Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233382e302f32332d3233203d3e20323639313934.roa
File:                     34352e3137392e3233382e302f32332d3233203d3e20323639313934.roa (raw, json)
Hash identifier:          anGvKznpyXbrobx6pQoN6af5SEbW5wU9QpMOMC7FI8o=
Subject key identifier:   66:7B:EE:28:4F:0C:76:02:AF:92:14:25:BA:CF:72:15:32:04:0C:44
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       248B2415DA209AB085DBB3805860FA93B0A38C19
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233382e302f32332d3233203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:43 +0000
ROA not before:           Sat 29 Jul 2023 16:21:43 +0000
ROA not after:            Sat 27 Jul 2024 16:26:43 +0000
asID:                     269194
IP address blocks:        45.179.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8b:24:15:da:20:9a:b0:85:db:b3:80:58:60:fa:93:b0:a3:8c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:43 2023 GMT
            Not After : Jul 27 16:26:43 2024 GMT
        Subject: CN=667BEE284F0C7602AF921425BACF721532040C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ac:e2:a0:3b:bd:72:31:6b:2d:be:63:45:df:
                    9c:fa:28:23:a9:a9:9b:35:29:2e:93:34:8b:4b:e2:
                    1d:61:be:0c:c8:9e:1b:52:58:9a:a3:63:a9:42:07:
                    21:db:85:7a:8e:ed:a0:3c:aa:98:d2:ca:17:a1:ed:
                    d3:43:95:6a:80:06:43:c2:b2:0a:69:9f:c3:bd:e5:
                    0d:f4:95:8d:28:d0:f9:0f:1c:5e:02:bb:e1:cc:28:
                    62:c6:27:ee:7a:1d:d3:b5:9f:85:3e:9d:c8:0c:a8:
                    07:0e:75:c3:32:7f:1e:e7:7b:39:5d:67:11:f8:e9:
                    f1:45:5a:4e:10:c6:2d:1a:0a:b0:3f:e2:36:d4:f3:
                    69:38:7d:d2:51:dc:35:96:5f:3c:75:55:62:d4:61:
                    50:bc:e5:4d:76:d4:bf:c2:fb:38:de:33:26:43:4e:
                    e0:eb:ab:ac:29:cb:e5:3d:aa:22:37:35:5b:7d:1f:
                    d3:17:e8:0c:25:d3:00:84:f0:04:f6:ac:d5:b5:98:
                    44:22:ca:59:87:71:b4:25:5a:55:87:e8:21:8b:f8:
                    9d:47:63:bf:20:a9:9d:e8:55:a9:ff:75:69:18:a8:
                    f3:9a:66:a2:c4:e3:02:a5:b2:3c:e4:a0:11:8f:bf:
                    d3:20:d0:b2:60:98:44:67:9a:2b:14:b3:06:e4:77:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7B:EE:28:4F:0C:76:02:AF:92:14:25:BA:CF:72:15:32:04:0C:44
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233382e302f32332d3233203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:a6:85:17:24:ba:65:f3:55:4c:7e:8f:b4:8c:6b:2d:94:64:
         a4:95:cb:bd:2c:e5:96:88:2d:06:94:a7:90:93:9d:1c:78:11:
         1f:9a:85:e4:e6:d4:be:f5:60:94:9c:a1:4f:3c:56:d9:8d:10:
         22:c3:8b:69:4b:ff:86:99:d5:72:50:f3:c4:0c:53:37:07:8c:
         6d:d0:71:e2:38:16:29:b5:18:4c:9e:46:28:ca:5a:3d:0a:ea:
         ab:26:f5:60:01:f6:19:98:cd:97:9a:38:31:3f:8f:67:d2:ef:
         58:ea:25:81:5a:c3:c7:08:3a:82:6f:0a:ab:16:74:63:28:55:
         25:dd:a4:f6:9c:2f:c3:89:c7:c1:30:61:d2:47:fa:c8:db:9c:
         ec:fa:2f:42:78:e7:6a:36:df:dd:30:0b:95:29:12:66:28:ac:
         1f:da:ed:cb:e1:fd:7b:1a:4b:11:f0:c3:d3:b1:43:f3:af:3f:
         8b:9c:e7:33:d9:f0:f3:e9:1e:5e:d9:02:10:e2:ec:d1:ce:c7:
         4d:5f:7c:b0:be:ef:cf:26:c2:b0:59:6b:8a:b5:14:70:7e:56:
         12:d4:0f:6a:14:e2:0d:35:a3:50:09:44:7f:ff:05:e0:b2:14:
         40:32:06:43:bc:ef:14:f8:32:92:32:19:f6:22:c0:99:6f:fc:
         16:8f:ab:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJIskFdogmrCF27OAWGD6k7CjjBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yMzA3MjkxNjIxNDNaFw0yNDA3MjcxNjI2NDNaMDMxMTAvBgNV
BAMTKDY2N0JFRTI4NEYwQzc2MDJBRjkyMTQyNUJBQ0Y3MjE1MzIwNDBDNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdrOKgO71yMWstvmNF35z6KCOp
qZs1KS6TNItL4h1hvgzInhtSWJqjY6lCByHbhXqO7aA8qpjSyheh7dNDlWqABkPC
sgppn8O95Q30lY0o0PkPHF4Cu+HMKGLGJ+56HdO1n4U+ncgMqAcOdcMyfx7nezld
ZxH46fFFWk4Qxi0aCrA/4jbU82k4fdJR3DWWXzx1VWLUYVC85U121L/C+zjeMyZD
TuDrq6wpy+U9qiI3NVt9H9MX6Awl0wCE8AT2rNW1mEQiylmHcbQlWlWH6CGL+J1H
Y78gqZ3oVan/dWkYqPOaZqLE4wKlsjzkoBGPv9Mg0LJgmERnmisUswbkd7LLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZnvuKE8MdgKvkhQlus9yFTIEDEQwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzQzNTJlMzEzNzM5MmUzMjMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEts+4wDQYJKoZIhvcNAQELBQADggEBALumhRck
umXzVUx+j7SMay2UZKSVy70s5ZaILQaUp5CTnRx4ER+aheTm1L71YJScoU88VtmN
ECLDi2lL/4aZ1XJQ88QMUzcHjG3QceI4Fim1GEyeRijKWj0K6qsm9WAB9hmYzZea
ODE/j2fS71jqJYFaw8cIOoJvCqsWdGMoVSXdpPacL8OJx8EwYdJH+sjbnOz6L0J4
52o2390wC5UpEmYorB/a7cvh/XsaSxHww9OxQ/OvP4uc5zPZ8PPpHl7ZAhDi7NHO
x01ffLC+788mwrBZa4q1FHB+VhLUD2oU4g01o1AJRH//BeCyFEAyBkO87xT4MpIy
GfYiwJlv/BaPq1g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org