Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230342e302f32322d3232203d3e20323638393231.roa
File:                     34352e3137352e3230342e302f32322d3232203d3e20323638393231.roa (raw, json)
Hash identifier:          /K3rtuSdbPsX4cfmxZyKRl37mJK1nFd6bLdgGgqqC9U=
Subject key identifier:   D4:0C:DB:AA:5C:7B:1C:43:E9:40:D7:55:79:FD:E4:9D:C3:3C:00:8A
Certificate issuer:       /CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
Certificate serial:       18EC8931BF117C9EBD8E616A33B840446F7FA588
Authority key identifier: BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230342e302f32322d3232203d3e20323638393231.roa
Signing time:             Wed 28 Feb 2024 19:20:20 +0000
ROA not before:           Wed 28 Feb 2024 19:15:20 +0000
ROA not after:            Wed 26 Feb 2025 19:20:20 +0000
asID:                     268921
IP address blocks:        45.175.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ec:89:31:bf:11:7c:9e:bd:8e:61:6a:33:b8:40:44:6f:7f:a5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
        Validity
            Not Before: Feb 28 19:15:20 2024 GMT
            Not After : Feb 26 19:20:20 2025 GMT
        Subject: CN=D40CDBAA5C7B1C43E940D75579FDE49DC33C008A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:e6:85:47:db:b8:10:fa:22:83:b5:97:1a:
                    8a:6e:69:0a:6f:f5:a8:88:53:e2:b1:3e:39:89:57:
                    b3:c9:7a:0e:53:ea:de:c4:f4:05:99:ba:30:14:3e:
                    55:03:b6:40:f0:6d:f2:e0:da:a4:08:80:f3:7b:7b:
                    71:0e:10:1f:1b:b0:17:da:cc:88:47:90:f0:00:bb:
                    6d:53:1c:e6:9c:93:2b:44:1d:55:39:51:2c:4c:fc:
                    c2:5d:50:de:78:c5:41:f0:15:f8:dd:fb:c5:21:59:
                    4d:a3:69:15:c4:8c:82:a6:e1:87:44:09:ee:da:a5:
                    50:f5:c6:83:fc:76:8d:76:35:29:8e:6c:41:df:a7:
                    f0:db:c9:1c:44:c9:10:3f:12:a8:f0:91:c2:ac:30:
                    d7:8f:08:41:0c:7d:7f:47:01:80:b8:8f:60:ff:6b:
                    26:ce:5e:cb:90:03:76:56:9e:b3:67:9f:75:a1:e5:
                    69:7a:9a:6f:59:13:a0:22:0f:f5:44:aa:e4:0c:01:
                    ca:14:cc:e9:98:2f:f6:d0:e6:b6:86:22:6c:50:28:
                    02:f8:20:3f:16:41:18:6a:13:8f:f6:fe:dd:f1:41:
                    76:bc:aa:c4:6e:ea:78:54:fb:3e:04:3a:1c:48:c8:
                    6a:7a:b1:87:27:dc:ef:8a:2c:5b:a8:7f:30:a9:94:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0C:DB:AA:5C:7B:1C:43:E9:40:D7:55:79:FD:E4:9D:C3:3C:00:8A
            X509v3 Authority Key Identifier:
                keyid:BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230342e302f32322d3232203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:33:0d:84:ce:c0:63:fc:79:fb:c4:ca:9d:3f:f4:98:c9:ba:
