Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231322e302f32322d3232203d3e20323638353634.roa
File:                     34352e3136322e3231322e302f32322d3232203d3e20323638353634.roa (raw, json)
Hash identifier:          MS8gA5GvmQTtvCrbDQovXCa5bIcn/0nux19bqZDFu04=
Subject key identifier:   75:9B:2F:5E:81:02:45:24:6C:6B:FC:86:3A:F2:62:20:58:67:AF:70
Certificate issuer:       /CN=FA5DD4A99CE33D3AE72F86A394621F08627407D3
Certificate serial:       0E35E5463715B509DF28F13DF582533A48A7BE4E
Authority key identifier: FA:5D:D4:A9:9C:E3:3D:3A:E7:2F:86:A3:94:62:1F:08:62:74:07:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231322e302f32322d3232203d3e20323638353634.roa
Signing time:             Fri 22 Mar 2024 17:00:02 +0000
ROA not before:           Fri 22 Mar 2024 16:55:02 +0000
ROA not after:            Sat 22 Mar 2025 17:00:02 +0000
asID:                     268564
IP address blocks:        45.162.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:35:e5:46:37:15:b5:09:df:28:f1:3d:f5:82:53:3a:48:a7:be:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5DD4A99CE33D3AE72F86A394621F08627407D3
        Validity
            Not Before: Mar 22 16:55:02 2024 GMT
            Not After : Mar 22 17:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:61:c2:62:9b:a5:b5:60:d0:b2:15:d6:25:
                    95:1a:3c:f8:07:fb:61:68:3c:d6:29:9b:c1:c0:c2:
                    8e:75:7b:7f:39:ef:4b:9c:64:c2:0c:a3:bc:23:75:
                    fd:b6:50:01:47:0f:55:87:7c:3e:da:bc:b4:1e:8f:
                    fe:e9:8e:34:ad:ce:72:7d:28:d2:da:43:17:b3:b2:
                    5a:38:2c:97:57:19:85:50:62:38:8f:19:69:cc:a9:
                    0e:0c:5b:59:a6:22:af:3b:0b:d5:c4:56:f6:6d:84:
                    f0:14:fb:47:76:69:ed:f7:da:ec:e0:40:25:2f:66:
                    d6:59:4d:84:d9:a6:b2:41:ed:e2:51:39:ce:a7:76:
                    c8:56:47:82:ad:1e:f2:7f:41:71:d8:cf:bc:78:05:
                    63:10:e4:4b:53:a8:c7:bf:07:85:8d:e3:9e:48:13:
                    1c:9c:e1:e5:f3:ef:10:bb:4d:b0:c1:dd:9a:48:54:
                    e3:82:57:26:03:8b:3a:87:f0:b1:26:15:d0:94:06:
                    3e:43:fe:8c:4a:7c:74:c5:e9:55:72:75:fc:8c:da:
                    d9:d9:f8:f2:2c:cd:d9:1d:bf:59:2d:3f:e7:6c:3b:
                    7b:86:2a:72:c6:c6:cf:e0:0f:9e:f1:fb:f3:91:b6:
                    2b:39:06:3b:01:5e:21:7f:99:36:43:2d:59:a1:e8:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:2F:5E:81:02:45:24:6C:6B:FC:86:3A:F2:62:20:58:67:AF:70
            X509v3 Authority Key Identifier:
                keyid:FA:5D:D4:A9:9C:E3:3D:3A:E7:2F:86:A3:94:62:1F:08:62:74:07:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231322e302f32322d3232203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:bb:46:40:95:21:cb:c4:eb:0f:1c:bf:ea:90:df:16:89:8b:
         dd:21:79:65:4e:29:3c:32:d1:78:8a:77:88:cc:2a:7c:a4:3b:
         fb:7b:f5:40:cf:57:e8:13:08:ef:11:39:f3:65:13:58:18:5d:
         54:27:67:2d:fe:ff:ba:23:74:a4:d6:5f:a1:50:23:a1:01:c2:
         fb:45:0e:67:45:ab:6d:9b:34:24:66:0a:0f:11:ed:c0:d4:d9:
         6a:b5:66:d4:0f:59:a0:97:43:93:91:42:05:da:eb:f5:d3:11:
         14:fc:4d:a8:8d:4c:3c:ae:2b:27:5f:1d:2d:06:22:19:51:9e:
         52:16:9d:7a:ea:ba:35:28:94:f8:e4:3f:3a:7c:25:08:b5:32:
         7c:e5:a7:c1:c1:5b:5e:54:d1:a7:8a:f9:cc:b9:5a:42:1d:cf:
         2a:5e:df:7c:56:bc:ef:2d:46:74:48:6b:b9:92:33:9f:d0:13:
         23:14:cc:18:fd:e7:ae:3c:16:ae:c5:13:9e:24:a3:69:34:2c:
         68:b0:52:a3:15:48:fa:27:bf:b5:c9:08:e1:35:3d:10:66:f1:
         fb:65:90:4f:d2:f9:4d:4c:51:09:19:a2:6d:e7:79:93:ee:c5:
         89:a4:a8:98:e8:15:cf:2e:cb:c5:7e:cc:92:a4:b1:38:0e:de:
         fc:4c:4e:be
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDjXlRjcVtQnfKPE99YJTOkinvk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1REQ0QTk5Q0UzM0QzQUU3MkY4NkEzOTQ2MjFGMDg2
Mjc0MDdEMzAeFw0yNDAzMjIxNjU1MDJaFw0yNTAzMjIxNzAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY3MDYxQzI2MjlCQTVCNTYw
RDBCMjE1RDYyNTk1MUEzQ0Y4MDdGQjYxNjgzQ0Q2Mjk5QkMxQzBDMjhFNzU3QjdG
MzlFRjRCOUM2NEMyMENBM0JDMjM3NUZEQjY1MDAxNDcwRjU1ODc3QzNFREFCQ0I0
MUU4RkZFRTk4RTM0QURDRTcyN0QyOEQyREE0MzE3QjNCMjVBMzgyQzk3NTcxOTg1
NTA2MjM4OEYxOTY5Q0NBOTBFMEM1QjU5QTYyMkFGM0IwQkQ1QzQ1NkY2NkQ4NEYw
MTRGQjQ3NzY2OUVERjdEQUVDRTA0MDI1MkY2NkQ2NTk0RDg0RDlBNkIyNDFFREUy
NTEzOUNFQTc3NkM4NTY0NzgyQUQxRUYyN0Y0MTcxRDhDRkJDNzgwNTYzMTBFNDRC
NTNBOEM3QkYwNzg1OERFMzlFNDgxMzFDOUNFMUU1RjNFRjEwQkI0REIwQzFERDlB
NDg1NEUzODI1NzI2MDM4QjNBODdGMEIxMjYxNUQwOTQwNjNFNDNGRThDNEE3Qzc0
QzVFOTU1NzI3NUZDOENEQUQ5RDlGOEYyMkNDREQ5MURCRjU5MkQzRkU3NkMzQjdC
ODYyQTcyQzZDNkNGRTAwRjlFRjFGQkYzOTFCNjJCMzkwNjNCMDE1RTIxN0Y5OTM2
NDMyRDU5QTFFODZFQ0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtnBhwmKbpbVg0LIV1iWVGjz4B/thaDzWKZvBwMKOdXt/Oe9LnGTC
DKO8I3X9tlABRw9Vh3w+2ry0Ho/+6Y40rc5yfSjS2kMXs7JaOCyXVxmFUGI4jxlp
zKkODFtZpiKvOwvVxFb2bYTwFPtHdmnt99rs4EAlL2bWWU2E2aayQe3iUTnOp3bI
VkeCrR7yf0Fx2M+8eAVjEORLU6jHvweFjeOeSBMcnOHl8+8Qu02wwd2aSFTjglcm
A4s6h/CxJhXQlAY+Q/6MSnx0xelVcnX8jNrZ2fjyLM3ZHb9ZLT/nbDt7hipyxsbP
4A+e8fvzkbYrOQY7AV4hf5k2Qy1ZoehuzQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHWbL16BAkUkbGv8hjryYiBYZ69wMB8GA1UdIwQYMBaAFPpd1Kmc4z065y+Go5Ri
HwhidAfTMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g0TFhVY2RZU2Q2N2k3
b0N5SnBWVEhVMWZ5QjU5SkttaHU5MlRqcDFnaGFuLzAvRkE1REQ0QTk5Q0UzM0Qz
QUU3MkY4NkEzOTQ2MjFGMDg2Mjc0MDdEMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GQTVERDRBOTlDRTMzRDNBRTcyRjg2QTM5NDYyMUYwODYyNzQw
N0QzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9INExYVWNkWVNkNjdpN29DeUpw
VlRIVTFmeUI1OUpLbWh1OTJUanAxZ2hhbi8wLzM0MzUyZTMxMzYzMjJlMzIzMTMy
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4MzUzNjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LaLUMA0GCSqGSIb3DQEBCwUAA4IBAQBCu0ZAlSHLxOsPHL/qkN8WiYvdIXllTik8
MtF4ineIzCp8pDv7e/VAz1foEwjvETnzZRNYGF1UJ2ct/v+6I3Sk1l+hUCOhAcL7
RQ5nRattmzQkZgoPEe3A1NlqtWbUD1mgl0OTkUIF2uv10xEU/E2ojUw8risnXx0t
BiIZUZ5SFp166ro1KJT45D86fCUItTJ85afBwVteVNGnivnMuVpCHc8qXt98Vrzv
LUZ0SGu5kjOf0BMjFMwY/eeuPBauxROeJKNpNCxosFKjFUj6J7+1yQjhNT0QZvH7
ZZBP0vlNTFEJGaJt53mT7sWJpKiY6BXPLsvFfsySpLE4Dt78TE6+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org