Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/34352e3138392e38382e302f32322d3234203d3e20323639353734.roa
File:                     34352e3138392e38382e302f32322d3234203d3e20323639353734.roa (raw, json)
Hash identifier:          +PEOjjtJMICWyOvedd2IdgOetW6haQo14tywgVZ/WhM=
Subject key identifier:   D0:DF:39:BB:6B:A7:E5:34:1A:AE:AD:D3:B5:0A:9D:0C:04:6E:2C:CA
Certificate issuer:       /CN=9D2636456069EFE8481331BCAD68D241BFEAD9E8
Certificate serial:       4C70392EC6B824F9A015E4D8F44C8A130E587B8E
Authority key identifier: 9D:26:36:45:60:69:EF:E8:48:13:31:BC:AD:68:D2:41:BF:EA:D9:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D2636456069EFE8481331BCAD68D241BFEAD9E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/34352e3138392e38382e302f32322d3234203d3e20323639353734.roa
Signing time:             Thu 27 Oct 2022 14:58:16 +0000
ROA not before:           Thu 27 Oct 2022 14:53:16 +0000
ROA not after:            Thu 26 Oct 2023 14:58:16 +0000
asID:                     269574
IP address blocks:        45.189.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:70:39:2e:c6:b8:24:f9:a0:15:e4:d8:f4:4c:8a:13:0e:58:7b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D2636456069EFE8481331BCAD68D241BFEAD9E8
        Validity
            Not Before: Oct 27 14:53:16 2022 GMT
            Not After : Oct 26 14:58:16 2023 GMT
        Subject: CN=D0DF39BB6BA7E5341AAEADD3B50A9D0C046E2CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:49:22:7e:06:6c:10:83:77:ae:4f:85:6b:
                    21:e7:04:69:44:2d:a8:23:ac:56:1c:85:55:8c:e0:
                    39:1c:5e:c0:3b:d0:9a:4a:04:72:76:44:af:8c:6a:
                    d2:eb:bd:07:5d:2f:0e:64:81:7a:60:69:09:91:39:
                    f1:be:34:f4:1b:5e:e1:66:64:d3:ec:90:e8:b9:5f:
                    91:25:a5:45:ea:e0:48:62:40:60:07:5c:2c:f5:4e:
                    2c:45:2c:80:0c:de:c9:8f:cd:33:4f:f5:95:bc:da:
                    ee:aa:e3:a6:d8:51:80:5c:a3:c2:1d:7e:75:bf:f6:
                    64:95:d4:a0:de:a7:04:45:49:0d:c1:cb:3a:14:b0:
                    8f:83:b5:fb:91:e7:00:18:13:5b:fb:81:2d:68:f9:
                    cd:ad:fb:8e:b3:f5:3e:c2:08:2d:30:81:3c:5a:a3:
                    94:09:9e:1c:2c:56:7c:19:fb:a7:2d:d5:63:9d:8c:
                    fc:a6:c6:11:e8:a6:13:ce:97:c2:cf:14:5a:a9:d4:
                    61:37:7e:29:37:4a:c0:47:46:00:4e:f0:19:1d:57:
                    36:19:9c:cc:e5:49:3a:1f:c9:19:07:2c:bf:4f:f1:
                    3a:30:23:e4:e6:e7:39:4a:10:c0:79:13:b6:1f:ab:
                    29:b3:0e:01:e3:8d:f1:20:40:8e:d7:37:15:23:e1:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DF:39:BB:6B:A7:E5:34:1A:AE:AD:D3:B5:0A:9D:0C:04:6E:2C:CA
            X509v3 Authority Key Identifier:
