Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32342d3234203d3e20323638303335.roa
File:                     34352e3136382e31322e302f32342d3234203d3e20323638303335.roa (raw, json)
Hash identifier:          CU7mf7mdrrLb45aT50TBUuUSlRF77Yhg3DCDWKxz4A4=
Subject key identifier:   6F:0A:EB:DE:F5:95:6E:1E:96:3C:98:C9:7A:1A:83:39:DF:D7:6F:90
Certificate issuer:       /CN=15D66C82385E07A46724C3074293F737D556F1B3
Certificate serial:       1E3B8F416C7620B177B8D8CFAE4877E3154ED0C0
Authority key identifier: 15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32342d3234203d3e20323638303335.roa
Signing time:             Thu 14 Dec 2023 13:31:30 +0000
ROA not before:           Thu 14 Dec 2023 13:26:30 +0000
ROA not after:            Thu 12 Dec 2024 13:31:30 +0000
asID:                     268035
IP address blocks:        45.168.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3b:8f:41:6c:76:20:b1:77:b8:d8:cf:ae:48:77:e3:15:4e:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D66C82385E07A46724C3074293F737D556F1B3
        Validity
            Not Before: Dec 14 13:26:30 2023 GMT
            Not After : Dec 12 13:31:30 2024 GMT
        Subject: CN=6F0AEBDEF5956E1E963C98C97A1A8339DFD76F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:8f:bb:b9:39:ad:96:40:86:09:26:ed:2f:
                    10:87:5f:b4:b2:10:3c:57:ab:88:e9:44:42:c8:f0:
                    fe:3e:67:f0:b1:80:b6:17:fc:9e:38:12:88:40:7c:
                    cb:ba:d6:fa:39:87:22:67:e9:65:8e:22:c5:f3:59:
                    65:a7:ee:5d:8c:d7:43:16:73:83:e9:e8:a7:16:24:
                    b7:2f:b2:a2:dd:c3:aa:8e:75:5d:58:60:18:bc:6a:
                    b6:0d:db:0f:2e:2d:9f:98:69:12:9b:59:81:ae:80:
                    f0:90:5a:37:bd:57:c6:cf:e8:ba:98:b5:7a:f4:e9:
                    2e:3f:ad:f9:cb:0c:ca:5f:16:18:08:c2:f3:e9:f8:
                    c7:84:87:bb:7d:e1:77:63:d7:4e:89:3b:42:06:8e:
                    1a:5c:e4:27:a4:97:0c:6e:fa:41:93:9f:20:64:1d:
                    e8:aa:18:42:7f:3a:30:e7:21:4d:75:8a:20:0d:e0:
                    f2:69:7d:9b:e9:ee:60:e9:0c:71:d8:89:d1:67:35:
                    cc:1c:31:78:2c:a4:1e:a2:e3:db:35:54:71:0a:e1:
                    d1:69:09:cf:b0:75:51:0f:98:a9:fd:2f:b2:14:18:
                    41:02:5e:2a:42:ab:8c:14:e6:bb:4c:d8:67:b0:61:
                    a6:96:51:39:41:8d:b5:5c:3d:38:95:ca:b6:53:0c:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:EB:DE:F5:95:6E:1E:96:3C:98:C9:7A:1A:83:39:DF:D7:6F:90
            X509v3 Authority Key Identifier:
                keyid:15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32342d3234203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:59:8b:cc:4e:28:15:6a:98:49:b6:2f:e4:31:79:cf:24:2e:
         a4:4f:06:82:21:15:ec:15:ee:ad:0e:81:24:59:08:35:b5:69:
         1b:6a:ac:8a:39:a5:0c:81:b1:14:9b:8b:c8:e7:ac:27:0c:8d:
         fd:1a:c0:7d:38:97:13:1d:9f:91:1a:e6:1d:a6:0d:af:be:31:
         1a:e3:0f:db:03:22:a0:e3:66:5b:52:1a:4e:f3:df:33:e2:3c:
         4a:72:c0:37:5d:a7:19:74:c6:8b:07:66:3f:0a:b0:e8:28:4b:
         70:19:f5:68:9d:35:8b:bd:33:24:98:3e:de:ca:c6:02:c2:d1:
         fd:10:0b:48:82:b4:87:1e:6e:0b:72:f3:ae:9c:f1:1c:f4:a6:
         86:da:7f:a6:5a:06:50:a3:cb:4a:5b:6a:a5:e5:63:82:7e:73:
         a7:76:19:f5:fe:ed:56:be:c4:6f:8d:84:5b:c6:fd:f8:9f:22:
         47:b2:fa:73:91:92:2a:83:f9:01:80:8a:2a:de:59:dd:8a:e1:
         10:6c:ac:5c:f3:5c:d0:b6:22:7b:be:48:ff:9d:9a:7c:c8:cb:
         8b:57:f6:23:e8:cc:31:3c:28:8f:38:95:87:25:20:e4:46:5c:
         13:56:b7:eb:5c:14:bf:a4:63:bc:4f:d8:72:df:b8:55:df:87:
         66:33:7b:e7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHjuPQWx2ILF3uNjPrkh34xVO0MAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVENjZDODIzODVFMDdBNDY3MjRDMzA3NDI5M0Y3MzdE
NTU2RjFCMzAeFw0yMzEyMTQxMzI2MzBaFw0yNDEyMTIxMzMxMzBaMDMxMTAvBgNV
BAMTKDZGMEFFQkRFRjU5NTZFMUU5NjNDOThDOTdBMUE4MzM5REZENzZGOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQI+7uTmtlkCGCSbtLxCHX7Sy
EDxXq4jpRELI8P4+Z/CxgLYX/J44EohAfMu61vo5hyJn6WWOIsXzWWWn7l2M10MW
c4Pp6KcWJLcvsqLdw6qOdV1YYBi8arYN2w8uLZ+YaRKbWYGugPCQWje9V8bP6LqY
tXr06S4/rfnLDMpfFhgIwvPp+MeEh7t94Xdj106JO0IGjhpc5Ceklwxu+kGTnyBk
HeiqGEJ/OjDnIU11iiAN4PJpfZvp7mDpDHHYidFnNcwcMXgspB6i49s1VHEK4dFp
Cc+wdVEPmKn9L7IUGEECXipCq4wU5rtM2GewYaaWUTlBjbVcPTiVyrZTDFPfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbwrr3vWVbh6WPJjJehqDOd/Xb5AwHwYDVR0j
BBgwFoAUFdZsgjheB6RnJMMHQpP3N9VW8bMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2VpM21pZHViaDh4cVN6amV5TmQ0TEwxcFpoUnRKMVRCb0p4YzVSVmNp
RjgvMC8xNUQ2NkM4MjM4NUUwN0E0NjcyNEMzMDc0MjkzRjczN0Q1NTZGMUIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1RDY2QzgyMzg1RTA3QTQ2
NzI0QzMwNzQyOTNGNzM3RDU1NkYxQjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlaTNtaWR1Ymg4eHFTempleU5kNExMMXBaaFJ0SjFUQm9KeGM1UlZjaUY4LzAv
MzQzNTJlMzEzNjM4MmUzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALagMMA0GCSqGSIb3DQEBCwUAA4IBAQDFWYvMTigV
aphJti/kMXnPJC6kTwaCIRXsFe6tDoEkWQg1tWkbaqyKOaUMgbEUm4vI56wnDI39
GsB9OJcTHZ+RGuYdpg2vvjEa4w/bAyKg42ZbUhpO898z4jxKcsA3XacZdMaLB2Y/
CrDoKEtwGfVonTWLvTMkmD7eysYCwtH9EAtIgrSHHm4LcvOunPEc9KaG2n+mWgZQ
o8tKW2ql5WOCfnOndhn1/u1WvsRvjYRbxv34nyJHsvpzkZIqg/kBgIoq3lndiuEQ
bKxc81zQtiJ7vkj/nZp8yMuLV/Yj6MwxPCiPOJWHJSDkRlwTVrfrXBS/pGO8T9hy
37hV34dmM3vn
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org