         18:6f:cf:8f:79:60:99:25:ee:83:d8:00:20:ed:00:8a:9c:a8:
         2a:be:ff:ed:80:63:c0:51:af:aa:e1:3c:df:33:e7:78:f5:23:
         03:2c:26:8f:86:59:8f:e5:cb:e9:39:80:bb:d8:2e:7d:bd:70:
         1c:22:ef:66:89:8d:c2:80:ad:94:d7:1b:2f:16:2c:6c:2f:b6:
         e9:e1:56:64:1c:44:c9:5a:8e:82:5c:53:0f:00:95:86:aa:40:
         0c:b2:b6:30:0f:fa:e1:f2:e5:83:92:16:89:3a:f7:2f:ac:ce:
         a9:12:3f:86:09:92:e3:d1:70:e8:fb:0b:6c:50:b6:a4:fb:50:
         ea:45:40:ab:4f:03:da:04:23:cc:60:22:52:4e:fe:85:17:45:
         e2:a6:13:f5:af:48:72:65:ab:6b:21:2f:62:b5:41:16:e5:3d:
         29:80:33:d0:aa:f6:c6:55:7c:91:0b:0a:e7:2f:18:3b:1f:78:
         21:52:ff:f1:b0:d1:b0:e7:f9:76:65:69:73:5d:18:b0:98:e6:
         52:11:61:3b:95:c8:7b:4f:4a:37:61:4b:fe:b8:19:67:9d:fe:
         a6:a0:c2:d5:e4:b8:88:1e:ed:c0:45:a1:6d:bc:8e:41:66:14:
         a0:4e:4d:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGOyJMb8RfJ69jmFqM7hARG9/pYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTE1RjEwRjU3QjVFRDBEMDg4NUUxOUJFMDNCNzc2
QTE0QUY2MTAeFw0yNDAyMjgxOTE1MjBaFw0yNTAyMjYxOTIwMjBaMDMxMTAvBgNV
BAMTKEQ0MENEQkFBNUM3QjFDNDNFOTQwRDc1NTc5RkRFNDlEQzMzQzAwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPeaFR9u4EPoig7WXGopuaQpv
9aiIU+KxPjmJV7PJeg5T6t7E9AWZujAUPlUDtkDwbfLg2qQIgPN7e3EOEB8bsBfa
zIhHkPAAu21THOackytEHVU5USxM/MJdUN54xUHwFfjd+8UhWU2jaRXEjIKm4YdE
Ce7apVD1xoP8do12NSmObEHfp/DbyRxEyRA/EqjwkcKsMNePCEEMfX9HAYC4j2D/
aybOXsuQA3ZWnrNnn3Wh5Wl6mm9ZE6AiD/VEquQMAcoUzOmYL/bQ5raGImxQKAL4
ID8WQRhqE4/2/t3xQXa8qsRu6nhU+z4EOhxIyGp6sYcn3O+KLFuofzCplM3pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1Azbqlx7HEPpQNdVef3kncM8AIowHwYDVR0j
BBgwFoAUukEV8Q9Xte0NCIXhm+A7d2oUr2EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lXSkxLUWs0c2czYkNjMnk0WFFjNldVYUdpM2tmQWhuVzQ3WGRKQlhF
ZnQvMC9CQTQxMTVGMTBGNTdCNUVEMEQwODg1RTE5QkUwM0I3NzZBMTRBRjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBNDExNUYxMEY1N0I1RUQw
RDA4ODVFMTlCRTAzQjc3NkExNEFGNjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpV0pMS1FrNHNnM2JDYzJ5NFhRYzZXVWFHaTNrZkFoblc0N1hkSkJYRWZ0LzAv
MzQzNTJlMzEzNzM1MmUzMjMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItr8wwDQYJKoZIhvcNAQELBQADggEBAAUzDYTO
wGP8efvEyp0/9JjJuhhvz495YJkl7oPYACDtAIqcqCq+/+2AY8BRr6rhPN8z53j1
IwMsJo+GWY/ly+k5gLvYLn29cBwi72aJjcKArZTXGy8WLGwvtunhVmQcRMlajoJc
Uw8AlYaqQAyytjAP+uHy5YOSFok69y+szqkSP4YJkuPRcOj7C2xQtqT7UOpFQKtP
A9oEI8xgIlJO/oUXReKmE/WvSHJlq2shL2K1QRblPSmAM9Cq9sZVfJELCucvGDsf
eCFS//Gw0bDn+XZlaXNdGLCY5lIRYTuVyHtPSjdhS/64GWed/qagwtXkuIge7cBF
oW28jkFmFKBOTTQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org