Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/34352e3138392e3136342e302f32322d3232203d3e20323730323337.roa
File:                     34352e3138392e3136342e302f32322d3232203d3e20323730323337.roa (raw, json)
Hash identifier:          qPNhus2TqREI6Zb8QMEyHLi6d5Tz9gPVKmx6eqxgPeY=
Subject key identifier:   88:4C:59:EE:1B:38:D0:CC:4C:E5:6C:84:28:3B:7A:D7:9C:56:2C:C9
Certificate issuer:       /CN=8BD58EAA788072D3207F242B97B2464A28E29772
Certificate serial:       330084559EFABC031EFB6CAD5E0DD968FA7D5FFD
Authority key identifier: 8B:D5:8E:AA:78:80:72:D3:20:7F:24:2B:97:B2:46:4A:28:E2:97:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD58EAA788072D3207F242B97B2464A28E29772.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/34352e3138392e3136342e302f32322d3232203d3e20323730323337.roa
Signing time:             Thu 04 Apr 2024 02:54:44 +0000
ROA not before:           Thu 04 Apr 2024 02:49:44 +0000
ROA not after:            Thu 03 Apr 2025 02:54:44 +0000
asID:                     270237
IP address blocks:        45.189.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:84:55:9e:fa:bc:03:1e:fb:6c:ad:5e:0d:d9:68:fa:7d:5f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD58EAA788072D3207F242B97B2464A28E29772
        Validity
            Not Before: Apr  4 02:49:44 2024 GMT
            Not After : Apr  3 02:54:44 2025 GMT
        Subject: CN=884C59EE1B38D0CC4CE56C84283B7AD79C562CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:c0:c6:d3:51:e7:92:38:b8:a2:84:da:21:
                    1e:15:be:3b:4c:de:af:b3:59:ef:11:76:d6:c7:bf:
                    8d:81:a9:76:8b:35:d5:e8:8d:8b:7c:55:10:1b:f9:
                    32:8a:42:41:ec:2a:11:6d:75:06:41:5f:80:00:92:
                    12:49:e6:39:40:40:b9:d1:2e:29:40:30:45:71:5b:
                    45:2a:c6:70:1a:85:15:9d:41:70:13:cd:7b:9d:4a:
                    e3:b2:2a:0f:2d:13:c6:40:0f:57:aa:48:95:ab:94:
                    9c:ce:f2:77:8c:5e:64:b0:a0:84:c5:48:b4:dd:26:
                    57:00:bd:71:a5:fd:c5:da:60:79:44:4e:c7:84:20:
                    db:75:fa:8e:60:bc:25:e0:a3:af:b3:23:b8:35:8c:
                    d2:07:69:95:c0:54:ce:b5:77:a7:b9:c2:51:03:36:
                    c2:83:85:ee:5b:66:c5:72:93:de:44:0a:2d:56:4e:
                    36:16:45:af:08:80:7c:85:b0:78:c9:44:4b:b8:2c:
                    1d:ee:18:88:b9:7c:c0:2a:37:69:e5:56:7c:c5:4b:
                    7d:66:1b:df:29:f1:2b:7b:41:7c:1c:b5:3e:d5:4b:
                    b1:34:c8:e8:ce:4f:3d:85:ae:22:a8:c0:54:f8:a4:
                    3f:1d:4e:0d:f3:59:f8:2c:ec:13:3a:f9:eb:82:1a:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4C:59:EE:1B:38:D0:CC:4C:E5:6C:84:28:3B:7A:D7:9C:56:2C:C9
            X509v3 Authority Key Identifier:
                keyid:8B:D5:8E:AA:78:80:72:D3:20:7F:24:2B:97:B2:46:4A:28:E2:97:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/8BD58EAA788072D3207F242B97B2464A28E29772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD58EAA788072D3207F242B97B2464A28E29772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/34352e3138392e3136342e302f32322d3232203d3e20323730323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:7d:7b:c1:1e:71:18:07:80:cf:38:4b:6d:b1:9a:b7:94:c6:
         b7:ae:d3:c9:40:8b:81:44:f8:51:83:c7:56:0e:e6:81:41:dd:
         24:3c:9d:4d:f4:32:fb:63:93:32:c6:c0:4e:53:b6:78:73:46:
         b4:d4:55:6a:39:25:44:11:43:05:24:f7:bf:f6:7f:5e:0b:de:
         07:79:6b:e0:b2:82:93:dd:5d:9c:80:05:76:d5:35:ab:ea:5c:
         9e:b9:e1:e2:a1:9a:9a:97:6b:e1:41:e7:42:48:95:e3:e0:15:
         b2:b2:8a:09:de:a8:85:45:33:96:cf:c3:c9:53:90:a9:8b:32:
         60:c2:11:08:05:75:2b:3b:52:e9:c5:f7:d3:f2:6c:db:f2:aa:
         5c:c2:da:f2:00:fa:f3:93:4d:7c:3d:62:60:dc:0f:ac:84:d3:
         a4:f4:ab:bc:4e:b3:0c:f1:4e:1c:7d:2b:95:ac:a3:fe:5c:5a:
         3b:f4:a4:e1:f0:a1:a7:64:53:c1:9d:4c:f2:c8:ec:69:5f:3e:
         3f:01:16:61:af:10:89:35:13:3e:5d:fb:21:77:f4:31:e0:d7:
         ba:07:4b:a3:0e:91:c5:8c:bf:18:8b:aa:81:2c:ec:16:ad:de:
         6c:4d:b9:f5:ab:94:2b:c3:6b:eb:27:0c:d8:6b:c5:14:e5:05:
         b6:60:4a:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMwCEVZ76vAMe+2ytXg3ZaPp9X/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJENThFQUE3ODgwNzJEMzIwN0YyNDJCOTdCMjQ2NEEy
OEUyOTc3MjAeFw0yNDA0MDQwMjQ5NDRaFw0yNTA0MDMwMjU0NDRaMDMxMTAvBgNV
BAMTKDg4NEM1OUVFMUIzOEQwQ0M0Q0U1NkM4NDI4M0I3QUQ3OUM1NjJDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8M8DG01Hnkji4ooTaIR4VvjtM
3q+zWe8RdtbHv42BqXaLNdXojYt8VRAb+TKKQkHsKhFtdQZBX4AAkhJJ5jlAQLnR
LilAMEVxW0UqxnAahRWdQXATzXudSuOyKg8tE8ZAD1eqSJWrlJzO8neMXmSwoITF
SLTdJlcAvXGl/cXaYHlETseEINt1+o5gvCXgo6+zI7g1jNIHaZXAVM61d6e5wlED
NsKDhe5bZsVyk95ECi1WTjYWRa8IgHyFsHjJREu4LB3uGIi5fMAqN2nlVnzFS31m
G98p8St7QXwctT7VS7E0yOjOTz2FriKowFT4pD8dTg3zWfgs7BM6+euCGk9VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiExZ7hs40MxM5WyEKDt615xWLMkwHwYDVR0j
BBgwFoAUi9WOqniActMgfyQrl7JGSijil3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3MycDV1S0FMWGllaWpKdk5pZDJ5Tlg3R1R0d0NndU5STGhoZENWempx
aUovMS84QkQ1OEVBQTc4ODA3MkQzMjA3RjI0MkI5N0IyNDY0QTI4RTI5NzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCRDU4RUFBNzg4MDcyRDMy
MDdGMjQyQjk3QjI0NjRBMjhFMjk3NzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzMnA1dUtBTFhpZWlqSnZOaWQyeU5YN0dUdHdDZ3VOUkxoaGRDVnpqcWlKLzEv
MzQzNTJlMzEzODM5MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzMjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvaQwDQYJKoZIhvcNAQELBQADggEBAD19e8Ee
cRgHgM84S22xmreUxreu08lAi4FE+FGDx1YO5oFB3SQ8nU30MvtjkzLGwE5Ttnhz
RrTUVWo5JUQRQwUk97/2f14L3gd5a+CygpPdXZyABXbVNavqXJ654eKhmpqXa+FB
50JIlePgFbKyigneqIVFM5bPw8lTkKmLMmDCEQgFdSs7UunF99PybNvyqlzC2vIA
+vOTTXw9YmDcD6yE06T0q7xOswzxThx9K5Wso/5cWjv0pOHwoadkU8GdTPLI7Glf
Pj8BFmGvEIk1Ez5d+yF39DHg17oHS6MOkcWMvxiLqoEs7Bat3mxNufWrlCvDa+sn
DNhrxRTlBbZgShs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org