Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35352e302f32342d3234203d3e20323638323037.roa
File:                     34352e3233352e35352e302f32342d3234203d3e20323638323037.roa (raw, json)
Hash identifier:          r0tZqsR8iYauX9LsJbKgQYzucNX/3jkGw+MoK4so9cQ=
Subject key identifier:   65:BD:32:A5:4C:CB:03:BD:B7:76:BE:A8:5F:E4:03:40:B4:42:3E:EF
Certificate issuer:       /CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
Certificate serial:       3AA47BD0C31CE19B65A558E2921F758968B24670
Authority key identifier: 46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35352e302f32342d3234203d3e20323638323037.roa
Signing time:             Mon 10 Apr 2023 13:35:19 +0000
ROA not before:           Mon 10 Apr 2023 13:30:19 +0000
ROA not after:            Mon 08 Apr 2024 13:35:19 +0000
asID:                     268207
IP address blocks:        45.235.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a4:7b:d0:c3:1c:e1:9b:65:a5:58:e2:92:1f:75:89:68:b2:46:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
        Validity
            Not Before: Apr 10 13:30:19 2023 GMT
            Not After : Apr  8 13:35:19 2024 GMT
        Subject: CN=65BD32A54CCB03BDB776BEA85FE40340B4423EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:ee:9e:2c:0c:93:27:07:16:6b:69:72:4b:
                    6c:cb:3d:96:23:b0:85:b6:9f:f3:86:af:11:0e:8d:
                    b6:5c:06:71:25:d4:80:38:64:32:bf:12:d9:f3:5b:
                    3d:f2:65:f3:e7:35:a0:2b:8b:0a:81:77:ac:a9:da:
                    33:70:80:5e:f1:04:b0:f1:45:8c:33:7f:40:bf:cc:
                    9c:78:1e:82:b9:ad:a5:fa:c1:89:d1:72:da:9f:e0:
                    32:56:18:50:12:48:34:10:e2:be:90:00:e9:a3:3d:
                    43:c0:77:8c:6d:e8:0f:7a:0b:78:e2:6a:ab:c5:f5:
                    1a:87:95:36:20:5e:a8:8b:fd:e2:26:00:3d:b7:a1:
                    fc:5c:d1:e8:60:40:47:f4:e8:c0:ff:b6:a0:b6:1b:
                    f2:3d:be:36:58:a7:5e:89:50:33:cf:05:b6:4e:65:
                    a0:0a:6a:06:3e:f9:17:3c:a4:31:30:62:cc:c4:28:
                    58:55:30:19:af:94:07:f8:dd:7d:61:f5:b7:0b:07:
                    62:b8:90:45:03:44:32:cd:83:27:e5:20:85:10:1a:
                    94:c5:e0:b3:56:3b:ee:18:be:1a:ca:2f:80:72:f6:
                    6f:75:8e:72:3d:95:1a:f7:be:68:61:96:5d:68:93:
                    dc:8f:2d:bb:5a:3c:3b:43:0e:0b:06:48:f0:df:d2:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BD:32:A5:4C:CB:03:BD:B7:76:BE:A8:5F:E4:03:40:B4:42:3E:EF
            X509v3 Authority Key Identifier:
                keyid:46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35352e302f32342d3234203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:3c:5a:85:cd:f3:d3:0d:02:28:d0:88:92:f8:1b:51:d3:13:
