Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32332d3234203d3e20323638383736.roa
File:                     34352e3137312e3132322e302f32332d3234203d3e20323638383736.roa (raw, json)
Hash identifier:          vZqkAfqGxHQC5Xx7+kuXMsLOjPXaTL/NmF4bmtxf04g=
Subject key identifier:   53:0D:A3:43:B1:F8:16:AD:F6:22:8D:72:34:15:59:E6:55:4D:63:5D
Certificate issuer:       /CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
Certificate serial:       1984195F5B3AAE42BDBCC93E1759EA5BC06D1C1D
Authority key identifier: 1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32332d3234203d3e20323638383736.roa
Signing time:             Wed 01 Mar 2023 10:42:57 +0000
ROA not before:           Wed 01 Mar 2023 10:37:57 +0000
ROA not after:            Wed 28 Feb 2024 10:42:57 +0000
asID:                     268876
IP address blocks:        45.171.122.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:84:19:5f:5b:3a:ae:42:bd:bc:c9:3e:17:59:ea:5b:c0:6d:1c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
        Validity
            Not Before: Mar  1 10:37:57 2023 GMT
            Not After : Feb 28 10:42:57 2024 GMT
        Subject: CN=530DA343B1F816ADF6228D72341559E6554D635D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:1b:62:08:ef:8d:29:a0:93:c7:37:63:e8:
                    ca:e4:ec:20:36:23:a0:19:1e:d0:0e:68:7b:95:6a:
                    96:b0:31:b0:dd:f8:9f:5a:ef:28:69:e0:35:38:16:
                    cd:86:f8:eb:47:30:1a:c5:7b:b6:e8:79:64:7d:6d:
                    d5:e5:df:6f:bf:f8:23:2a:0d:5b:bb:76:b5:22:3a:
                    a8:eb:b3:fe:01:8c:a1:e0:67:31:49:c8:69:6e:b6:
                    fe:2d:94:92:74:b2:8e:63:0a:a8:c3:e0:fb:72:58:
                    e3:f1:c0:82:19:06:ed:86:e1:70:76:24:9d:7b:d0:
                    9b:a2:42:b3:d7:0a:4d:2f:66:aa:4c:4d:93:9c:b5:
                    79:dd:64:4b:64:16:e7:35:9d:a6:dd:67:83:47:4b:
                    2c:09:82:12:d1:ce:e6:53:b2:18:1d:00:88:30:77:
                    6d:6a:10:6e:f7:28:0b:3b:19:95:f8:d2:34:03:18:
                    97:a7:25:44:dd:db:d0:6d:aa:09:5c:ab:f9:64:e5:
                    65:72:10:f2:80:a8:86:89:d4:88:4f:42:87:61:44:
                    af:c6:0d:bf:d5:ef:b8:62:0b:fa:c4:55:27:8b:28:
                    fb:a9:45:16:15:d4:65:0c:27:1d:8e:7e:12:af:76:
                    85:9b:27:84:68:87:75:84:82:42:58:20:c4:92:05:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0D:A3:43:B1:F8:16:AD:F6:22:8D:72:34:15:59:E6:55:4D:63:5D
            X509v3 Authority Key Identifier:
                keyid:1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32332d3234203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:04:4c:0f:a4:dc:67:31:3a:fe:d6:17:67:0f:df:3d:8f:13:
