Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
File:                     34352e3136312e39362e302f32322d3232203d3e20323638343633.roa (raw, json)
Hash identifier:          ugCVAJay1RKeVbfrEXXiM0mX3zoaCVL7on3Qyfkoa+g=
Subject key identifier:   B7:2A:EE:F5:12:53:1B:B7:3D:44:79:E9:E3:A9:41:8D:61:EA:C6:08
Certificate issuer:       /CN=C794730385E4254A920ABD4CDF13B219AA4C99E6
Certificate serial:       446578B8160BC80FEEF20885EAF0BF382276B5F7
Authority key identifier: C7:94:73:03:85:E4:25:4A:92:0A:BD:4C:DF:13:B2:19:AA:4C:99:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C794730385E4254A920ABD4CDF13B219AA4C99E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
Signing time:             Mon 18 Dec 2023 19:08:15 +0000
ROA not before:           Mon 18 Dec 2023 19:03:15 +0000
ROA not after:            Mon 16 Dec 2024 19:08:15 +0000
asID:                     268463
IP address blocks:        45.161.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:65:78:b8:16:0b:c8:0f:ee:f2:08:85:ea:f0:bf:38:22:76:b5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C794730385E4254A920ABD4CDF13B219AA4C99E6
        Validity
            Not Before: Dec 18 19:03:15 2023 GMT
            Not After : Dec 16 19:08:15 2024 GMT
        Subject: CN=B72AEEF512531BB73D4479E9E3A9418D61EAC608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:40:4c:14:a6:86:a1:a2:b8:8f:56:6e:fa:
                    9c:83:b5:8a:cb:15:a6:2d:1f:4b:9f:78:30:2b:d5:
                    a3:02:c2:8f:94:0d:f5:88:32:d0:53:29:8c:a7:2f:
                    e9:ec:86:20:e0:02:de:75:57:86:44:6c:61:5c:f0:
                    0c:df:c6:38:c8:57:e7:24:41:68:04:de:25:b9:d5:
                    7d:51:e4:54:18:6b:92:0f:1c:68:3a:e4:f5:fe:15:
                    24:1c:57:cd:56:db:88:59:8d:c5:49:15:46:b1:78:
                    cb:ce:a5:ed:30:c3:78:fc:0e:e3:e1:ba:42:b3:ee:
                    7d:c4:55:45:76:10:d6:22:74:0a:a6:cd:9f:e5:57:
                    0f:10:3f:a3:54:ed:0b:93:24:06:45:e5:47:ce:e9:
                    f4:89:3d:6e:52:bb:05:2d:12:b3:f7:d0:d6:0e:79:
                    b5:ef:7b:fe:f8:54:52:df:f8:63:99:14:70:ab:e7:
                    82:41:ac:21:d9:49:d1:a4:45:dd:5d:3e:54:77:ca:
                    19:3f:ab:55:e4:04:af:5f:0c:a7:37:96:59:e3:29:
                    51:03:2c:bf:33:82:fe:96:ec:30:28:34:e7:22:a6:
                    a5:94:06:57:36:5f:a0:cb:4e:52:6b:f1:bb:fd:e3:
                    e6:77:7b:70:0e:dc:bf:f2:e4:12:91:9a:1b:4c:0d:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2A:EE:F5:12:53:1B:B7:3D:44:79:E9:E3:A9:41:8D:61:EA:C6:08
            X509v3 Authority Key Identifier:
                keyid:C7:94:73:03:85:E4:25:4A:92:0A:BD:4C:DF:13:B2:19:AA:4C:99:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/C794730385E4254A920ABD4CDF13B219AA4C99E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C794730385E4254A920ABD4CDF13B219AA4C99E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:ca:d6:1a:b2:6f:a3:bc:34:40:b8:01:cc:31:48:05:2a:34:
         df:c9:91:62:14:cf:d9:1c:e6:63:65:8f:b1:25:0c:8d:27:d5:
         16:16:21:c1:36:69:30:86:6d:2a:97:f3:65:a6:ea:c9:1b:b8:
         39:3f:18:67:21:02:4e:7c:cf:42:cb:26:46:cc:9a:d9:b5:58:
         71:fb:f1:cd:6b:54:1a:3f:7a:a2:d8:7b:94:99:a3:8f:b3:9f:
         f8:78:af:30:31:c3:7a:74:4c:c4:e6:2b:75:c4:b7:5d:d2:85:
         36:85:ca:68:e6:89:97:22:f7:3e:c7:53:a8:f6:f9:48:65:07:
         c3:67:19:98:a6:75:9c:ff:1f:59:c6:13:e8:c5:84:d4:28:d6:
         89:8c:9d:d7:2c:c5:9c:34:cb:25:d4:af:f7:72:b6:e0:c3:eb:
         cd:dd:cc:57:44:62:8d:93:8b:1a:35:ec:9d:ed:fd:2e:cf:55:
         e7:cd:2e:80:30:6a:da:3a:f5:14:c0:ce:4f:b4:44:0c:89:f3:
         dc:26:5b:f2:f4:80:c1:68:04:17:50:b8:0e:6b:b7:ad:49:58:
         89:dd:ff:09:be:c3:4f:59:f9:86:03:2c:ed:9c:28:33:6e:19:
         20:93:0c:41:7c:65:14:38:12:7b:79:ba:dc:c6:e9:cd:ab:e2:
         19:6c:a7:30
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURGV4uBYLyA/u8giF6vC/OCJ2tfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc5NDczMDM4NUU0MjU0QTkyMEFCRDRDREYxM0IyMTlB
QTRDOTlFNjAeFw0yMzEyMTgxOTAzMTVaFw0yNDEyMTYxOTA4MTVaMDMxMTAvBgNV
BAMTKEI3MkFFRUY1MTI1MzFCQjczRDQ0NzlFOUUzQTk0MThENjFFQUM2MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL70BMFKaGoaK4j1Zu+pyDtYrL
FaYtH0ufeDAr1aMCwo+UDfWIMtBTKYynL+nshiDgAt51V4ZEbGFc8AzfxjjIV+ck
QWgE3iW51X1R5FQYa5IPHGg65PX+FSQcV81W24hZjcVJFUaxeMvOpe0ww3j8DuPh
ukKz7n3EVUV2ENYidAqmzZ/lVw8QP6NU7QuTJAZF5UfO6fSJPW5SuwUtErP30NYO
ebXve/74VFLf+GOZFHCr54JBrCHZSdGkRd1dPlR3yhk/q1XkBK9fDKc3llnjKVED
LL8zgv6W7DAoNOcipqWUBlc2X6DLTlJr8bv94+Z3e3AO3L/y5BKRmhtMDcSDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtyru9RJTG7c9RHnp46lBjWHqxggwHwYDVR0j
BBgwFoAUx5RzA4XkJUqSCr1M3xOyGapMmeYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNNd3BvV1FERTlRMlE0YVRGR0hxdjZqZGcybTdZRmNENjlOcUs2ZTJm
S3MvMC9DNzk0NzMwMzg1RTQyNTRBOTIwQUJENENERjEzQjIxOUFBNEM5OUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M3OTQ3MzAzODVFNDI1NEE5
MjBBQkQ0Q0RGMTNCMjE5QUE0Qzk5RTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZzTXdwb1dRREU5UTJRNGFURkdIcXY2amRnMm03WUZjRDY5TnFLNmUyZktzLzAv
MzQzNTJlMzEzNjMxMmUzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaFgMA0GCSqGSIb3DQEBCwUAA4IBAQBiytYasm+j
vDRAuAHMMUgFKjTfyZFiFM/ZHOZjZY+xJQyNJ9UWFiHBNmkwhm0ql/NlpurJG7g5
PxhnIQJOfM9CyyZGzJrZtVhx+/HNa1QaP3qi2HuUmaOPs5/4eK8wMcN6dEzE5it1
xLdd0oU2hcpo5omXIvc+x1Oo9vlIZQfDZxmYpnWc/x9ZxhPoxYTUKNaJjJ3XLMWc
NMsl1K/3crbgw+vN3cxXRGKNk4saNeyd7f0uz1XnzS6AMGraOvUUwM5PtEQMifPc
Jlvy9IDBaAQXULgOa7etSViJ3f8JvsNPWfmGAyztnCgzbhkgkwxBfGUUOBJ7ebrc
xunNq+IZbKcw
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org