Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa
File:                     34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa (raw, json)
Hash identifier:          9ShZF9Bneg2eHlLmGzy9iXh5i4w2jP6THfURyolYuoQ=
Subject key identifier:   B5:BA:71:B7:58:A7:82:83:AE:D7:A4:65:2B:9F:14:2D:4C:74:81:E1
Certificate issuer:       /CN=FB55391412BDE10B53428AACB9E329201BF68D11
Certificate serial:       52900F99FA36470355BE1F46224E8C3F2F295042
Authority key identifier: FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa
Signing time:             Wed 28 Feb 2024 18:43:06 +0000
ROA not before:           Wed 28 Feb 2024 18:38:06 +0000
ROA not after:            Wed 26 Feb 2025 18:43:06 +0000
asID:                     268331
IP address blocks:        45.238.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:90:0f:99:fa:36:47:03:55:be:1f:46:22:4e:8c:3f:2f:29:50:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB55391412BDE10B53428AACB9E329201BF68D11
        Validity
            Not Before: Feb 28 18:38:06 2024 GMT
            Not After : Feb 26 18:43:06 2025 GMT
        Subject: CN=B5BA71B758A78283AED7A4652B9F142D4C7481E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:65:ee:16:9b:dd:85:66:c9:85:e2:99:df:
                    a8:1d:a8:a2:19:e2:ee:1d:97:6d:61:40:6c:bc:7d:
                    96:b8:70:93:bf:5b:f6:ad:c7:35:81:e4:1a:54:7a:
                    7e:03:16:65:35:76:57:d2:61:bd:a9:eb:cd:b7:8d:
                    eb:a9:5f:bb:83:20:54:f0:7c:d1:06:a6:b4:e1:b2:
                    56:da:23:c3:bb:49:37:d2:04:c4:83:d0:2c:3e:d4:
                    64:1a:27:df:a3:88:22:da:dc:66:89:f9:10:4d:13:
                    21:5e:d7:c8:11:f1:fa:8f:81:90:c9:54:89:4b:68:
                    0e:51:ff:c8:f4:a5:db:a2:e9:1f:3a:15:9f:4f:a1:
                    8c:20:2b:86:f4:97:f2:61:be:27:e2:d6:ca:3c:10:
                    81:be:41:cf:9e:d9:85:c2:bf:22:30:e1:64:84:be:
                    7d:2e:65:bf:b7:58:17:08:62:a4:fc:cf:c6:c9:8a:
                    97:f9:c7:6a:95:79:10:82:45:9a:2e:6a:ab:fe:d1:
                    82:b7:11:d4:b7:d3:73:a4:d2:93:09:4d:85:b7:09:
                    31:d5:d7:be:ac:d8:73:69:13:0c:be:5d:ad:8f:05:
                    07:2d:80:a6:c2:b3:6b:ea:11:cb:27:37:a7:56:c3:
                    4f:c9:28:75:37:94:40:80:70:fa:84:8e:de:80:c2:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BA:71:B7:58:A7:82:83:AE:D7:A4:65:2B:9F:14:2D:4C:74:81:E1
            X509v3 Authority Key Identifier:
                keyid:FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/FB55391412BDE10B53428AACB9E329201BF68D11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:0c:ac:29:83:29:f6:37:89:13:ea:f5:8d:18:40:d6:70:
