Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138312e33382e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          L55yKNFPTvRFU6kn11y9VhvvavjZlkvIdJ0TtWiCOv4=
Subject key identifier:   D0:2A:87:F9:8E:F3:1A:62:F6:9D:06:66:31:C2:BD:50:B9:ED:45:CB
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       30F1801A86FA5CF06B8639CA223F2AACA01812A4
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32342d3234203d3e20323639353937.roa
Signing time:             Tue 22 Aug 2023 04:34:11 +0000
ROA not before:           Tue 22 Aug 2023 04:29:11 +0000
ROA not after:            Tue 20 Aug 2024 04:34:11 +0000
asID:                     269597
IP address blocks:        45.181.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f1:80:1a:86:fa:5c:f0:6b:86:39:ca:22:3f:2a:ac:a0:18:12:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Aug 22 04:29:11 2023 GMT
            Not After : Aug 20 04:34:11 2024 GMT
        Subject: CN=D02A87F98EF31A62F69D066631C2BD50B9ED45CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:ba:6d:76:5e:7c:5f:23:12:1b:d2:8e:84:
                    fe:1b:2a:fd:30:5f:db:e0:0e:70:14:1f:2c:dc:5b:
                    1e:91:7e:b1:5f:29:32:14:ec:1a:9b:29:11:85:1c:
                    26:ad:10:97:1d:15:c4:24:fb:ab:60:cd:8c:5a:8b:
                    03:06:a9:bd:66:8e:38:c1:ce:65:b1:70:7e:ad:21:
                    a9:f4:37:24:30:24:4e:56:b3:3d:8b:a5:86:0e:0d:
                    74:ca:b6:34:85:4b:e4:0f:fb:5b:7f:8d:95:6f:6b:
                    23:8e:58:20:6b:82:34:f9:f7:48:43:c3:8b:fc:30:
                    b1:51:a7:eb:34:81:4d:d2:66:c7:23:87:c5:3a:96:
                    9a:b9:c5:52:b2:e9:f1:e9:78:61:86:db:89:1c:bb:
                    2a:18:82:0e:d3:41:85:c7:92:ed:b5:55:4d:5a:2a:
                    04:73:09:14:10:b0:e8:2e:8d:e1:4e:ea:ec:3c:fe:
                    a1:29:07:e5:c0:14:13:83:7d:3b:78:d8:81:41:46:
                    99:1d:47:e8:9b:0d:8a:97:94:55:94:f9:48:19:10:
                    03:d4:28:06:1b:2d:e4:7e:61:68:78:b2:22:10:47:
                    10:04:ee:dc:d3:14:db:37:8d:dc:56:cd:55:e4:59:
                    12:23:8d:25:34:4b:8b:cd:14:b2:63:fb:87:0f:d4:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2A:87:F9:8E:F3:1A:62:F6:9D:06:66:31:C2:BD:50:B9:ED:45:CB
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ba:d1:43:62:4b:8d:11:80:1c:fb:7f:ca:3f:48:40:6e:d9:
         6a:2a:6b:b4:84:a1:9f:95:bc:c0:46:ac:86:86:2d:f9:c9:3e:
         f5:02:64:17:96:08:48:a4:b4:30:62:f9:57:91:2b:95:1b:67:
         13:72:cf:45:81:4e:e5:82:ed:2a:b1:00:c4:dc:d3:74:91:ce:
         33:c1:34:fd:b3:94:47:cb:45:27:ab:b3:0d:94:5e:0d:2f:ff:
         93:40:7f:e8:25:a0:1a:9e:19:fc:f0:90:71:46:97:63:dc:02:
         a3:82:0d:05:d7:15:c9:9a:a3:08:38:e4:05:e6:17:ac:fa:4a:
         5f:fd:a8:1d:91:c0:fc:69:d1:70:5b:da:10:5e:aa:0a:ab:fd:
         ee:2b:f6:56:55:75:90:2b:44:46:06:4a:30:aa:86:fc:68:48:
         6c:50:aa:41:56:58:4c:7d:a3:fc:7c:48:61:34:42:ff:99:66:
         62:31:84:2a:0a:48:f3:8e:e6:2c:68:d6:20:7d:62:a5:88:e7:
         c8:44:61:77:93:3f:b8:de:64:3c:9d:af:c1:e2:3c:b6:ac:49:
         ee:58:76:b2:52:67:5b:49:dd:a1:7b:9d:44:ef:b8:ba:0e:53:
         7e:cc:46:fa:47:11:2d:98:b7:5d:1e:b5:c7:7f:f1:89:2e:2f:
         c5:2a:88:4a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMPGAGob6XPBrhjnKIj8qrKAYEqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyQjA1QzgxNzIwNzY3RTA2NjRCN0NEMzRCN0MxODI4
NUQyQzFFMjAeFw0yMzA4MjIwNDI5MTFaFw0yNDA4MjAwNDM0MTFaMDMxMTAvBgNV
BAMTKEQwMkE4N0Y5OEVGMzFBNjJGNjlEMDY2NjMxQzJCRDUwQjlFRDQ1Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqOrptdl58XyMSG9KOhP4bKv0w
X9vgDnAUHyzcWx6RfrFfKTIU7BqbKRGFHCatEJcdFcQk+6tgzYxaiwMGqb1mjjjB
zmWxcH6tIan0NyQwJE5Wsz2LpYYODXTKtjSFS+QP+1t/jZVvayOOWCBrgjT590hD
w4v8MLFRp+s0gU3SZscjh8U6lpq5xVKy6fHpeGGG24kcuyoYgg7TQYXHku21VU1a
KgRzCRQQsOgujeFO6uw8/qEpB+XAFBODfTt42IFBRpkdR+ibDYqXlFWU+UgZEAPU
KAYbLeR+YWh4siIQRxAE7tzTFNs3jdxWzVXkWRIjjSU0S4vNFLJj+4cP1AO5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0CqH+Y7zGmL2nQZmMcK9ULntRcswHwYDVR0j
BBgwFoAUmSsFyBcgdn4GZLfNNLfBgoXSweIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pSUXVhY0E1c3B2c3JIMXpDUEhjVU1xejdMbzE2VlVzYXVpMUJTeFJ3
OHEvMC85OTJCMDVDODE3MjA3NjdFMDY2NEI3Q0QzNEI3QzE4Mjg1RDJDMUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk5MkIwNUM4MTcyMDc2N0Uw
NjY0QjdDRDM0QjdDMTgyODVEMkMxRTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daUlF1YWNBNXNwdnNySDF6Q1BIY1VNcXo3TG8xNlZVc2F1aTFCU3hSdzhxLzAv
MzQzNTJlMzEzODMxMmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbUmMA0GCSqGSIb3DQEBCwUAA4IBAQBSutFDYkuN
EYAc+3/KP0hAbtlqKmu0hKGflbzARqyGhi35yT71AmQXlghIpLQwYvlXkSuVG2cT
cs9FgU7lgu0qsQDE3NN0kc4zwTT9s5RHy0Unq7MNlF4NL/+TQH/oJaAanhn88JBx
Rpdj3AKjgg0F1xXJmqMIOOQF5hes+kpf/agdkcD8adFwW9oQXqoKq/3uK/ZWVXWQ
K0RGBkowqob8aEhsUKpBVlhMfaP8fEhhNEL/mWZiMYQqCkjzjuYsaNYgfWKliOfI
RGF3kz+43mQ8na/B4jy2rEnuWHayUmdbSd2he51E77i6DlN+zEb6RxEtmLddHrXH
f/GJLi/FKohK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org