Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3137302e302f32342d3234203d3e20323639303431.roa
File:                     34352e3137382e3137302e302f32342d3234203d3e20323639303431.roa (raw, json)
Hash identifier:          muPDMOnmei5xFLSw+hvbQQAJS78sRKYDTG9dqmrtkm0=
Subject key identifier:   16:CC:82:28:7B:07:75:B0:C9:06:23:D4:F4:AE:FE:B3:81:1B:E8:72
Certificate issuer:       /CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
Certificate serial:       0E756E1B74741F67C8174B7E53C7ED5A59ED3914
Authority key identifier: 14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3137302e302f32342d3234203d3e20323639303431.roa
Signing time:             Mon 12 Feb 2024 12:26:45 +0000
ROA not before:           Mon 12 Feb 2024 12:21:45 +0000
ROA not after:            Mon 10 Feb 2025 12:26:45 +0000
asID:                     269041
IP address blocks:        45.178.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:75:6e:1b:74:74:1f:67:c8:17:4b:7e:53:c7:ed:5a:59:ed:39:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
        Validity
            Not Before: Feb 12 12:21:45 2024 GMT
            Not After : Feb 10 12:26:45 2025 GMT
        Subject: CN=16CC82287B0775B0C90623D4F4AEFEB3811BE872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:dd:0b:e1:1f:0b:76:71:d1:6f:ca:09:12:
                    73:65:d3:84:cd:51:8e:65:1b:66:b7:13:10:4a:8d:
                    57:25:c7:9a:e2:05:b9:88:ad:ab:67:40:55:24:50:
                    ae:c9:50:97:59:e3:95:e4:3c:1e:a4:84:b2:6d:d1:
                    57:47:c1:29:c4:4d:16:83:32:26:02:6f:19:a8:aa:
                    77:99:06:b6:cd:06:bf:78:0b:f5:76:95:9f:76:4d:
                    23:7a:b9:1a:06:41:d9:14:ea:ba:01:61:7f:4f:b6:
                    15:32:fe:2c:0f:64:bb:4b:45:d0:eb:b7:03:08:b5:
                    aa:36:18:8c:83:40:4b:ef:ca:da:4d:cb:82:09:21:
                    12:3b:60:f2:36:e2:92:ba:32:b7:f3:45:36:ca:ac:
                    96:6f:18:6c:61:c4:e5:52:cd:96:cd:cd:10:28:c7:
                    22:06:5d:9f:5d:d3:37:4d:45:34:b3:f8:eb:d9:c5:
                    9a:3f:39:02:c7:87:5a:54:ba:76:27:01:fb:f3:f1:
                    32:80:04:b7:93:09:b7:bc:77:90:26:6a:d8:f6:21:
                    02:4f:7e:07:a0:e4:55:1d:f8:2d:b1:a5:e2:c4:c4:
                    57:01:cf:18:9a:53:8e:c1:f3:97:bd:cd:88:77:8d:
                    66:74:89:91:da:60:f9:69:f8:17:67:cd:78:9c:c2:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CC:82:28:7B:07:75:B0:C9:06:23:D4:F4:AE:FE:B3:81:1B:E8:72
            X509v3 Authority Key Identifier:
                keyid:14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3137302e302f32342d3234203d3e20323639303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ed:b4:fc:d1:58:ff:dd:6c:ad:7d:97:78:e4:53:71:7d:1c:
         2e:75:f7:da:dd:24:b3:f7:8c:cd:d2:14:68:63:43:2b:7a:af:
         86:0f:77:16:41:d5:48:3b:28:06:9c:7a:ae:00:5b:0c:20:e6:
         e7:c5:a2:de:27:54:94:c4:74:cc:4d:cc:16:ae:4e:a3:82:55:
         c7:fa:da:6a:1b:c7:54:f0:98:05:bc:d2:15:f7:7d:62:29:a7:
         94:3b:1e:eb:30:b9:a6:56:c8:79:65:f2:09:00:44:da:88:7d:
         e7:dd:cb:ca:f8:1d:b9:8e:00:fd:53:b0:69:66:72:99:8e:0f:
         af:7c:7f:94:e3:a0:6f:01:59:57:5b:8e:20:2b:d9:75:b9:7b:
         10:92:a5:fa:6d:37:26:4b:cf:a1:aa:bd:b4:8c:ee:f7:59:83:
         ae:81:75:d8:7c:6d:10:ba:da:aa:f0:50:10:26:84:ce:77:64:
         ae:42:a2:cd:6c:3c:45:0f:12:cc:10:a2:32:63:30:5f:c3:91:
         25:84:fe:5c:d8:6a:4f:7d:de:c6:44:85:c0:b4:66:b0:bc:31:
         31:82:68:10:c2:b9:b0:b2:43:e1:b1:41:39:fd:0c:39:01:7a:
         0c:30:ab:b4:76:34:1f:be:b0:1e:f3:3a:48:4d:a5:f3:e0:b6:
         42:13:91:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDnVuG3R0H2fIF0t+U8ftWlntORQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGNjFBRDI5MEE4REFGOEI1MkQxNDk3NjYzM0EzNTdC
NDU0QUI1QjAeFw0yNDAyMTIxMjIxNDVaFw0yNTAyMTAxMjI2NDVaMDMxMTAvBgNV
BAMTKDE2Q0M4MjI4N0IwNzc1QjBDOTA2MjNENEY0QUVGRUIzODExQkU4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQt0L4R8LdnHRb8oJEnNl04TN
UY5lG2a3ExBKjVclx5riBbmIratnQFUkUK7JUJdZ45XkPB6khLJt0VdHwSnETRaD
MiYCbxmoqneZBrbNBr94C/V2lZ92TSN6uRoGQdkU6roBYX9PthUy/iwPZLtLRdDr
twMItao2GIyDQEvvytpNy4IJIRI7YPI24pK6MrfzRTbKrJZvGGxhxOVSzZbNzRAo
xyIGXZ9d0zdNRTSz+OvZxZo/OQLHh1pUunYnAfvz8TKABLeTCbe8d5Amatj2IQJP
fgeg5FUd+C2xpeLExFcBzxiaU47B85e9zYh3jWZ0iZHaYPlp+BdnzXicwjRLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFsyCKHsHdbDJBiPU9K7+s4Eb6HIwHwYDVR0j
BBgwFoAUFPYa0pCo2vi1LRSXZjOjV7RUq1swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlg2ajFTQ0NXMXRxU0FjTURuTWN5a1NRb3BxTE1mTFFMaDNNc25FTktI
NGgvMC8xNEY2MUFEMjkwQThEQUY4QjUyRDE0OTc2NjMzQTM1N0I0NTRBQjVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0RjYxQUQyOTBBOERBRjhC
NTJEMTQ5NzY2MzNBMzU3QjQ1NEFCNUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZYNmoxU0NDVzF0cVNBY01Ebk1jeWtTUW9wcUxNZkxRTGgzTXNuRU5LSDRoLzAv
MzQzNTJlMzEzNzM4MmUzMTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsqowDQYJKoZIhvcNAQELBQADggEBAEfttPzR
WP/dbK19l3jkU3F9HC5199rdJLP3jM3SFGhjQyt6r4YPdxZB1Ug7KAaceq4AWwwg
5ufFot4nVJTEdMxNzBauTqOCVcf62mobx1TwmAW80hX3fWIpp5Q7HuswuaZWyHll
8gkARNqIfefdy8r4HbmOAP1TsGlmcpmOD698f5TjoG8BWVdbjiAr2XW5exCSpfpt
NyZLz6GqvbSM7vdZg66Bddh8bRC62qrwUBAmhM53ZK5Cos1sPEUPEswQojJjMF/D
kSWE/lzYak993sZEhcC0ZrC8MTGCaBDCubCyQ+GxQTn9DDkBegwwq7R2NB++sB7z
OkhNpfPgtkITkTg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org