Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/34352e372e3130302e302f32322d3234203d3e20323636353833.roa
File:                     34352e372e3130302e302f32322d3234203d3e20323636353833.roa (raw, json)
Hash identifier:          CS/vxbVtMEVuD22NvVSF13mKy/+YoASLacSQgW/nIlk=
Subject key identifier:   9C:6F:05:0C:C4:41:C7:89:9F:00:E9:4C:87:91:DE:4A:C2:43:FD:AC
Certificate issuer:       /CN=0BE63AC889C355E150DB71F2874FAD6A623AC0D9
Certificate serial:       49A54FD8F9591FDC9927EB4999FB0438E20C92EC
Authority key identifier: 0B:E6:3A:C8:89:C3:55:E1:50:DB:71:F2:87:4F:AD:6A:62:3A:C0:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BE63AC889C355E150DB71F2874FAD6A623AC0D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/34352e372e3130302e302f32322d3234203d3e20323636353833.roa
Signing time:             Thu 14 Sep 2023 21:00:06 +0000
ROA not before:           Thu 14 Sep 2023 20:55:06 +0000
ROA not after:            Thu 12 Sep 2024 21:00:06 +0000
asID:                     266583
IP address blocks:        45.7.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a5:4f:d8:f9:59:1f:dc:99:27:eb:49:99:fb:04:38:e2:0c:92:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BE63AC889C355E150DB71F2874FAD6A623AC0D9
        Validity
            Not Before: Sep 14 20:55:06 2023 GMT
            Not After : Sep 12 21:00:06 2024 GMT
        Subject: CN=9C6F050CC441C7899F00E94C8791DE4AC243FDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cc:79:e5:d8:a6:23:cc:5a:94:f5:2a:95:02:
                    ba:8c:b1:85:db:96:80:e9:61:13:4c:7f:ef:d2:c9:
                    e4:11:6c:a7:40:4f:5e:ea:e3:47:37:ed:1e:5a:2d:
                    93:ea:11:7d:b7:3e:46:81:92:14:db:0e:1b:c4:59:
                    87:4a:d7:24:68:b6:a5:f2:78:d5:41:81:b1:38:e9:
                    d9:72:43:68:9c:18:6d:76:38:ea:2a:f1:ea:01:d6:
                    7a:03:87:cf:e9:46:d4:0b:25:cc:da:ef:dc:75:bc:
                    1d:ee:8d:4d:11:c0:83:62:bb:11:d6:63:ac:78:71:
                    fd:bb:9c:c7:a7:2c:2e:84:f7:7d:24:ea:82:f7:e0:
                    5c:c9:47:7c:09:9f:fd:67:bb:7c:10:03:08:ca:23:
                    70:1e:e4:cc:59:de:ca:b8:a5:53:26:54:54:a8:d5:
                    ce:d4:52:dc:1c:ea:82:dc:90:8b:0e:38:d7:26:d4:
                    f6:62:83:c7:eb:c5:bb:35:6d:de:33:49:34:35:56:
                    a5:b9:e3:03:29:d3:7a:46:52:86:de:b3:3c:2b:ba:
                    ed:11:d9:c8:6e:d0:d6:72:8e:5f:45:9b:c3:79:21:
                    11:36:02:ba:c6:65:b0:0d:8e:d8:99:f1:c9:b5:c6:
                    69:10:ad:ea:4d:d5:a4:7a:e2:1a:60:0b:70:c4:c2:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6F:05:0C:C4:41:C7:89:9F:00:E9:4C:87:91:DE:4A:C2:43:FD:AC
            X509v3 Authority Key Identifier:
