Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137342e302f32342d3234203d3e20323636353931.roa
File:                     34352e372e3137342e302f32342d3234203d3e20323636353931.roa (raw, json)
Hash identifier:          UiM6/gQxcdnIq4b93tGRVKW1bOULLnTSLtGdhGhRkFY=
Subject key identifier:   E3:35:5A:70:F6:6C:2D:15:86:5A:0F:20:66:43:D3:CD:E6:28:49:1C
Certificate issuer:       /CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
Certificate serial:       26F7D1BD51785F1CB70CBE1FE48721956CD5B6B1
Authority key identifier: DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137342e302f32342d3234203d3e20323636353931.roa
Signing time:             Tue 17 Oct 2023 17:41:51 +0000
ROA not before:           Tue 17 Oct 2023 17:36:51 +0000
ROA not after:            Tue 15 Oct 2024 17:41:51 +0000
asID:                     266591
IP address blocks:        45.7.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f7:d1:bd:51:78:5f:1c:b7:0c:be:1f:e4:87:21:95:6c:d5:b6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
        Validity
            Not Before: Oct 17 17:36:51 2023 GMT
            Not After : Oct 15 17:41:51 2024 GMT
        Subject: CN=E3355A70F66C2D15865A0F206643D3CDE628491C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:a7:9c:fc:9d:7c:18:d0:b7:8f:3b:57:e5:
                    ab:4f:3c:d6:df:eb:20:3f:3a:d1:43:c1:0c:a1:91:
                    be:c5:95:93:95:80:6d:4f:bd:7d:44:a1:27:a4:e6:
                    b5:ba:3c:65:a9:74:03:c6:18:2d:8e:1a:55:15:b1:
                    39:03:0d:ef:fa:11:ba:43:6f:f2:1f:d4:83:8a:5a:
                    fd:18:cb:13:eb:c7:26:38:22:e8:24:0a:78:5a:74:
                    63:72:75:cf:e6:65:3a:25:79:1a:78:48:16:d5:78:
                    38:b2:80:b9:56:b7:77:c1:5b:61:06:7e:20:48:f2:
                    3a:00:61:10:58:be:01:66:f9:ec:90:59:36:34:36:
                    43:ef:1a:21:36:07:0b:f4:79:2c:51:17:60:ab:97:
                    d8:d6:d6:2b:14:ed:a2:6d:31:47:44:84:4f:50:51:
                    96:39:ec:9d:5d:0f:96:73:35:bf:1f:85:08:36:fc:
                    97:aa:4a:bc:70:a7:44:1e:84:e1:3b:fe:5d:78:a5:
                    6e:e9:06:e8:6d:f7:47:19:71:25:5b:94:37:04:f5:
                    78:00:c4:6b:06:9c:a8:6f:ec:ea:cf:95:a4:d1:16:
                    9b:76:fb:b9:65:4c:9e:17:30:e1:db:24:bf:e1:19:
                    c4:82:3d:c1:b4:b9:85:3a:19:88:31:70:13:e0:2f:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:35:5A:70:F6:6C:2D:15:86:5A:0F:20:66:43:D3:CD:E6:28:49:1C
            X509v3 Authority Key Identifier:
                keyid:DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137342e302f32342d3234203d3e20323636353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:59:8d:f4:90:0f:58:2e:36:09:c6:c4:b9:a9:d1:9f:83:41:
