Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136322e302f32332d3233203d3e20323638383538.roa
File:                     34352e3137342e3136322e302f32332d3233203d3e20323638383538.roa (raw, json)
Hash identifier:          LnJkv8boxx33UG7ImhS2W4ZmAZV0/gxxi6b+tWTIeso=
Subject key identifier:   92:14:82:5D:AB:38:6D:C6:65:51:52:A4:C9:D3:2D:FB:07:E4:F0:C9
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       033D049F2F9ED778563242AAC8DCE16BFF8305E6
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136322e302f32332d3233203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:28 +0000
ROA not before:           Tue 05 Mar 2024 20:05:28 +0000
ROA not after:            Tue 04 Mar 2025 20:10:28 +0000
asID:                     268858
IP address blocks:        45.174.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3d:04:9f:2f:9e:d7:78:56:32:42:aa:c8:dc:e1:6b:ff:83:05:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:28 2024 GMT
            Not After : Mar  4 20:10:28 2025 GMT
        Subject: CN=9214825DAB386DC6655152A4C9D32DFB07E4F0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:50:b5:b5:d0:50:1a:59:dd:b2:ea:27:f1:
                    72:76:d9:de:b9:d5:1c:d7:26:e0:85:38:7a:43:42:
                    e5:12:5b:a4:e8:7a:d2:e1:27:bb:ad:ed:86:79:dd:
                    5c:2b:88:ba:2d:fc:0b:24:f2:b0:0c:bc:1e:02:3e:
                    d9:95:f9:7c:4c:f8:1c:fd:14:f6:11:13:c5:e1:b3:
                    0d:77:1c:30:11:18:4f:96:e1:24:79:31:72:2b:5d:
                    a7:15:18:45:b6:8e:8f:cb:a7:b3:66:b1:6a:6c:35:
                    07:6a:c8:e7:10:5a:47:98:50:3f:0b:d5:7a:b1:e9:
                    fd:e4:37:57:ca:de:1a:d0:6b:30:73:fb:36:b9:94:
                    0a:7d:a6:48:66:7f:49:64:65:3a:76:9e:b1:ae:64:
                    eb:11:86:4c:48:28:fe:17:68:07:fd:a2:c7:3c:c2:
                    28:3d:69:f3:1d:c1:0a:b5:fd:ab:1d:b9:31:e4:06:
                    26:cc:92:71:5b:a6:91:c4:e6:a2:b4:b0:f1:5d:bf:
                    e7:b2:16:91:11:9f:c8:67:85:5f:02:59:2d:00:e7:
                    91:62:18:6e:b3:5a:9e:e4:e6:78:0f:48:5c:9a:35:
                    1b:3c:be:5f:c5:e0:62:5f:35:29:72:3b:48:a2:2f:
                    31:4b:b1:51:d8:6f:08:e2:d6:b4:ad:eb:c6:58:f1:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:14:82:5D:AB:38:6D:C6:65:51:52:A4:C9:D3:2D:FB:07:E4:F0:C9
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136322e302f32332d3233203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:80:44:a9:70:b8:15:7d:45:e6:9f:92:4d:3a:4c:94:38:99:
         a7:7a:0a:29:0e:d0:9c:91:e2:df:5e:ce:49:0e:f6:4f:32:03:
         66:52:13:f0:2f:2f:7e:bb:89:3b:62:09:66:d9:07:70:2e:2a:
         a1:f3:4f:c5:85:4c:ef:4b:9d:50:8a:b2:33:b1:0a:39:be:7e:
         1d:70:b4:35:53:fc:c4:b3:91:48:38:dd:c5:9c:9d:3e:96:55:
         57:bd:df:f3:4b:25:d1:f0:44:97:cc:8d:e4:a3:92:bb:bd:74:
         66:48:84:20:8b:6a:c6:6d:af:15:46:57:b8:8f:13:f6:3e:0f:
         dd:bf:dd:24:ec:ba:4e:fc:4b:a4:7d:1b:25:34:6a:31:84:3e:
         9d:cc:53:39:8f:b0:06:28:74:a2:ee:0a:1a:1c:63:a3:db:8f:
         67:76:96:e0:f0:dc:f1:7f:c3:69:2a:22:8c:a9:6c:51:65:82:
         f6:28:24:be:0d:a8:43:7e:58:b4:0b:9b:47:1d:d1:9c:24:fe:
         41:37:f2:53:02:df:c3:4d:f1:a2:6b:7b:9c:f1:66:1f:a2:e0:
         c4:25:66:fa:4a:67:08:8a:dc:a1:ac:7e:f7:c9:26:46:bf:04:
         5a:2d:b1:18:de:ba:5f:6b:aa:76:12:db:d5:0e:21:49:21:e8:
         c9:10:7a:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAz0Eny+e13hWMkKqyNzha/+DBeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxNEQwOEVCNjY4QUQ2RDU2OUI1MkYzNjNERkZCMEQ2
RDVCQjIxMjAeFw0yNDAzMDUyMDA1MjhaFw0yNTAzMDQyMDEwMjhaMDMxMTAvBgNV
BAMTKDkyMTQ4MjVEQUIzODZEQzY2NTUxNTJBNEM5RDMyREZCMDdFNEYwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LVC1tdBQGlndsuon8XJ22d65
1RzXJuCFOHpDQuUSW6ToetLhJ7ut7YZ53VwriLot/Ask8rAMvB4CPtmV+XxM+Bz9
FPYRE8Xhsw13HDARGE+W4SR5MXIrXacVGEW2jo/Lp7NmsWpsNQdqyOcQWkeYUD8L
1Xqx6f3kN1fK3hrQazBz+za5lAp9pkhmf0lkZTp2nrGuZOsRhkxIKP4XaAf9osc8
wig9afMdwQq1/asduTHkBibMknFbppHE5qK0sPFdv+eyFpERn8hnhV8CWS0A55Fi
GG6zWp7k5ngPSFyaNRs8vl/F4GJfNSlyO0iiLzFLsVHYbwji1rSt68ZY8T+5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkhSCXas4bcZlUVKkydMt+wfk8MkwHwYDVR0j
BBgwFoAUxRTQjrZorW1Wm1LzY9/7DW1bshIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NtM2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdh
QnkvMC9DNTE0RDA4RUI2NjhBRDZENTY5QjUyRjM2M0RGRkIwRDZENUJCMjEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MTREMDhFQjY2OEFENkQ1
NjlCNTJGMzYzREZGQjBENkQ1QkIyMTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djbTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzAv
MzQzNTJlMzEzNzM0MmUzMTM2MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzODM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtrqIwDQYJKoZIhvcNAQELBQADggEBANeARKlw
uBV9Reafkk06TJQ4mad6CikO0JyR4t9ezkkO9k8yA2ZSE/AvL367iTtiCWbZB3Au
KqHzT8WFTO9LnVCKsjOxCjm+fh1wtDVT/MSzkUg43cWcnT6WVVe93/NLJdHwRJfM
jeSjkru9dGZIhCCLasZtrxVGV7iPE/Y+D92/3STsuk78S6R9GyU0ajGEPp3MUzmP
sAYodKLuChocY6Pbj2d2luDw3PF/w2kqIoypbFFlgvYoJL4NqEN+WLQLm0cd0Zwk
/kE38lMC38NN8aJre5zxZh+i4MQlZvpKZwiK3KGsfvfJJka/BFotsRjeul9rqnYS
29UOIUkh6MkQeow=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org