48:0b:f0:48:ce:d4:37:33:ea:87:f6:3c:ea:f7:24:
                    0c:5d:6f:1f:1c:7e:83:db:61:c8:be:5c:0e:02:78:
                    b8:73:20:c9:7e:cf:aa:23:2a:50:54:0e:a7:94:a9:
                    b5:f6:11:6b:64:73:69:64:07:2a:fc:ca:cc:31:b1:
                    af:50:1d:b3:a4:e7:ce:0e:2b:d9:6c:55:c5:20:27:
                    6a:57:31:8c:2b:2d:16:81:0a:ce:1e:0d:ab:ac:fc:
                    bf:ee:61:8b:c1:4b:26:65:0e:53:77:b8:aa:29:30:
                    12:07:ce:1c:4d:d9:ff:ad:d4:2b:0a:7d:97:99:10:
                    48:84:43:c5:0c:10:dd:d6:b6:25:1b:32:1b:19:3d:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BC:28:E8:19:0E:49:56:1F:50:44:62:60:B5:7E:EC:A5:F9:BF:6C
            X509v3 Authority Key Identifier:
                keyid:47:D8:D5:FE:E9:03:2D:80:A1:86:B4:EB:C0:BF:42:2F:04:5F:30:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:9a:d1:dc:e9:2f:f3:05:67:17:e8:fd:6e:a6:1a:18:e7:
         3f:3b:ab:f6:e2:cd:a5:1e:30:21:d9:31:17:ff:aa:22:d5:3a:
         b0:73:24:6c:45:38:d2:09:92:1c:df:14:44:d3:9f:9c:a5:41:
         a2:09:c2:64:68:b1:5b:ba:a3:b9:88:90:83:07:a3:89:9b:8c:
         a4:9a:0f:48:d9:6e:f2:25:76:71:b6:34:78:43:86:41:92:d0:
         d2:cf:07:4c:3b:d0:96:88:f3:55:0f:bb:98:2b:ba:69:48:e2:
         f4:cb:92:56:b2:de:ed:5f:89:92:3d:41:c5:73:9f:66:3d:e4:
         da:bd:81:26:dd:89:fb:6d:07:2b:36:ec:d3:4f:7e:59:24:8d:
         c9:8a:c8:a2:2b:9f:24:72:0f:fa:d2:34:6b:6c:66:fd:d5:59:
         ab:b7:dd:0d:94:04:92:17:90:b5:43:bc:3f:1b:38:79:5b:db:
         f1:a7:74:e1:3f:19:39:98:66:55:7b:26:8b:7e:33:0e:fe:2d:
         79:1f:8a:45:24:c0:f6:a6:91:43:1d:26:de:83:e7:01:c8:c4:
         eb:bd:d0:97:a4:8f:a6:47:22:cc:75:74:6a:8d:69:b5:72:9f:
         8d:ce:04:37:d1:91:0a:71:80:e9:2c:9e:9f:16:49:49:e3:73:
         55:ad:74:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEtchRofCduNWWjP/s+YEKJDU65wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdEOEQ1RkVFOTAzMkQ4MEExODZCNEVCQzBCRjQyMkYw
NDVGMzA5QjAeFw0yNDAzMTkxODUyMDFaFw0yNTAzMTgxODU3MDFaMDMxMTAvBgNV
BAMTKDFBQkMyOEU4MTkwRTQ5NTYxRjUwNDQ2MjYwQjU3RUVDQTVGOUJGNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCms04rb5YjA2y3jSMKaTWAwcUo
tUOBgR8OFMRHD5KWnNgPWl3Qx5R3wOzvAbAd5eIU0hJOXjzijXkQaqvrKfy9TIJ6
UmPrw5Z8L7ScLTimDjI2VtPn2sQToSHVmMZU4f1ewsYyHpcklypZHUT87zHyz6KR
u83kcEgL8EjO1Dcz6of2POr3JAxdbx8cfoPbYci+XA4CeLhzIMl+z6ojKlBUDqeU
qbX2EWtkc2lkByr8yswxsa9QHbOk584OK9lsVcUgJ2pXMYwrLRaBCs4eDaus/L/u
YYvBSyZlDlN3uKopMBIHzhxN2f+t1CsKfZeZEEiEQ8UMEN3WtiUbMhsZPTeBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGrwo6BkOSVYfUERiYLV+7KX5v2wwHwYDVR0j
BBgwFoAUR9jV/ukDLYChhrTrwL9CLwRfMJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkN4dE5pa0xaZEZ3RUZiQ3hxU2QzVkxKREN2RVBvQWkxVXN0MkxZelpt
N0cvMC80N0Q4RDVGRUU5MDMyRDgwQTE4NkI0RUJDMEJGNDIyRjA0NUYzMDlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3RDhENUZFRTkwMzJEODBB
MTg2QjRFQkMwQkY0MjJGMDQ1RjMwOUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZDeHROaWtMWmRGd0VGYkN4cVNkM1ZMSkRDdkVQb0FpMVVzdDJMWXpabTdHLzAv
MzQzNTJlMzczMTJlMzEzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUd0MA0GCSqGSIb3DQEBCwUAA4IBAQBaUJrR3Okv
8wVnF+j9bqYaGOc/O6v24s2lHjAh2TEX/6oi1TqwcyRsRTjSCZIc3xRE05+cpUGi
CcJkaLFbuqO5iJCDB6OJm4ykmg9I2W7yJXZxtjR4Q4ZBktDSzwdMO9CWiPNVD7uY
K7ppSOL0y5JWst7tX4mSPUHFc59mPeTavYEm3Yn7bQcrNuzTT35ZJI3JisiiK58k
cg/60jRrbGb91Vmrt90NlASSF5C1Q7w/Gzh5W9vxp3ThPxk5mGZVeyaLfjMO/i15
H4pFJMD2ppFDHSbeg+cByMTrvdCXpI+mRyLMdXRqjWm1cp+NzgQ30ZEKcYDpLJ6f
FklJ43NVrXSm
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org