         44:bd:af:2f:99:f0:46:fd:51:d1:d1:45:4b:6e:9e:79:4b:c0:
         8e:0b:93:5f:1c:fb:59:2d:90:88:35:5b:67:ec:1d:5e:ca:c6:
         5d:d9:b3:7d:2e:6c:31:2c:ea:18:74:c1:bf:4f:90:9c:fd:3c:
         92:77:72:ca:86:85:80:7f:d7:7b:4c:8f:09:8d:82:1d:75:09:
         c8:ef:81:c2:a5:6a:a3:c5:f4:8f:89:ce:d8:a1:08:b7:d1:09:
         34:4c:c3:74:fe:06:d7:b0:ec:2b:15:c4:bf:f1:cd:76:98:87:
         6c:3e:5d:9e:87:cd:38:42:78:98:c5:6b:9d:4e:04:73:f1:22:
         fa:9c:f0:9c:d2:c1:cc:15:83:c6:27:7b:11:84:f2:c6:c7:b9:
         0f:e5:62:25:c6:55:44:a3:cf:f6:48:03:ed:84:24:e0:3e:d5:
         5e:40:55:8c:3c:5b:1a:99:9b:e6:e8:d8:ef:cf:f2:3f:65:d2:
         83:51:ab:ed:a6:04:46:9a:91:36:80:9d:42:27:ce:04:55:00:
         59:0c:b7:10:73:0c:74:7c:32:bc:c5:55:82:e3:dc:15:68:58:
         58:29:4d:dd:89:c3:15:8b:d9:82:c3:0d:5f:1a:9e:1d:ee:66:
         2b:8c:0f:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJvfRvVF4Xxy3DL4f5IchlWzVtrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMzNTdGRURGRkI0NDY4ODBCMTFCMEIxNTFDMTczNkFE
NEM0MEQ5NjAeFw0yMzEwMTcxNzM2NTFaFw0yNDEwMTUxNzQxNTFaMDMxMTAvBgNV
BAMTKEUzMzU1QTcwRjY2QzJEMTU4NjVBMEYyMDY2NDNEM0NERTYyODQ5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWqec/J18GNC3jztX5atPPNbf
6yA/OtFDwQyhkb7FlZOVgG1PvX1EoSek5rW6PGWpdAPGGC2OGlUVsTkDDe/6EbpD
b/If1IOKWv0YyxPrxyY4IugkCnhadGNydc/mZToleRp4SBbVeDiygLlWt3fBW2EG
fiBI8joAYRBYvgFm+eyQWTY0NkPvGiE2Bwv0eSxRF2Crl9jW1isU7aJtMUdEhE9Q
UZY57J1dD5ZzNb8fhQg2/JeqSrxwp0QehOE7/l14pW7pBuht90cZcSVblDcE9XgA
xGsGnKhv7OrPlaTRFpt2+7llTJ4XMOHbJL/hGcSCPcG0uYU6GYgxcBPgL70DAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4zVacPZsLRWGWg8gZkPTzeYoSRwwHwYDVR0j
BBgwFoAU3DV/7f+0RogLEbCxUcFzatTEDZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1RGNWh4UjNKclNWY0FoZ3hiM1dUU3FOSGJSYlJBNTZQekVoNnFrTEdq
QlMvMC9EQzM1N0ZFREZGQjQ0Njg4MEIxMUIwQjE1MUMxNzM2QUQ0QzQwRDk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDMzU3RkVERkZCNDQ2ODgw
QjExQjBCMTUxQzE3MzZBRDRDNDBEOTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dURjVoeFIzSnJTVmNBaGd4YjNXVFNxTkhiUmJSQTU2UHpFaDZxa0xHakJTLzAv
MzQzNTJlMzcyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM1
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0HrjANBgkqhkiG9w0BAQsFAAOCAQEARFmN9JAPWC42
CcbEuanRn4NBRL2vL5nwRv1R0dFFS26eeUvAjguTXxz7WS2QiDVbZ+wdXsrGXdmz
fS5sMSzqGHTBv0+QnP08kndyyoaFgH/Xe0yPCY2CHXUJyO+BwqVqo8X0j4nO2KEI
t9EJNEzDdP4G17DsKxXEv/HNdpiHbD5dnofNOEJ4mMVrnU4Ec/Ei+pzwnNLBzBWD
xid7EYTyxse5D+ViJcZVRKPP9kgD7YQk4D7VXkBVjDxbGpmb5ujY78/yP2XSg1Gr
7aYERpqRNoCdQifOBFUAWQy3EHMMdHwyvMVVguPcFWhYWClN3YnDFYvZgsMNXxqe
He5mK4wPBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org