Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa
File:                     34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa (raw, json)
Hash identifier:          lcA7VLne9OMYMZRMKbquv6PFiSO9VVs+iWg5+yefyHY=
Subject key identifier:   D7:71:F0:35:08:41:E5:D7:BC:A5:27:B0:25:91:AC:D4:A1:98:00:2C
Certificate issuer:       /CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
Certificate serial:       3236DEEA67052029F62EACD654A5A3D30836031F
Authority key identifier: 14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa
Signing time:             Mon 12 Feb 2024 12:26:43 +0000
ROA not before:           Mon 12 Feb 2024 12:21:43 +0000
ROA not after:            Mon 10 Feb 2025 12:26:43 +0000
asID:                     269041
IP address blocks:        45.178.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:36:de:ea:67:05:20:29:f6:2e:ac:d6:54:a5:a3:d3:08:36:03:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
        Validity
            Not Before: Feb 12 12:21:43 2024 GMT
            Not After : Feb 10 12:26:43 2025 GMT
        Subject: CN=D771F0350841E5D7BCA527B02591ACD4A198002C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:64:ac:58:9d:c7:c2:da:3f:35:70:8e:cb:3f:
                    d5:5f:d0:e7:dc:2b:0f:8a:1b:d8:0b:f4:a1:fa:05:
                    32:db:23:0b:d4:07:8d:2f:6a:16:24:42:3e:37:2f:
                    6b:b2:cc:f4:67:2a:2e:cf:05:9c:9f:61:93:a8:dc:
                    18:98:47:d1:79:a5:5d:72:32:d4:3e:90:3a:6c:42:
                    9e:e6:be:ee:99:b5:79:45:04:d5:25:aa:29:10:8f:
                    9e:78:d1:6e:10:b0:f6:2f:bb:76:38:fd:90:f5:51:
                    d1:04:35:c7:ca:0f:78:34:f2:72:4d:d1:a3:45:64:
                    b8:fb:84:b0:7b:2e:d3:68:ab:29:42:35:14:32:22:
                    db:38:c0:6f:1e:87:37:bb:30:22:2b:ba:f3:58:0c:
                    72:51:2d:76:82:6f:bc:6f:ba:27:52:52:da:f5:be:
                    ca:58:3f:8c:fb:36:2e:4a:58:a5:d1:0e:90:73:a6:
                    89:36:be:ae:1f:72:d4:e5:c5:6d:f7:3d:15:82:c0:
                    f2:a5:8f:d7:d6:74:ab:43:aa:9b:12:19:d5:84:0e:
                    24:d3:af:83:ee:f6:e9:40:05:e4:fb:6f:83:cd:c9:
                    1c:d8:9a:09:3f:4b:00:23:f7:df:da:58:20:d1:73:
                    8c:df:4e:d2:f2:d2:2a:1b:a3:29:38:e5:30:ba:85:
                    f0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:71:F0:35:08:41:E5:D7:BC:A5:27:B0:25:91:AC:D4:A1:98:00:2C
            X509v3 Authority Key Identifier:
                keyid:14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:14:27:46:0d:32:fd:3c:51:fc:9f:6e:7e:4e:0c:8e:f9:5d:
