Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/AS267041.roa
File:                     AS267041.roa (raw, json)
Hash identifier:          YXjPbI1Xt8WO6eSnj2sd4MBTNjqCHlFKtU1mGFC6Jng=
Subject key identifier:   F7:09:C0:A8:7D:1E:04:11:FC:47:9E:61:D3:D6:0F:5E:E4:0B:34:60
Certificate issuer:       /CN=B6BEE4549E32ABF6F57A553EEF48D178E9460D2B
Certificate serial:       6CD4C823A76648F726CF1C8946FE4DE01E8EF579
Authority key identifier: B6:BE:E4:54:9E:32:AB:F6:F5:7A:55:3E:EF:48:D1:78:E9:46:0D:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6BEE4549E32ABF6F57A553EEF48D178E9460D2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/AS267041.roa
Signing time:             Mon 08 Apr 2024 15:13:41 +0000
ROA not before:           Mon 08 Apr 2024 15:08:41 +0000
ROA not after:            Mon 07 Apr 2025 15:13:41 +0000
asID:                     267041
IP address blocks:        45.228.48.0/22 maxlen: 22
                          45.228.48.0/24 maxlen: 24
                          45.228.49.0/24 maxlen: 24
                          45.228.50.0/24 maxlen: 24
                          45.228.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d4:c8:23:a7:66:48:f7:26:cf:1c:89:46:fe:4d:e0:1e:8e:f5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6BEE4549E32ABF6F57A553EEF48D178E9460D2B
        Validity
            Not Before: Apr  8 15:08:41 2024 GMT
            Not After : Apr  7 15:13:41 2025 GMT
        Subject: CN=F709C0A87D1E0411FC479E61D3D60F5EE40B3460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:b1:23:2e:db:d1:99:84:2c:b6:2c:46:e0:
                    1e:3f:c8:36:4e:18:c9:60:fa:c7:6e:1b:fe:73:b4:
                    02:de:65:7e:6c:ec:ea:ee:c6:d7:7b:c6:59:96:4a:
                    23:ca:c6:cf:c7:a1:f1:71:2a:36:81:51:ce:56:fc:
                    8b:f6:a1:99:df:1b:d7:3b:20:e8:5c:50:c5:49:21:
                    84:ea:6a:77:07:09:1a:61:eb:eb:6f:7d:1e:55:bd:
                    ce:1e:cd:63:08:45:12:ba:13:b6:80:49:fd:c1:67:
                    98:1f:8f:da:87:ea:92:64:99:40:4e:35:c1:08:05:
                    9d:00:b2:ef:cb:21:81:d9:5c:cd:52:94:21:70:e5:
                    5e:53:2b:4f:62:54:13:4b:62:e3:6f:3c:3d:82:59:
                    03:91:e1:45:c3:79:d1:5d:56:6f:4f:8c:0f:66:cd:
                    50:96:91:24:b5:6e:22:27:c7:0a:96:d6:b6:2a:5d:
                    dd:be:fa:2d:a2:d0:79:2b:2d:9e:14:b8:22:b2:d3:
                    b5:a7:e6:08:26:42:bf:c7:ba:e6:fc:eb:5c:fd:be:
                    9c:f3:db:77:c8:ff:d3:9c:17:fa:35:f8:33:a4:44:
                    92:89:01:90:55:bf:5d:6c:3f:3a:ee:37:78:39:a6:
                    c0:99:8b:92:71:61:8b:eb:35:6c:10:38:4b:b2:bd:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:09:C0:A8:7D:1E:04:11:FC:47:9E:61:D3:D6:0F:5E:E4:0B:34:60
            X509v3 Authority Key Identifier:
