Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32322d3232203d3e20323639353937.roa
File:                     34352e37312e3230382e302f32322d3232203d3e20323639353937.roa (raw, json)
Hash identifier:          umgnosyymOt9NySz3UNy5XVms9fN9ldaTBQffDujh3E=
Subject key identifier:   9C:9E:F2:37:68:9D:79:C1:95:47:C0:FB:E5:1F:58:F7:F3:6B:55:6D
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       1BCF2AEBAD2D059A1B8998320ACD9896654D4BAF
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32322d3232203d3e20323639353937.roa
Signing time:             Mon 02 Oct 2023 02:52:41 +0000
ROA not before:           Mon 02 Oct 2023 02:47:41 +0000
ROA not after:            Mon 30 Sep 2024 02:52:41 +0000
asID:                     269597
IP address blocks:        45.71.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cf:2a:eb:ad:2d:05:9a:1b:89:98:32:0a:cd:98:96:65:4d:4b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Oct  2 02:47:41 2023 GMT
            Not After : Sep 30 02:52:41 2024 GMT
        Subject: CN=9C9EF237689D79C19547C0FBE51F58F7F36B556D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:e9:ff:f9:a0:21:e2:69:1b:2f:99:21:32:
                    1e:f6:f9:75:4a:7d:d3:ef:a8:e2:55:08:b7:b5:71:
                    3e:77:8d:7a:40:c9:f7:91:65:c9:f1:9f:34:f2:00:
                    a3:2a:87:8d:99:7d:e5:9b:d4:07:a4:37:5b:a8:5b:
                    9d:3f:c7:78:bd:a4:a1:6d:d9:56:68:00:14:c7:9c:
                    98:e2:d3:31:0f:42:5b:40:1b:f2:5c:48:1f:17:fb:
                    e1:9c:35:44:c5:82:32:61:49:38:69:04:7d:50:40:
                    3d:09:6a:2a:41:ce:74:db:57:e1:f1:78:d8:08:c7:
                    ec:dd:95:0b:3b:a0:58:41:47:dc:85:e8:8d:ab:63:
                    e8:2b:f7:38:e2:4a:fa:f5:0e:19:ee:77:ae:fb:37:
                    56:a7:25:3d:db:ac:4b:d5:81:b5:6f:20:be:28:6f:
                    ba:16:ef:8a:a9:40:24:96:dd:9b:d2:be:3b:0a:bb:
                    39:10:37:71:22:ed:b9:59:95:72:47:7e:6e:c1:b0:
                    27:d8:52:84:08:07:be:50:dd:b0:c5:94:e2:81:5b:
                    3b:76:65:17:17:0a:2e:b4:82:bb:98:85:8a:60:8b:
                    21:51:65:98:be:1a:7f:ef:0d:95:01:18:39:0e:95:
                    f1:60:80:0f:31:37:50:63:55:e5:76:7f:b5:64:c2:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9E:F2:37:68:9D:79:C1:95:47:C0:FB:E5:1F:58:F7:F3:6B:55:6D
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32322d3232203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:8d:91:b0:a5:47:d3:d7:d9:5c:7f:da:69:fe:68:ae:00:1c:
         b7:0a:b5:a4:40:4e:51:9d:5f:b3:97:c4:30:f5:6b:e7:e7:ca:
         05:6f:a7:5f:77:d2:3b:c1:b1:4a:4d:7c:82:d1:45:d2:a2:48:
         0d:e5:cd:51:ad:a2:4a:56:47:ed:35:04:d0:3d:c5:e5:12:06:
         fe:5d:3a:9e:e0:7b:84:9d:ee:8f:9e:99:e5:a8:e1:29:b8:4a:
         0e:4a:66:e9:96:4a:9b:dd:cb:ac:e6:e8:ef:53:2c:a9:18:46:
         96:91:92:02:0a:bc:25:77:49:b4:91:2b:30:42:17:72:8d:a2:
         2a:ba:ea:e4:a8:00:e6:0e:39:7f:6b:16:da:ee:cb:d2:2b:1b:
         0a:b3:19:a4:cd:fc:54:8b:56:ad:d7:0e:d0:38:4a:4e:4d:f4:
         10:f7:7e:9e:e7:af:ab:47:30:94:88:30:92:50:a9:1c:50:7f:
         bd:cf:d7:01:6f:2d:34:92:2b:6b:b3:2d:17:4a:87:b1:4a:69:
         38:66:62:39:8d:48:bf:90:07:dd:76:e5:4c:70:2a:2a:af:0d:
         99:b4:0f:f7:47:2e:82:b0:51:51:f1:b5:69:25:4d:79:d1:e2:
         d5:f8:6d:f8:6a:84:b7:c5:e8:ef:af:be:2f:f0:45:13:c2:6b:
         36:de:49:2a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG88q660tBZobiZgyCs2YlmVNS68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyQjA1QzgxNzIwNzY3RTA2NjRCN0NEMzRCN0MxODI4
NUQyQzFFMjAeFw0yMzEwMDIwMjQ3NDFaFw0yNDA5MzAwMjUyNDFaMDMxMTAvBgNV
BAMTKDlDOUVGMjM3Njg5RDc5QzE5NTQ3QzBGQkU1MUY1OEY3RjM2QjU1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANOn/+aAh4mkbL5khMh72+XVK
fdPvqOJVCLe1cT53jXpAyfeRZcnxnzTyAKMqh42ZfeWb1AekN1uoW50/x3i9pKFt
2VZoABTHnJji0zEPQltAG/JcSB8X++GcNUTFgjJhSThpBH1QQD0JaipBznTbV+Hx
eNgIx+zdlQs7oFhBR9yF6I2rY+gr9zjiSvr1Dhnud677N1anJT3brEvVgbVvIL4o
b7oW74qpQCSW3ZvSvjsKuzkQN3Ei7blZlXJHfm7BsCfYUoQIB75Q3bDFlOKBWzt2
ZRcXCi60gruYhYpgiyFRZZi+Gn/vDZUBGDkOlfFggA8xN1BjVeV2f7Vkwl9XAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnJ7yN2idecGVR8D75R9Y9/NrVW0wHwYDVR0j
BBgwFoAUmSsFyBcgdn4GZLfNNLfBgoXSweIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pSUXVhY0E1c3B2c3JIMXpDUEhjVU1xejdMbzE2VlVzYXVpMUJTeFJ3
OHEvMC85OTJCMDVDODE3MjA3NjdFMDY2NEI3Q0QzNEI3QzE4Mjg1RDJDMUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk5MkIwNUM4MTcyMDc2N0Uw
NjY0QjdDRDM0QjdDMTgyODVEMkMxRTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daUlF1YWNBNXNwdnNySDF6Q1BIY1VNcXo3TG8xNlZVc2F1aTFCU3hSdzhxLzAv
MzQzNTJlMzczMTJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5
MzUzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUfQMA0GCSqGSIb3DQEBCwUAA4IBAQANjZGwpUfT
19lcf9pp/miuABy3CrWkQE5RnV+zl8Qw9Wvn58oFb6dfd9I7wbFKTXyC0UXSokgN
5c1RraJKVkftNQTQPcXlEgb+XTqe4HuEne6PnpnlqOEpuEoOSmbplkqb3cus5ujv
UyypGEaWkZICCrwld0m0kSswQhdyjaIquurkqADmDjl/axba7svSKxsKsxmkzfxU
i1at1w7QOEpOTfQQ936e56+rRzCUiDCSUKkcUH+9z9cBby00kitrsy0XSoexSmk4
ZmI5jUi/kAfdduVMcCoqrw2ZtA/3Ry6CsFFR8bVpJU150eLV+G34aoS3xejvr74v
8EUTwms23kkq
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org