Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa
File:                     34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa (raw, json)
Hash identifier:          zMLzjBYupLTRX0VR0ug/0du1alLjQSpS1ekMmWyWn5g=
Subject key identifier:   6D:03:91:73:6F:E5:B8:89:67:F4:B9:A4:E6:20:75:60:59:B2:90:9B
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       7719643E514BAFD26322137301257A85FEE2F899
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:28 +0000
ROA not before:           Tue 05 Mar 2024 20:05:28 +0000
ROA not after:            Tue 04 Mar 2025 20:10:28 +0000
asID:                     268858
IP address blocks:        45.174.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:19:64:3e:51:4b:af:d2:63:22:13:73:01:25:7a:85:fe:e2:f8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:28 2024 GMT
            Not After : Mar  4 20:10:28 2025 GMT
        Subject: CN=6D0391736FE5B88967F4B9A4E620756059B2909B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:c5:63:b4:00:8e:d2:d6:a3:0c:b6:e6:5a:
                    08:a2:32:16:09:a2:b2:28:25:76:6b:46:18:f1:a1:
                    56:14:d2:2f:07:f7:37:e0:f0:b0:de:f1:7c:76:ba:
                    fd:d4:b1:64:6f:8a:6e:0f:fa:29:05:76:a5:ea:fc:
                    26:2d:e3:e3:22:19:c8:3f:3a:6d:d8:bf:15:ba:05:
                    bb:f4:d1:dc:f6:d7:75:57:e9:52:dd:d1:1a:7c:32:
                    c9:e0:a4:05:bb:7c:6a:7c:57:e2:f9:85:03:af:1c:
                    94:c3:d5:56:6d:18:44:fd:a6:ca:7d:dc:a9:c8:5d:
                    e1:ba:6f:b9:8c:32:b1:b7:2c:bf:2c:b7:01:ec:01:
                    3d:c6:5a:53:72:ce:71:72:4d:ed:df:78:85:bb:b0:
                    24:7e:2e:d5:2b:02:71:3d:03:1d:33:a4:64:29:be:
                    d0:89:2b:a9:60:be:41:e2:0c:59:7d:73:4a:65:c2:
                    33:54:b7:7a:50:23:f7:35:5e:d3:42:99:0b:a9:71:
                    7f:5c:a4:1c:a6:27:fa:ab:52:a0:fd:28:43:cb:7a:
                    ad:be:c7:40:d6:64:bb:e1:df:b4:6b:2f:97:79:84:
                    96:46:dc:03:67:d0:b6:7f:43:ba:46:6e:12:0c:cc:
                    f2:97:bd:69:82:37:74:d5:55:e0:65:1d:54:48:39:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:03:91:73:6F:E5:B8:89:67:F4:B9:A4:E6:20:75:60:59:B2:90:9B
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136332e302f32342d3234203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:48:d9:48:ca:d0:da:67:b3:10:37:e1:e2:79:80:03:85:
         05:32:cd:05:ff:08:34:ff:8c:c6:a8:ad:61:2d:8a:d7:67:03:
         a8:73:f1:7b:89:16:8d:10:ae:50:e1:0b:8a:91:c6:02:3e:b0:
         42:47:01:e6:2b:68:36:b9:d5:7c:a2:8a:c3:af:33:12:0a:15:
         2c:ce:9d:1c:6f:c4:6f:b6:a6:46:92:c0:16:73:6b:95:dc:ff:
         33:04:87:e9:a5:3f:c0:01:e6:d4:2e:ec:cd:7e:a7:04:20:e5:
         92:dd:39:c3:42:9d:4c:b7:53:08:82:7d:66:7d:b2:ca:65:d1:
         7a:91:2f:49:04:c0:00:36:d6:99:cd:db:0f:90:0d:cb:92:02:
         f5:46:9e:e7:d1:4e:0c:e9:d8:55:d1:41:83:cf:50:78:2b:79:
         a6:08:cb:6e:89:12:a4:4b:26:df:82:1d:d6:81:fa:7d:24:94:
         c8:9e:6f:20:c3:6f:76:a3:1b:b4:43:2c:26:7e:4c:af:c5:e3:
         67:da:8a:6b:4c:1b:bb:1d:45:f1:83:ff:24:6c:01:26:67:07:
         e7:d1:1e:1f:22:e3:97:d4:ac:96:bc:07:f6:09:bd:24:8a:2b:
         da:b9:c7:f7:83:44:13:79:be:67:9b:5f:9b:b6:49:f8:5f:00:
         02:e2:18:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdxlkPlFLr9JjIhNzASV6hf7i+JkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxNEQwOEVCNjY4QUQ2RDU2OUI1MkYzNjNERkZCMEQ2
RDVCQjIxMjAeFw0yNDAzMDUyMDA1MjhaFw0yNTAzMDQyMDEwMjhaMDMxMTAvBgNV
BAMTKDZEMDM5MTczNkZFNUI4ODk2N0Y0QjlBNEU2MjA3NTYwNTlCMjkwOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32MVjtACO0tajDLbmWgiiMhYJ
orIoJXZrRhjxoVYU0i8H9zfg8LDe8Xx2uv3UsWRvim4P+ikFdqXq/CYt4+MiGcg/
Om3YvxW6Bbv00dz213VX6VLd0Rp8MsngpAW7fGp8V+L5hQOvHJTD1VZtGET9psp9
3KnIXeG6b7mMMrG3LL8stwHsAT3GWlNyznFyTe3feIW7sCR+LtUrAnE9Ax0zpGQp
vtCJK6lgvkHiDFl9c0plwjNUt3pQI/c1XtNCmQupcX9cpBymJ/qrUqD9KEPLeq2+
x0DWZLvh37RrL5d5hJZG3ANn0LZ/Q7pGbhIMzPKXvWmCN3TVVeBlHVRIOSHbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbQORc2/luIln9Lmk5iB1YFmykJswHwYDVR0j
BBgwFoAUxRTQjrZorW1Wm1LzY9/7DW1bshIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NtM2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdh
QnkvMC9DNTE0RDA4RUI2NjhBRDZENTY5QjUyRjM2M0RGRkIwRDZENUJCMjEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MTREMDhFQjY2OEFENkQ1
NjlCNTJGMzYzREZGQjBENkQ1QkIyMTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djbTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzAv
MzQzNTJlMzEzNzM0MmUzMTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzODM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrqMwDQYJKoZIhvcNAQELBQADggEBAIpoSNlI
ytDaZ7MQN+HieYADhQUyzQX/CDT/jMaorWEtitdnA6hz8XuJFo0QrlDhC4qRxgI+
sEJHAeYraDa51XyiisOvMxIKFSzOnRxvxG+2pkaSwBZza5Xc/zMEh+mlP8AB5tQu
7M1+pwQg5ZLdOcNCnUy3UwiCfWZ9sspl0XqRL0kEwAA21pnN2w+QDcuSAvVGnufR
Tgzp2FXRQYPPUHgreaYIy26JEqRLJt+CHdaB+n0klMiebyDDb3ajG7RDLCZ+TK/F
42faimtMG7sdRfGD/yRsASZnB+fRHh8i45fUrJa8B/YJvSSKK9q5x/eDRBN5vmeb
X5u2SfhfAALiGDc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org