Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230342e302f32342d3234203d3e20323638393231.roa
File:                     34352e3137352e3230342e302f32342d3234203d3e20323638393231.roa (raw, json)
Hash identifier:          Rv2oa5sXXqHy6v1dOmGBkBtKuoVdrfPhUI3Nx8uRrns=
Subject key identifier:   AE:1C:3D:8A:D5:BA:D8:3E:AB:39:32:96:CC:A9:FF:AB:F6:18:DE:49
Certificate issuer:       /CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
Certificate serial:       55810E85135FCFE01343BB6E371F4CAF1A57447D
Authority key identifier: BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230342e302f32342d3234203d3e20323638393231.roa
Signing time:             Wed 28 Feb 2024 19:20:21 +0000
ROA not before:           Wed 28 Feb 2024 19:15:21 +0000
ROA not after:            Wed 26 Feb 2025 19:20:21 +0000
asID:                     268921
IP address blocks:        45.175.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:81:0e:85:13:5f:cf:e0:13:43:bb:6e:37:1f:4c:af:1a:57:44:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
        Validity
            Not Before: Feb 28 19:15:21 2024 GMT
            Not After : Feb 26 19:20:21 2025 GMT
        Subject: CN=AE1C3D8AD5BAD83EAB393296CCA9FFABF618DE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:35:4d:8d:d6:b4:42:a9:90:2f:f6:e0:ee:
                    96:18:42:11:b3:7c:1c:73:57:a2:d8:f5:5c:01:b5:
                    5e:8e:1a:85:3a:02:a8:33:2d:12:09:ca:7c:5c:ed:
                    41:0a:32:91:d6:c9:b3:c2:0f:d5:a9:cc:27:7b:89:
                    c2:5d:b5:56:8a:35:c9:f5:8a:76:61:09:65:4c:bd:
                    77:28:0f:5f:ba:3e:cf:e1:5e:a7:01:13:fb:18:3e:
                    7e:f0:5e:79:0a:78:9a:31:77:f1:61:8d:61:5a:b2:
                    5a:97:a1:e6:f9:36:00:80:ec:68:7e:90:3d:d9:17:
                    08:32:8a:db:4b:3e:3c:d2:7a:78:94:eb:c4:00:dd:
                    e3:9f:11:76:9b:85:a8:43:37:27:fc:be:11:d5:8b:
                    aa:0e:0a:98:78:d2:55:05:cd:ce:1e:68:dd:b7:d7:
                    1c:17:f7:5b:51:99:35:9a:66:8a:d1:15:2f:40:6d:
                    e7:18:28:29:4b:1f:ba:ef:f4:f3:c2:5c:f4:59:7c:
                    57:57:23:53:8d:50:6d:d6:e5:e4:70:31:bd:be:e3:
                    64:69:30:79:47:46:09:d9:5a:ce:2b:78:23:05:d8:
                    50:dd:34:17:d9:b0:65:fa:99:df:2c:10:1d:db:b2:
                    5f:77:94:86:79:d0:73:c8:df:65:0d:1e:ae:1f:b7:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1C:3D:8A:D5:BA:D8:3E:AB:39:32:96:CC:A9:FF:AB:F6:18:DE:49
            X509v3 Authority Key Identifier:
                keyid:BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230342e302f32342d3234203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:f7:af:f8:12:65:5d:45:c5:6c:81:69:4d:a2:f2:bf:20:76:
         21:53:20:08:b5:6a:56:ed:e9:fc:b4:e9:a1:ca:d2:d7:de:a8:
         f2:93:20:21:83:dc:ea:17:53:c9:c9:a4:e5:e2:0d:07:de:a1:
         7e:03:82:f7:e2:0f:42:b0:b9:17:b2:eb:71:95:3a:b6:35:b3:
         73:41:8a:38:4e:79:ac:3f:43:67:1e:82:92:71:7a:72:ad:cf:
         c8:ae:60:9a:84:d2:c8:4c:75:2b:1a:66:ec:5c:47:16:b9:71:
         e0:8e:fe:5c:96:0e:f5:73:79:78:d4:0c:69:55:76:1f:60:8a:
         56:40:af:aa:4c:83:7a:db:43:5e:38:6a:d5:16:2b:9b:97:1a:
         7e:b4:fd:51:73:52:5f:7f:30:2f:0a:0a:92:67:2e:dc:5c:76:
         95:5c:08:c0:ba:8b:a1:98:58:a1:51:4e:9b:15:55:b8:3e:77:
         02:31:13:c0:50:73:ea:ce:e4:0c:d8:57:68:57:5c:d6:b0:11:
         51:2c:96:cc:63:93:45:15:8b:74:be:32:f4:cd:bc:49:d0:b3:
         ee:66:34:38:ec:84:70:91:2d:0b:34:99:3f:e6:be:66:de:3d:
         e1:d1:db:a5:4a:f5:ac:d5:15:7d:c1:18:d4:aa:10:4b:66:46:
         ac:fe:28:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVYEOhRNfz+ATQ7tuNx9MrxpXRH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTE1RjEwRjU3QjVFRDBEMDg4NUUxOUJFMDNCNzc2
QTE0QUY2MTAeFw0yNDAyMjgxOTE1MjFaFw0yNTAyMjYxOTIwMjFaMDMxMTAvBgNV
BAMTKEFFMUMzRDhBRDVCQUQ4M0VBQjM5MzI5NkNDQTlGRkFCRjYxOERFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWDVNjda0QqmQL/bg7pYYQhGz
fBxzV6LY9VwBtV6OGoU6AqgzLRIJynxc7UEKMpHWybPCD9WpzCd7icJdtVaKNcn1
inZhCWVMvXcoD1+6Ps/hXqcBE/sYPn7wXnkKeJoxd/FhjWFaslqXoeb5NgCA7Gh+
kD3ZFwgyittLPjzSeniU68QA3eOfEXabhahDNyf8vhHVi6oOCph40lUFzc4eaN23
1xwX91tRmTWaZorRFS9AbecYKClLH7rv9PPCXPRZfFdXI1ONUG3W5eRwMb2+42Rp
MHlHRgnZWs4reCMF2FDdNBfZsGX6md8sEB3bsl93lIZ50HPI32UNHq4ftwN1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrhw9itW62D6rOTKWzKn/q/YY3kkwHwYDVR0j
BBgwFoAUukEV8Q9Xte0NCIXhm+A7d2oUr2EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lXSkxLUWs0c2czYkNjMnk0WFFjNldVYUdpM2tmQWhuVzQ3WGRKQlhF
ZnQvMC9CQTQxMTVGMTBGNTdCNUVEMEQwODg1RTE5QkUwM0I3NzZBMTRBRjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBNDExNUYxMEY1N0I1RUQw
RDA4ODVFMTlCRTAzQjc3NkExNEFGNjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpV0pMS1FrNHNnM2JDYzJ5NFhRYzZXVWFHaTNrZkFoblc0N1hkSkJYRWZ0LzAv
MzQzNTJlMzEzNzM1MmUzMjMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtr8wwDQYJKoZIhvcNAQELBQADggEBAKL3r/gS
ZV1FxWyBaU2i8r8gdiFTIAi1albt6fy06aHK0tfeqPKTICGD3OoXU8nJpOXiDQfe
oX4DgvfiD0KwuRey63GVOrY1s3NBijhOeaw/Q2cegpJxenKtz8iuYJqE0shMdSsa
ZuxcRxa5ceCO/lyWDvVzeXjUDGlVdh9gilZAr6pMg3rbQ144atUWK5uXGn60/VFz
Ul9/MC8KCpJnLtxcdpVcCMC6i6GYWKFRTpsVVbg+dwIxE8BQc+rO5AzYV2hXXNaw
EVEslsxjk0UVi3S+MvTNvEnQs+5mNDjshHCRLQs0mT/mvmbePeHR26VK9azVFX3B
GNSqEEtmRqz+KOI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org