         f9:7f:24:82:4c:f1:d6:8f:cf:ff:0d:56:a5:60:3e:9a:91:d7:
         be:4b:2d:75:66:99:27:aa:36:61:f1:78:a5:17:07:29:f8:3a:
         83:9c:48:97:0a:2e:83:64:f9:cf:3f:b1:ad:e9:3c:88:27:aa:
         84:ae:8e:22:a8:0a:92:f8:b5:02:68:68:ae:43:e2:e6:24:e6:
         cf:82:73:cd:3d:76:f6:5a:ed:8a:a6:a2:f5:3f:67:2e:e9:03:
         b1:db:13:f4:99:ef:63:3f:9e:d1:5f:8a:ea:13:f0:26:b4:db:
         f2:aa:79:5b:1f:00:40:14:a6:de:c0:de:a1:7e:d2:9b:25:4a:
         23:31:9c:39:86:11:39:c3:51:d2:73:48:f9:e2:77:44:ae:95:
         2f:a9:f5:af:6d:4c:d1:a0:b5:87:83:a0:10:a8:27:50:5d:6e:
         17:67:f7:b6:69:00:02:55:82:73:d1:45:9c:8e:b1:7a:76:19:
         35:80:4e:d0:89:74:f3:b2:0b:b1:8b:40:33:4d:e1:ec:89:09:
         51:14:12:3d:67:91:93:10:9e:b5:39:41:b8:cd:51:82:de:b6:
         01:ca:0b:c0:5c:34:21:d0:99:b0:b2:f3:29:76:f8:f4:42:ac:
         51:ac:6c:27
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUpAPmfo2RwNVvh9GIk6MPy8pUEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI1NTM5MTQxMkJERTEwQjUzNDI4QUFDQjlFMzI5MjAx
QkY2OEQxMTAeFw0yNDAyMjgxODM4MDZaFw0yNTAyMjYxODQzMDZaMDMxMTAvBgNV
BAMTKEI1QkE3MUI3NThBNzgyODNBRUQ3QTQ2NTJCOUYxNDJENEM3NDgxRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdY2XuFpvdhWbJheKZ36gdqKIZ
4u4dl21hQGy8fZa4cJO/W/atxzWB5BpUen4DFmU1dlfSYb2p6823jeupX7uDIFTw
fNEGprThslbaI8O7STfSBMSD0Cw+1GQaJ9+jiCLa3GaJ+RBNEyFe18gR8fqPgZDJ
VIlLaA5R/8j0pdui6R86FZ9PoYwgK4b0l/Jhvifi1so8EIG+Qc+e2YXCvyIw4WSE
vn0uZb+3WBcIYqT8z8bJipf5x2qVeRCCRZouaqv+0YK3EdS303Ok0pMJTYW3CTHV
176s2HNpEwy+Xa2PBQctgKbCs2vqEcsnN6dWw0/JKHU3lECAcPqEjt6Awm0bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtbpxt1ingoOu16RlK58ULUx0geEwHwYDVR0j
BBgwFoAU+1U5FBK94QtTQoqsueMpIBv2jREwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDI0OGhvaTdpMTlHUzIyNHZ6QjNQU2J2eHBRODlTaTU1RUhUU1NHWEFM
YWEvMC9GQjU1MzkxNDEyQkRFMTBCNTM0MjhBQUNCOUUzMjkyMDFCRjY4RDExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCNTUzOTE0MTJCREUxMEI1
MzQyOEFBQ0I5RTMyOTIwMUJGNjhEMTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gyNDhob2k3aTE5R1MyMjR2ekIzUFNidnhwUTg5U2k1NUVIVFNTR1hBTGFhLzAv
MzQzNTJlMzIzMzM4MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMzMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7nAwDQYJKoZIhvcNAQELBQADggEBAA/9DKwp
gyn2N4kT6vWNGEDWcPl/JIJM8daPz/8NVqVgPpqR175LLXVmmSeqNmHxeKUXByn4
OoOcSJcKLoNk+c8/sa3pPIgnqoSujiKoCpL4tQJoaK5D4uYk5s+Cc809dvZa7Yqm
ovU/Zy7pA7HbE/SZ72M/ntFfiuoT8Ca02/KqeVsfAEAUpt7A3qF+0pslSiMxnDmG
ETnDUdJzSPnid0SulS+p9a9tTNGgtYeDoBCoJ1Bdbhdn97ZpAAJVgnPRRZyOsXp2
GTWATtCJdPOyC7GLQDNN4eyJCVEUEj1nkZMQnrU5QbjNUYLetgHKC8BcNCHQmbCy
8yl2+PRCrFGsbCc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org