                keyid:0B:E6:3A:C8:89:C3:55:E1:50:DB:71:F2:87:4F:AD:6A:62:3A:C0:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/0BE63AC889C355E150DB71F2874FAD6A623AC0D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BE63AC889C355E150DB71F2874FAD6A623AC0D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/34352e372e3130302e302f32322d3234203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:3a:c0:7a:4f:30:88:df:b8:39:f2:76:5c:d0:61:5a:b9:bc:
         74:a6:c6:0e:b4:01:b2:22:f1:18:09:54:29:db:27:30:9b:1d:
         4a:f4:95:7f:30:6f:cc:6d:85:af:64:81:10:8d:85:98:b3:8a:
         fd:75:72:46:82:ab:fa:16:5a:ec:09:36:ac:77:84:75:c2:2d:
         a6:e4:6f:ac:b3:d2:c2:66:2c:c8:90:0e:35:6b:5d:c7:0a:bd:
         83:a9:bb:44:f9:7e:af:28:32:6c:e7:47:a0:2b:bd:0c:d2:e5:
         95:0d:4a:9d:c0:e9:d7:da:7a:57:53:aa:4d:25:ca:60:54:99:
         88:d2:ba:60:0b:03:77:df:2a:dc:da:b1:05:ae:3b:ed:24:d1:
         40:32:92:da:f2:3f:1d:c7:11:a0:2e:11:3d:6c:71:c4:32:88:
         f6:aa:72:6d:d8:20:e9:e6:8e:f8:e4:0c:c9:3b:cc:e9:cf:6b:
         a9:34:9e:f8:fb:98:20:f2:e6:ab:a0:6a:a4:0b:72:03:ac:6b:
         b0:16:0c:59:fc:98:7a:3d:8b:24:48:a5:52:5e:99:8e:9a:f3:
         6c:b5:f9:63:f2:38:77:c8:60:de:f4:a5:7f:ac:b4:c1:71:14:
         ce:f9:d0:a1:6e:39:58:8b:e0:dc:c5:05:9b:25:c2:52:40:a2:
         20:87:4e:f1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSaVP2PlZH9yZJ+tJmfsEOOIMkuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJFNjNBQzg4OUMzNTVFMTUwREI3MUYyODc0RkFENkE2
MjNBQzBEOTAeFw0yMzA5MTQyMDU1MDZaFw0yNDA5MTIyMTAwMDZaMDMxMTAvBgNV
BAMTKDlDNkYwNTBDQzQ0MUM3ODk5RjAwRTk0Qzg3OTFERTRBQzI0M0ZEQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuzHnl2KYjzFqU9SqVArqMsYXb
loDpYRNMf+/SyeQRbKdAT17q40c37R5aLZPqEX23PkaBkhTbDhvEWYdK1yRotqXy
eNVBgbE46dlyQ2icGG12OOoq8eoB1noDh8/pRtQLJcza79x1vB3ujU0RwINiuxHW
Y6x4cf27nMenLC6E930k6oL34FzJR3wJn/1nu3wQAwjKI3Ae5MxZ3sq4pVMmVFSo
1c7UUtwc6oLckIsOONcm1PZig8frxbs1bd4zSTQ1VqW54wMp03pGUobeszwruu0R
2chu0NZyjl9Fm8N5IRE2ArrGZbANjtiZ8cm1xmkQrepN1aR64hpgC3DEwsaxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUnG8FDMRBx4mfAOlMh5HeSsJD/awwHwYDVR0j
BBgwFoAUC+Y6yInDVeFQ23Hyh0+tamI6wNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVEbkxINkRzR0Z4ZWFTR1dWeTVOWkZQTkNIYXlDZjhzN0pIaWtXZkt1
QXAvMC8wQkU2M0FDODg5QzM1NUUxNTBEQjcxRjI4NzRGQUQ2QTYyM0FDMEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBCRTYzQUM4ODlDMzU1RTE1
MERCNzFGMjg3NEZBRDZBNjIzQUMwRDkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1RG5MSDZEc0dGeGVhU0dXVnk1TlpGUE5DSGF5Q2Y4czdKSGlrV2ZLdUFwLzAv
MzQzNTJlMzcyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM1
MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0HZDANBgkqhkiG9w0BAQsFAAOCAQEAXjrAek8wiN+4
OfJ2XNBhWrm8dKbGDrQBsiLxGAlUKdsnMJsdSvSVfzBvzG2Fr2SBEI2FmLOK/XVy
RoKr+hZa7Ak2rHeEdcItpuRvrLPSwmYsyJAONWtdxwq9g6m7RPl+rygybOdHoCu9
DNLllQ1KncDp19p6V1OqTSXKYFSZiNK6YAsDd98q3NqxBa477STRQDKS2vI/HccR
oC4RPWxxxDKI9qpybdgg6eaO+OQMyTvM6c9rqTSe+PuYIPLmq6BqpAtyA6xrsBYM
WfyYej2LJEilUl6ZjprzbLX5Y/I4d8hg3vSlf6y0wXEUzvnQoW45WIvg3MUFmyXC
UkCiIIdO8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org