         b4:13:c1:65:9a:9f:a4:61:17:e7:c9:2d:b5:99:4e:7a:96:91:
         21:f7:5e:e0:79:5c:84:4f:b7:e2:9e:b1:53:dd:9c:ae:fa:13:
         3d:62:c6:98:87:a4:0b:7e:9e:47:71:92:a3:ee:a6:9b:e8:61:
         6c:50:ac:8d:e5:91:16:a1:db:f1:52:e5:b6:2d:3f:4d:5d:94:
         9e:f9:b8:86:a1:40:66:af:d0:e5:cb:f9:9c:d6:33:9d:31:35:
         84:0a:2e:12:a7:d3:cc:49:60:0c:95:49:8b:15:34:33:d7:2c:
         6e:aa:30:8c:94:a4:36:cd:53:fb:ce:32:a5:76:aa:7c:3e:92:
         bd:65:a2:23:45:d9:3e:57:f5:03:84:50:f6:cb:3d:89:79:fe:
         a8:ed:93:99:25:97:eb:79:d1:94:bf:48:ff:27:33:b2:7f:00:
         ab:fa:76:b7:6b:3e:9c:1d:a2:f4:91:da:6c:8a:99:9c:e6:47:
         b9:93:6f:e6:23:99:7b:7c:a4:71:82:9a:e7:b8:3a:99:f1:c2:
         93:28:52:bf:ef:e1:b5:5e:4f:eb:55:b2:61:e1:81:84:47:2a:
         57:6d:c5:3b:41:71:7c:83:a8:a5:86:3d:47:1d:da:54:6e:a5:
         af:d4:39:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOqR70MMc4ZtlpVjikh91iWiyRnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZDRkY4ODU3NjU2ODhGRDZBMkNDQ0RCN0VBNzBCODM3
Qjc0Q0QwODAeFw0yMzA0MTAxMzMwMTlaFw0yNDA0MDgxMzM1MTlaMDMxMTAvBgNV
BAMTKDY1QkQzMkE1NENDQjAzQkRCNzc2QkVBODVGRTQwMzQwQjQ0MjNFRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5u6eLAyTJwcWa2lyS2zLPZYj
sIW2n/OGrxEOjbZcBnEl1IA4ZDK/EtnzWz3yZfPnNaAriwqBd6yp2jNwgF7xBLDx
RYwzf0C/zJx4HoK5raX6wYnRctqf4DJWGFASSDQQ4r6QAOmjPUPAd4xt6A96C3ji
aqvF9RqHlTYgXqiL/eImAD23ofxc0ehgQEf06MD/tqC2G/I9vjZYp16JUDPPBbZO
ZaAKagY++Rc8pDEwYszEKFhVMBmvlAf43X1h9bcLB2K4kEUDRDLNgyflIIUQGpTF
4LNWO+4YvhrKL4By9m91jnI9lRr3vmhhll1ok9yPLbtaPDtDDgsGSPDf0ncFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZb0ypUzLA723dr6oX+QDQLRCPu8wHwYDVR0j
BBgwFoAURs/4hXZWiP1qLMzbfqcLg3t0zQgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM
QVMvMS80NkNGRjg4NTc2NTY4OEZENkEyQ0NDREI3RUE3MEI4MzdCNzRDRDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ2Q0ZGODg1NzY1Njg4RkQ2
QTJDQ0NEQjdFQTcwQjgzN0I3NENEMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0czcDl0a2NoZEFQdnBKOVNvcXlwOXFaSEdtOWNTOTRMUmExSDlna3hZTEFTLzEv
MzQzNTJlMzIzMzM1MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALes3MA0GCSqGSIb3DQEBCwUAA4IBAQCyPFqFzfPT
DQIo0IiS+BtR0xO0E8Flmp+kYRfnyS21mU56lpEh917geVyET7finrFT3Zyu+hM9
YsaYh6QLfp5HcZKj7qab6GFsUKyN5ZEWodvxUuW2LT9NXZSe+biGoUBmr9Dly/mc
1jOdMTWECi4Sp9PMSWAMlUmLFTQz1yxuqjCMlKQ2zVP7zjKldqp8PpK9ZaIjRdk+
V/UDhFD2yz2Jef6o7ZOZJZfredGUv0j/JzOyfwCr+na3az6cHaL0kdpsipmc5ke5
k2/mI5l7fKRxgprnuDqZ8cKTKFK/7+G1Xk/rVbJh4YGERypXbcU7QXF8g6ilhj1H
HdpUbqWv1DlC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org