                keyid:9D:26:36:45:60:69:EF:E8:48:13:31:BC:AD:68:D2:41:BF:EA:D9:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/9D2636456069EFE8481331BCAD68D241BFEAD9E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D2636456069EFE8481331BCAD68D241BFEAD9E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/34352e3138392e38382e302f32322d3234203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:37:1d:0d:66:c7:45:d2:77:f7:cb:25:8d:bc:96:9c:fd:
         0c:db:ca:34:67:6c:75:44:24:e8:ec:34:c0:99:32:ac:b7:13:
         1d:23:1d:52:7e:59:49:f6:d8:b0:5d:73:c4:b5:20:7f:ec:b1:
         e6:bd:8c:04:fe:b3:b6:7c:25:3c:09:d7:fd:6c:9f:ce:d8:06:
         d2:5d:bd:95:13:aa:22:a3:8d:00:54:a7:a8:bc:80:eb:2b:6c:
         d9:25:f9:a2:63:ee:64:b6:cc:e0:f9:1c:96:e2:15:c9:06:0a:
         02:e9:66:b3:5f:a9:85:f0:54:56:6d:48:d3:73:cf:a6:da:64:
         94:e3:4f:f2:75:1f:09:79:33:48:b8:e9:01:10:4e:45:98:5f:
         a5:74:b8:a6:b2:01:47:a5:1c:29:7e:5b:b7:a5:93:5a:73:15:
         9c:ef:83:5a:37:51:85:c9:71:e5:a9:9c:d2:46:cb:7e:ea:c7:
         61:53:33:5c:7f:db:aa:6f:c1:7c:ed:e6:31:db:fe:8c:ba:c1:
         6f:6b:9e:b4:26:65:dd:35:56:d9:50:d2:15:07:64:06:5a:0a:
         b4:6c:af:b5:ca:4f:6b:96:a7:cc:79:48:18:c8:47:73:9e:88:
         fc:0c:92:38:10:4d:85:62:74:ee:6e:b3:01:0d:86:35:38:c9:
         a6:c4:d3:25
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTHA5Lsa4JPmgFeTY9EyKEw5Ye44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQyNjM2NDU2MDY5RUZFODQ4MTMzMUJDQUQ2OEQyNDFC
RkVBRDlFODAeFw0yMjEwMjcxNDUzMTZaFw0yMzEwMjYxNDU4MTZaMDMxMTAvBgNV
BAMTKEQwREYzOUJCNkJBN0U1MzQxQUFFQUREM0I1MEE5RDBDMDQ2RTJDQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XUkifgZsEIN3rk+FayHnBGlE
LagjrFYchVWM4DkcXsA70JpKBHJ2RK+MatLrvQddLw5kgXpgaQmROfG+NPQbXuFm
ZNPskOi5X5ElpUXq4EhiQGAHXCz1TixFLIAM3smPzTNP9ZW82u6q46bYUYBco8Id
fnW/9mSV1KDepwRFSQ3ByzoUsI+DtfuR5wAYE1v7gS1o+c2t+46z9T7CCC0wgTxa
o5QJnhwsVnwZ+6ct1WOdjPymxhHophPOl8LPFFqp1GE3fik3SsBHRgBO8BkdVzYZ
nMzlSTofyRkHLL9P8TowI+Tm5zlKEMB5E7YfqymzDgHjjfEgQI7XNxUj4RGBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0N85u2un5TQarq3TtQqdDARuLMowHwYDVR0j
BBgwFoAUnSY2RWBp7+hIEzG8rWjSQb/q2egwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dCcU5BeFh4bWFDbk03ZVA2ekd6ZUMxRGp3NDF6YThUTko2SDU1ZlI0
QlAvMi85RDI2MzY0NTYwNjlFRkU4NDgxMzMxQkNBRDY4RDI0MUJGRUFEOUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEMjYzNjQ1NjA2OUVGRTg0
ODEzMzFCQ0FENjhEMjQxQkZFQUQ5RTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnQnFOQXhYeG1hQ25NN2VQNnpHemVDMURqdzQxemE4VE5KNkg1NWZSNEJQLzIv
MzQzNTJlMzEzODM5MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLb1YMA0GCSqGSIb3DQEBCwUAA4IBAQCJHjcdDWbH
RdJ398sljbyWnP0M28o0Z2x1RCTo7DTAmTKstxMdIx1SfllJ9tiwXXPEtSB/7LHm
vYwE/rO2fCU8Cdf9bJ/O2AbSXb2VE6oio40AVKeovIDrK2zZJfmiY+5ktszg+RyW
4hXJBgoC6WazX6mF8FRWbUjTc8+m2mSU40/ydR8JeTNIuOkBEE5FmF+ldLimsgFH
pRwpflu3pZNacxWc74NaN1GFyXHlqZzSRst+6sdhUzNcf9uqb8F87eYx2/6MusFv
a560JmXdNVbZUNIVB2QGWgq0bK+1yk9rlqfMeUgYyEdznoj8DJI4EE2FYnTubrMB
DYY1OMmmxNMl
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org