Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131342e302f32332d3233203d3e20323638333331.roa
File:                     34352e3233382e3131342e302f32332d3233203d3e20323638333331.roa (raw, json)
Hash identifier:          ddJ5617tMnj7d6wK7vXtG4jg+hBlI0udHfurbpndCqM=
Subject key identifier:   6E:45:4F:58:C4:08:42:DB:92:C8:78:17:0F:59:EF:B7:5F:5D:BF:4B
Certificate issuer:       /CN=FB55391412BDE10B53428AACB9E329201BF68D11
Certificate serial:       4A442F006D9B3512323EA898661730C1C90ED64D
Authority key identifier: FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131342e302f32332d3233203d3e20323638333331.roa
Signing time:             Wed 28 Feb 2024 18:43:06 +0000
ROA not before:           Wed 28 Feb 2024 18:38:06 +0000
ROA not after:            Wed 26 Feb 2025 18:43:06 +0000
asID:                     268331
IP address blocks:        45.238.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:44:2f:00:6d:9b:35:12:32:3e:a8:98:66:17:30:c1:c9:0e:d6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB55391412BDE10B53428AACB9E329201BF68D11
        Validity
            Not Before: Feb 28 18:38:06 2024 GMT
            Not After : Feb 26 18:43:06 2025 GMT
        Subject: CN=6E454F58C40842DB92C878170F59EFB75F5DBF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:e8:8e:bc:ea:8e:42:93:2c:ca:36:01:d1:
                    b3:e8:7a:39:14:72:a5:9d:e4:bc:5f:9d:9e:16:d0:
                    2f:d2:90:ab:f1:aa:bd:a7:e3:36:8f:df:b4:b6:a6:
                    e2:41:b8:1d:2b:ef:fd:a8:a1:8f:bf:e7:21:4c:7e:
                    4a:8e:9e:3a:3c:bd:56:ce:c5:e1:18:ed:a0:b9:fb:
                    ea:e3:66:2c:2a:d4:74:e9:df:27:aa:42:79:94:45:
                    15:bd:6b:e7:44:ba:d6:20:37:14:4f:51:b4:90:51:
                    57:fb:7e:2b:61:b9:09:08:4c:df:57:3c:c3:e7:87:
                    aa:c6:1e:d1:40:4f:6e:1a:90:3c:47:5e:2e:56:1d:
                    61:57:e5:cb:fe:e9:42:73:11:55:69:db:1d:14:a8:
                    74:06:58:31:1e:dc:fb:ab:e0:b1:82:14:93:aa:d9:
                    0d:60:2e:76:f2:77:33:b0:3d:59:32:36:63:d4:76:
                    2f:99:3c:41:cc:93:0b:1d:57:20:c6:2c:da:13:0a:
                    f8:61:89:42:41:68:6e:78:dd:40:ef:c3:c7:a6:a1:
                    55:21:68:83:cc:ee:cf:0c:68:27:72:31:19:5f:35:
                    d7:fc:f6:a6:66:d8:05:a9:57:34:8b:d1:d8:48:7a:
                    40:31:54:c0:03:36:d9:74:bb:5b:06:3d:e2:15:dd:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:4F:58:C4:08:42:DB:92:C8:78:17:0F:59:EF:B7:5F:5D:BF:4B
            X509v3 Authority Key Identifier:
                keyid:FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/FB55391412BDE10B53428AACB9E329201BF68D11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131342e302f32332d3233203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:68:84:df:3d:5b:36:16:96:77:88:3e:77:1c:6d:ce:d2:5f:
         b9:49:68:18:59:2d:d1:4d:7d:3d:ac:26:dd:62:d2:1f:57:e3:
         17:7a:b3:ef:b4:a1:dc:d4:55:b8:c6:ea:76:db:de:82:dc:c0:
         ec:be:b5:43:cc:73:23:08:d2:c2:39:1f:33:8a:8b:77:26:04:
         63:bd:74:46:ca:a8:9c:48:42:16:df:b3:da:2d:f8:67:f5:de:
         85:0c:7a:13:a5:3c:26:d1:e0:9e:e9:e1:90:86:b0:0b:30:86:
         c7:54:48:5c:b4:31:ab:3e:0b:bf:ac:78:48:38:8b:14:43:b3:
         20:0e:d5:2f:ef:de:0f:3b:2e:8f:3c:f3:ff:ab:e2:e3:3b:3c:
         67:d2:35:a9:a7:e0:0c:04:4c:8c:35:f8:1f:b6:6f:27:b6:1b:
         53:ff:4a:28:09:cd:5d:fb:ae:e0:41:17:b6:c6:a0:ff:58:59:
         37:0e:34:fb:ba:a3:5d:93:1d:f4:e0:11:da:12:0f:a7:55:e5:
         4c:7e:f0:69:7f:f9:8c:50:2c:ce:5b:51:0e:f7:ee:3f:40:43:
         da:d0:f1:bd:68:ff:33:34:85:e4:18:f2:f7:d7:1a:1c:37:da:
         7c:8a:7c:c0:b3:80:49:3f:c0:d7:98:44:4d:81:32:6a:90:e0:
         28:be:d2:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSkQvAG2bNRIyPqiYZhcwwckO1k0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI1NTM5MTQxMkJERTEwQjUzNDI4QUFDQjlFMzI5MjAx
QkY2OEQxMTAeFw0yNDAyMjgxODM4MDZaFw0yNTAyMjYxODQzMDZaMDMxMTAvBgNV
BAMTKDZFNDU0RjU4QzQwODQyREI5MkM4NzgxNzBGNTlFRkI3NUY1REJGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcRuiOvOqOQpMsyjYB0bPoejkU
cqWd5LxfnZ4W0C/SkKvxqr2n4zaP37S2puJBuB0r7/2ooY+/5yFMfkqOnjo8vVbO
xeEY7aC5++rjZiwq1HTp3yeqQnmURRW9a+dEutYgNxRPUbSQUVf7fithuQkITN9X
PMPnh6rGHtFAT24akDxHXi5WHWFX5cv+6UJzEVVp2x0UqHQGWDEe3Pur4LGCFJOq
2Q1gLnbydzOwPVkyNmPUdi+ZPEHMkwsdVyDGLNoTCvhhiUJBaG543UDvw8emoVUh
aIPM7s8MaCdyMRlfNdf89qZm2AWpVzSL0dhIekAxVMADNtl0u1sGPeIV3ThDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbkVPWMQIQtuSyHgXD1nvt19dv0swHwYDVR0j
BBgwFoAU+1U5FBK94QtTQoqsueMpIBv2jREwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDI0OGhvaTdpMTlHUzIyNHZ6QjNQU2J2eHBRODlTaTU1RUhUU1NHWEFM
YWEvMC9GQjU1MzkxNDEyQkRFMTBCNTM0MjhBQUNCOUUzMjkyMDFCRjY4RDExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCNTUzOTE0MTJCREUxMEI1
MzQyOEFBQ0I5RTMyOTIwMUJGNjhEMTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gyNDhob2k3aTE5R1MyMjR2ekIzUFNidnhwUTg5U2k1NUVIVFNTR1hBTGFhLzAv
MzQzNTJlMzIzMzM4MmUzMTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMzMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7nIwDQYJKoZIhvcNAQELBQADggEBAGNohN89
WzYWlneIPnccbc7SX7lJaBhZLdFNfT2sJt1i0h9X4xd6s++0odzUVbjG6nbb3oLc
wOy+tUPMcyMI0sI5HzOKi3cmBGO9dEbKqJxIQhbfs9ot+Gf13oUMehOlPCbR4J7p
4ZCGsAswhsdUSFy0Mas+C7+seEg4ixRDsyAO1S/v3g87Lo888/+r4uM7PGfSNamn
4AwETIw1+B+2bye2G1P/SigJzV37ruBBF7bGoP9YWTcONPu6o12THfTgEdoSD6dV
5Ux+8Gl/+YxQLM5bUQ737j9AQ9rQ8b1o/zM0heQY8vfXGhw32nyKfMCzgEk/wNeY
RE2BMmqQ4Ci+0jA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org