         13:df:20:6f:6e:22:c5:fd:f2:78:5e:d8:5c:08:74:bd:0c:b1:
         eb:c9:81:ed:60:b1:06:bd:49:1f:d7:92:50:66:b6:9f:96:9f:
         e3:e4:50:54:89:ee:cd:2f:2a:b6:06:fd:79:f7:12:1b:75:ac:
         0b:50:9f:b8:72:59:1b:3f:42:84:06:f4:29:0d:61:eb:0e:77:
         df:7f:84:21:40:db:47:42:71:60:7e:80:b7:77:3f:68:e9:a4:
         c0:aa:71:a7:86:4c:bf:6d:5d:a2:da:ab:4d:2b:02:c5:77:a7:
         79:6e:c6:33:23:75:b3:85:82:fb:d8:bf:a9:84:58:19:2e:ff:
         cd:c9:39:3f:22:c0:f9:70:c0:3f:dd:c3:6a:ef:13:f9:42:64:
         3f:59:46:aa:43:d8:e3:e3:5b:b9:b7:ac:56:ef:68:83:39:0b:
         88:85:68:c5:7f:cd:ec:bd:14:4e:98:e1:bf:1b:37:8d:52:ab:
         af:bb:e9:5a:f4:74:49:45:5c:6d:9f:50:d7:81:ac:29:66:b0:
         0b:66:83:2b:6b:64:ad:3e:ac:09:71:09:30:f0:8b:ee:df:00:
         d3:11:6a:38:a4:61:0c:db:f1:db:ec:16:ad:42:eb:4f:d4:5f:
         cc:be:62:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMjbe6mcFICn2LqzWVKWj0wg2Ax8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGNjFBRDI5MEE4REFGOEI1MkQxNDk3NjYzM0EzNTdC
NDU0QUI1QjAeFw0yNDAyMTIxMjIxNDNaFw0yNTAyMTAxMjI2NDNaMDMxMTAvBgNV
BAMTKEQ3NzFGMDM1MDg0MUU1RDdCQ0E1MjdCMDI1OTFBQ0Q0QTE5ODAwMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEZKxYncfC2j81cI7LP9Vf0Ofc
Kw+KG9gL9KH6BTLbIwvUB40vahYkQj43L2uyzPRnKi7PBZyfYZOo3BiYR9F5pV1y
MtQ+kDpsQp7mvu6ZtXlFBNUlqikQj5540W4QsPYvu3Y4/ZD1UdEENcfKD3g08nJN
0aNFZLj7hLB7LtNoqylCNRQyIts4wG8ehze7MCIruvNYDHJRLXaCb7xvuidSUtr1
vspYP4z7Ni5KWKXRDpBzpok2vq4fctTlxW33PRWCwPKlj9fWdKtDqpsSGdWEDiTT
r4Pu9ulABeT7b4PNyRzYmgk/SwAj99/aWCDRc4zfTtLy0ioboyk45TC6hfCfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU13HwNQhB5de8pSewJZGs1KGYACwwHwYDVR0j
BBgwFoAUFPYa0pCo2vi1LRSXZjOjV7RUq1swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlg2ajFTQ0NXMXRxU0FjTURuTWN5a1NRb3BxTE1mTFFMaDNNc25FTktI
NGgvMC8xNEY2MUFEMjkwQThEQUY4QjUyRDE0OTc2NjMzQTM1N0I0NTRBQjVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0RjYxQUQyOTBBOERBRjhC
NTJEMTQ5NzY2MzNBMzU3QjQ1NEFCNUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZYNmoxU0NDVzF0cVNBY01Ebk1jeWtTUW9wcUxNZkxRTGgzTXNuRU5LSDRoLzAv
MzQzNTJlMzEzNzM4MmUzMTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMDM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtsqgwDQYJKoZIhvcNAQELBQADggEBAHsUJ0YN
Mv08Ufyfbn5ODI75XRPfIG9uIsX98nhe2FwIdL0MsevJge1gsQa9SR/XklBmtp+W
n+PkUFSJ7s0vKrYG/Xn3Eht1rAtQn7hyWRs/QoQG9CkNYesOd99/hCFA20dCcWB+
gLd3P2jppMCqcaeGTL9tXaLaq00rAsV3p3luxjMjdbOFgvvYv6mEWBku/83JOT8i
wPlwwD/dw2rvE/lCZD9ZRqpD2OPjW7m3rFbvaIM5C4iFaMV/zey9FE6Y4b8bN41S
q6+76Vr0dElFXG2fUNeBrClmsAtmgytrZK0+rAlxCTDwi+7fANMRajikYQzb8dvs
Fq1C60/UX8y+YmM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org