                keyid:B6:BE:E4:54:9E:32:AB:F6:F5:7A:55:3E:EF:48:D1:78:E9:46:0D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/B6BEE4549E32ABF6F57A553EEF48D178E9460D2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6BEE4549E32ABF6F57A553EEF48D178E9460D2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/AS267041.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:24:37:9b:fe:c1:f3:71:75:12:94:d9:45:62:59:d1:57:b9:
         17:ca:35:2a:fc:ec:58:bd:c9:4c:d4:a6:b9:ee:4c:1e:29:77:
         f2:9c:fd:54:75:cb:92:d2:0a:1d:1d:8d:d6:5c:0e:96:17:4c:
         3c:be:63:ae:d5:c7:a1:c5:d7:60:19:87:53:7c:56:97:95:01:
         b8:9b:5e:99:1e:17:d2:94:e1:54:17:9b:54:f6:79:71:f7:3a:
         0c:6b:64:85:5c:24:27:dc:8f:3f:e8:01:e4:7e:7c:ca:a6:24:
         5f:92:75:11:64:b1:1b:d9:f0:78:8e:0e:c3:ec:ed:82:43:2a:
         ee:7c:6b:e3:84:a1:09:3f:11:80:ce:56:89:1c:9b:8e:41:e6:
         2f:9c:01:c1:2f:3a:eb:24:de:4d:96:76:f7:a9:fe:02:40:bb:
         b1:99:4c:47:5a:9a:18:1b:46:42:06:b1:e1:ba:a9:bc:25:35:
         d6:e5:6b:43:2d:6f:75:bb:5e:e9:db:f1:c1:7f:6f:5c:52:09:
         c6:7f:ee:92:bb:a4:49:91:66:1f:47:d4:a3:fe:99:a9:60:42:
         5e:02:8c:03:93:1d:c2:9b:49:6e:15:c8:40:c1:c2:cd:be:44:
         78:9b:7b:d9:4c:b8:97:69:ca:16:b0:86:7c:e7:ea:5e:48:3e:
         fd:c3:3c:56
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUbNTII6dmSPcmzxyJRv5N4B6O9XkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZCRUU0NTQ5RTMyQUJGNkY1N0E1NTNFRUY0OEQxNzhF
OTQ2MEQyQjAeFw0yNDA0MDgxNTA4NDFaFw0yNTA0MDcxNTEzNDFaMDMxMTAvBgNV
BAMTKEY3MDlDMEE4N0QxRTA0MTFGQzQ3OUU2MUQzRDYwRjVFRTQwQjM0NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDihbEjLtvRmYQstixG4B4/yDZO
GMlg+sduG/5ztALeZX5s7Oruxtd7xlmWSiPKxs/HofFxKjaBUc5W/Iv2oZnfG9c7
IOhcUMVJIYTqancHCRph6+tvfR5Vvc4ezWMIRRK6E7aASf3BZ5gfj9qH6pJkmUBO
NcEIBZ0Asu/LIYHZXM1SlCFw5V5TK09iVBNLYuNvPD2CWQOR4UXDedFdVm9PjA9m
zVCWkSS1biInxwqW1rYqXd2++i2i0HkrLZ4UuCKy07Wn5ggmQr/Huub861z9vpzz
23fI/9OcF/o1+DOkRJKJAZBVv11sPzruN3g5psCZi5JxYYvrNWwQOEuyvfPxAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQU9wnAqH0eBBH8R55h09YPXuQLNGAwHwYDVR0j
BBgwFoAUtr7kVJ4yq/b1elU+70jReOlGDSswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC9CNkJFRTQ1NDlFMzJBQkY2RjU3QTU1M0VFRjQ4RDE3OEU5NDYwRDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QkVFNDU0OUUzMkFCRjZG
NTdBNTUzRUVGNDhEMTc4RTk0NjBEMkIuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHJ0
SHRwU2djWWNKY2VjV002Qzg0WmZrSHdOMTRzRnZzVTdiM1FpM0ZpVy8wL0FTMjY3
MDQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLeQwMA0GCSqGSIb3DQEBCwUAA4IBAQBaJDeb/sHzcXUS
lNlFYlnRV7kXyjUq/OxYvclM1Ka57kweKXfynP1UdcuS0godHY3WXA6WF0w8vmOu
1cehxddgGYdTfFaXlQG4m16ZHhfSlOFUF5tU9nlx9zoMa2SFXCQn3I8/6AHkfnzK
piRfknURZLEb2fB4jg7D7O2CQyrufGvjhKEJPxGAzlaJHJuOQeYvnAHBLzrrJN5N
lnb3qf4CQLuxmUxHWpoYG0ZCBrHhuqm8JTXW5WtDLW91u17p2/HBf29cUgnGf+6S
u6RJkWYfR9Sj/pmpYEJeAowDkx3Cm0luFchAwcLNvkR4m3vZTLiXacoWsIZ85+pe
SD79wzxW
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org