         e0:2f:ae:e8:f1:1c:23:41:3b:a6:1f:cf:41:26:ee:75:ea:8d:
         a9:b8:66:a5:bc:a8:ef:87:46:0f:84:b3:ca:55:b1:30:67:69:
         4c:36:68:ad:35:cd:22:cb:9e:70:63:7c:0f:2d:23:83:dc:a7:
         72:7a:d2:a4:50:6d:53:e5:65:0a:7d:8f:8f:1c:42:3c:b4:19:
         ec:b0:fc:66:f3:0e:9c:b6:63:0d:96:38:9c:fa:da:62:b7:83:
         97:5d:5a:e4:4b:56:a7:3c:0f:b7:00:04:14:2b:1d:57:f5:54:
         ca:6f:f9:f9:bf:32:21:07:f5:46:be:dc:44:e9:ca:6d:57:5e:
         45:fc:0d:01:6d:25:93:f8:e4:04:ad:7b:26:6a:2a:e8:d8:25:
         54:0c:d3:b5:18:51:92:fb:59:52:57:50:a8:7e:eb:2e:47:75:
         9b:41:70:36:05:ee:50:4e:78:0e:64:5e:6c:e5:87:bb:e9:09:
         3c:b4:6f:39:16:42:47:26:b9:83:b8:8c:88:af:8c:c5:73:46:
         bd:55:e2:ab:96:8b:bc:c2:f8:82:ff:86:83:68:21:5f:95:c7:
         44:96:67:0d:c3:86:ef:62:24:38:35:8b:6e:8d:5b:f2:88:2d:
         ad:86:fc:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGYQZX1s6rkK9vMk+F1nqW8BtHB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVFNDBEREZCMTIyQTU0OThEQjgwQkZGMUFCNkY1NTMx
MTUxQ0U1RDAeFw0yMzAzMDExMDM3NTdaFw0yNDAyMjgxMDQyNTdaMDMxMTAvBgNV
BAMTKDUzMERBMzQzQjFGODE2QURGNjIyOEQ3MjM0MTU1OUU2NTU0RDYzNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDhtiCO+NKaCTxzdj6Mrk7CA2
I6AZHtAOaHuVapawMbDd+J9a7yhp4DU4Fs2G+OtHMBrFe7boeWR9bdXl32+/+CMq
DVu7drUiOqjrs/4BjKHgZzFJyGlutv4tlJJ0so5jCqjD4PtyWOPxwIIZBu2G4XB2
JJ170JuiQrPXCk0vZqpMTZOctXndZEtkFuc1nabdZ4NHSywJghLRzuZTshgdAIgw
d21qEG73KAs7GZX40jQDGJenJUTd29Btqglcq/lk5WVyEPKAqIaJ1IhPQodhRK/G
Db/V77hiC/rEVSeLKPupRRYV1GUMJx2OfhKvdoWbJ4Roh3WEgkJYIMSSBVKjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUw2jQ7H4Fq32Io1yNBVZ5lVNY10wHwYDVR0j
BBgwFoAUHuQN37EipUmNuAv/Grb1UxFRzl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDJITk5GVlNTbkNtNDZqODJ5QWFVREFkRHZpMXl5Qkw1cXJacFNHcnJu
RXYvMC8xRUU0MERERkIxMjJBNTQ5OERCODBCRkYxQUI2RjU1MzExNTFDRTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRTQwRERGQjEyMkE1NDk4
REI4MEJGRjFBQjZGNTUzMTE1MUNFNUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gySE5ORlZTU25DbTQ2ajgyeUFhVURBZER2aTF5eUJMNXFyWnBTR3JybkV2LzAv
MzQzNTJlMzEzNzMxMmUzMTMyMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzgzODM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtq3owDQYJKoZIhvcNAQELBQADggEBAMEETA+k
3GcxOv7WF2cP3z2PE+AvrujxHCNBO6Yfz0Em7nXqjam4ZqW8qO+HRg+Es8pVsTBn
aUw2aK01zSLLnnBjfA8tI4Pcp3J60qRQbVPlZQp9j48cQjy0Geyw/GbzDpy2Yw2W
OJz62mK3g5ddWuRLVqc8D7cABBQrHVf1VMpv+fm/MiEH9Ua+3ETpym1XXkX8DQFt
JZP45ASteyZqKujYJVQM07UYUZL7WVJXUKh+6y5HdZtBcDYF7lBOeA5kXmzlh7vp
CTy0bzkWQkcmuYO4jIivjMVzRr1V4quWi7zC+IL/hoNoIV+Vx0SWZw3Dhu9iJDg1
i26NW/KILa2G/Go=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org