Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e38382e302f32332d3233203d3e20323638303536.roa
File:                     34352e3136382e38382e302f32332d3233203d3e20323638303536.roa (raw, json)
Hash identifier:          zPVEaSd63Ge2rirRjUuFjnp0vXaNiSQJYLYxLNzOhMY=
Subject key identifier:   0D:5E:0B:01:85:22:8F:24:4F:38:F4:44:F1:57:5C:43:E1:B0:AD:26
Certificate issuer:       /CN=E61E1840B192631B2DB9D62C5475E62173B11EB9
Certificate serial:       0E64CA31C5CACAA2EED70B9F8AC6897477F46A63
Authority key identifier: E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e38382e302f32332d3233203d3e20323638303536.roa
Signing time:             Wed 27 Mar 2024 15:59:24 +0000
ROA not before:           Wed 27 Mar 2024 15:54:24 +0000
ROA not after:            Wed 26 Mar 2025 15:59:24 +0000
asID:                     268056
IP address blocks:        45.168.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:64:ca:31:c5:ca:ca:a2:ee:d7:0b:9f:8a:c6:89:74:77:f4:6a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E61E1840B192631B2DB9D62C5475E62173B11EB9
        Validity
            Not Before: Mar 27 15:54:24 2024 GMT
            Not After : Mar 26 15:59:24 2025 GMT
        Subject: CN=0D5E0B0185228F244F38F444F1575C43E1B0AD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:ea:e3:21:67:02:5e:cd:9a:b2:98:c4:dd:
                    4d:6b:1f:6a:01:55:48:54:10:de:62:e1:fc:31:26:
                    b2:45:f3:2b:38:87:75:90:77:22:f0:8c:fa:aa:39:
                    8b:36:1f:c4:1d:d6:6b:dc:44:9b:24:0a:fc:04:03:
                    cb:ee:33:ec:1a:a8:2d:8e:e9:31:3d:d2:35:74:bf:
                    e7:5b:97:d2:f2:ce:12:c6:67:38:d3:03:d9:23:a0:
                    5b:e1:e7:3e:d8:86:ac:89:0d:06:7b:cd:b0:8a:f5:
                    98:4d:30:46:ec:08:b2:fc:f8:21:24:a1:a8:2f:6c:
                    bc:45:4d:c6:94:56:f4:a5:9e:05:4e:f8:58:67:49:
                    03:f2:4f:51:75:24:84:64:80:44:a7:0e:3f:cf:1b:
                    1d:31:72:35:5d:96:d9:a5:01:0c:06:8f:9e:56:51:
                    77:6c:80:88:1f:d4:ed:52:76:74:70:e5:b7:4f:15:
                    a9:ca:10:e6:1c:45:5b:66:6c:9b:e6:15:f8:23:8b:
                    4c:04:bd:42:11:34:d1:16:75:47:0d:8f:da:b2:29:
                    c2:65:a8:3e:6e:dc:3c:82:bc:49:97:a5:20:1c:ac:
                    7f:89:ea:a4:c6:12:7f:1a:d5:33:d9:8a:c2:72:ee:
                    4c:27:5d:ee:6e:34:26:08:b8:70:67:d9:4f:ba:74:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5E:0B:01:85:22:8F:24:4F:38:F4:44:F1:57:5C:43:E1:B0:AD:26
            X509v3 Authority Key Identifier:
                keyid:E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e38382e302f32332d3233203d3e20323638303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:44:bb:43:a8:f2:4f:48:10:16:ac:14:7a:cc:32:6f:1b:a3:
         ce:9f:58:7b:66:20:72:ef:65:36:af:6d:f7:31:a7:bf:01:84:
         5c:41:c1:4a:0f:c6:9f:2b:af:c9:bf:04:d3:ca:8e:8e:e5:e8:
         92:b5:96:46:9f:f4:46:2e:7f:08:c1:8f:97:33:65:1c:d4:83:
         be:60:30:1c:f4:f3:a6:f4:b4:a6:52:7e:a9:ca:5e:59:91:cf:
         78:9b:7d:9b:38:0c:80:75:a1:79:5f:29:4d:6d:a1:cd:0a:25:
         c2:e2:7f:02:a0:77:fa:1b:72:43:e6:d5:e7:af:db:25:9a:92:
         20:06:9b:ac:90:ae:4f:7e:2e:94:2f:47:11:d9:5d:11:5a:4d:
         46:2a:50:88:e2:ea:f0:7c:b8:f7:29:75:77:e0:ee:5d:5a:4f:
         a7:ed:63:5a:fa:8e:36:5a:ef:35:40:9a:22:5a:8a:73:4c:6b:
         a1:3d:93:8b:ee:9d:54:35:bb:c1:78:80:87:cb:04:eb:fa:59:
         c2:e8:5d:1f:bc:36:b3:3e:c1:9f:63:7a:56:61:57:98:0c:34:
         d4:3c:b5:bc:f1:4b:42:b2:af:ee:1c:20:53:e9:61:89:7d:47:
         35:45:1f:0e:43:57:b4:4b:6c:ae:0d:e2:03:c1:4b:eb:d5:95:
         9a:fd:1a:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDmTKMcXKyqLu1wufisaJdHf0amMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxRTE4NDBCMTkyNjMxQjJEQjlENjJDNTQ3NUU2MjE3
M0IxMUVCOTAeFw0yNDAzMjcxNTU0MjRaFw0yNTAzMjYxNTU5MjRaMDMxMTAvBgNV
BAMTKDBENUUwQjAxODUyMjhGMjQ0RjM4RjQ0NEYxNTc1QzQzRTFCMEFEMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUa+rjIWcCXs2aspjE3U1rH2oB
VUhUEN5i4fwxJrJF8ys4h3WQdyLwjPqqOYs2H8Qd1mvcRJskCvwEA8vuM+waqC2O
6TE90jV0v+dbl9LyzhLGZzjTA9kjoFvh5z7YhqyJDQZ7zbCK9ZhNMEbsCLL8+CEk
oagvbLxFTcaUVvSlngVO+FhnSQPyT1F1JIRkgESnDj/PGx0xcjVdltmlAQwGj55W
UXdsgIgf1O1SdnRw5bdPFanKEOYcRVtmbJvmFfgji0wEvUIRNNEWdUcNj9qyKcJl
qD5u3DyCvEmXpSAcrH+J6qTGEn8a1TPZisJy7kwnXe5uNCYIuHBn2U+6dNAbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDV4LAYUijyRPOPRE8VdcQ+GwrSYwHwYDVR0j
BBgwFoAU5h4YQLGSYxstudYsVHXmIXOxHrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pxRm9DS3ZYd0VpQzZOZWVuY3o2RHdRekp6S25GdVFjMlFKaTQ3V3Vn
RmEvMC9FNjFFMTg0MEIxOTI2MzFCMkRCOUQ2MkM1NDc1RTYyMTczQjExRUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2MUUxODQwQjE5MjYzMUIy
REI5RDYyQzU0NzVFNjIxNzNCMTFFQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dacUZvQ0t2WHdFaUM2TmVlbmN6NkR3UXpKektuRnVRYzJRSmk0N1d1Z0ZhLzAv
MzQzNTJlMzEzNjM4MmUzODM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzAzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLahYMA0GCSqGSIb3DQEBCwUAA4IBAQAURLtDqPJP
SBAWrBR6zDJvG6POn1h7ZiBy72U2r233Mae/AYRcQcFKD8afK6/JvwTTyo6O5eiS
tZZGn/RGLn8IwY+XM2Uc1IO+YDAc9POm9LSmUn6pyl5Zkc94m32bOAyAdaF5XylN
baHNCiXC4n8CoHf6G3JD5tXnr9slmpIgBpuskK5Pfi6UL0cR2V0RWk1GKlCI4urw
fLj3KXV34O5dWk+n7WNa+o42Wu81QJoiWopzTGuhPZOL7p1UNbvBeICHywTr+lnC
6F0fvDazPsGfY3pWYVeYDDTUPLW88UtCsq/uHCBT6WGJfUc1RR8OQ1e0S2yuDeID
wUvr1ZWa/Rpv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org