Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132302e302f32322d3332203d3e20323639303936.roa
File:                     34352e3138352e3132302e302f32322d3332203d3e20323639303936.roa (raw, json)
Hash identifier:          +pVOfqjJrPSZ5dpJVrnhHzS3lkjjrtvrbng4xbL7f9w=
Subject key identifier:   C8:DE:3F:79:B0:3C:72:33:82:70:62:FC:83:45:EF:30:D5:AC:0D:0C
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       4758AEC8DB39266A9ED685CACBE87D043389BBE5
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132302e302f32322d3332203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 16:48:12 +0000
ROA not before:           Wed 05 Apr 2023 16:43:12 +0000
ROA not after:            Wed 03 Apr 2024 16:48:12 +0000
asID:                     269096
IP address blocks:        45.185.120.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:58:ae:c8:db:39:26:6a:9e:d6:85:ca:cb:e8:7d:04:33:89:bb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 16:43:12 2023 GMT
            Not After : Apr  3 16:48:12 2024 GMT
        Subject: CN=C8DE3F79B03C7233827062FC8345EF30D5AC0D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:9a:2c:4f:ae:74:58:83:d9:1b:f2:a8:de:
                    04:82:e8:df:53:68:74:8b:dd:ad:de:5a:ef:92:62:
                    e9:14:11:27:57:71:cd:65:fe:fb:0b:1f:2b:99:94:
                    70:8a:cf:8a:2a:65:e2:e8:a2:67:51:19:4c:29:a2:
                    2f:19:91:b9:f7:30:2d:e8:cc:6d:2a:64:84:1b:1f:
                    6c:b8:08:be:67:c3:3e:42:a9:99:4a:5d:b5:c8:38:
                    2e:ec:5b:56:61:61:d3:f3:26:a4:ea:6f:a1:e9:ff:
                    2a:3f:66:c8:c9:e9:a6:53:c8:03:cb:47:d9:b3:e8:
                    7f:77:e7:ee:51:5d:67:37:83:4d:8d:cb:b9:65:6a:
                    a9:6d:8b:b8:4a:2d:a8:f0:88:56:d8:07:9c:48:c4:
                    b3:85:fc:39:85:76:48:2c:cd:ba:90:d2:78:b3:b5:
                    3b:37:69:f4:18:f9:8d:0d:e2:d6:1c:47:79:99:19:
                    df:c7:12:b8:8c:0b:68:02:7b:7a:41:34:18:1f:c3:
                    42:65:2c:7d:cb:7c:25:9d:b9:6e:45:b4:fc:12:44:
                    df:10:ba:03:df:be:99:c0:99:70:43:a6:34:d9:fb:
                    49:97:6a:e0:f1:5c:3f:b5:fe:15:8c:a1:6e:98:18:
                    af:00:5a:15:40:a6:2e:22:74:9e:55:ab:1a:25:50:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DE:3F:79:B0:3C:72:33:82:70:62:FC:83:45:EF:30:D5:AC:0D:0C
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132302e302f32322d3332203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:a4:90:a2:00:d7:81:7d:1d:6c:44:ab:36:c6:e7:24:2d:17:
         31:c3:e9:49:ff:82:20:d8:14:21:0c:38:4d:d6:f4:28:67:2a:
         b2:a0:c8:1c:9e:f6:49:38:8e:76:ed:42:ab:0c:7b:06:5d:6f:
         88:61:59:85:85:d3:8b:ed:a8:e6:33:44:f2:55:84:0f:4f:50:
         3d:9c:11:6d:da:02:65:58:77:07:59:4b:e0:96:da:a4:18:2a:
         58:33:7b:a5:b9:f5:4c:d2:b1:e3:aa:5a:10:30:0a:09:8d:66:
         25:89:0b:58:ac:65:bb:42:00:19:04:3f:87:10:b0:d4:67:75:
         cc:18:00:42:01:bc:bc:51:e9:bd:04:12:ce:98:9b:8d:0f:a0:
         3b:cc:f7:dd:cf:f8:22:a9:f1:c2:06:66:e6:50:11:04:10:65:
         2e:b5:1a:ae:1e:fb:04:1a:43:95:88:86:5a:13:95:2e:ca:0b:
         30:d4:ca:57:a0:38:81:aa:37:cb:fb:d2:6d:a6:b4:af:d2:c3:
         e4:73:e8:cf:13:a9:b2:5f:f7:29:19:a4:b8:fd:70:35:02:48:
         2f:66:30:14:fb:19:9d:ec:9a:e9:ac:14:eb:b4:19:7f:2d:d2:
         aa:97:b1:26:de:d4:31:d8:c3:84:65:af:df:fa:e5:ce:9b:70:
         04:aa:f4:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR1iuyNs5Jmqe1oXKy+h9BDOJu+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI0QzFDOTcxOTMwNjQxRjUyQ0Y3NkQ2NjA3REVENUJC
MDNCQTE1RjAeFw0yMzA0MDUxNjQzMTJaFw0yNDA0MDMxNjQ4MTJaMDMxMTAvBgNV
BAMTKEM4REUzRjc5QjAzQzcyMzM4MjcwNjJGQzgzNDVFRjMwRDVBQzBEMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuB5osT650WIPZG/Ko3gSC6N9T
aHSL3a3eWu+SYukUESdXcc1l/vsLHyuZlHCKz4oqZeLoomdRGUwpoi8Zkbn3MC3o
zG0qZIQbH2y4CL5nwz5CqZlKXbXIOC7sW1ZhYdPzJqTqb6Hp/yo/ZsjJ6aZTyAPL
R9mz6H935+5RXWc3g02Ny7llaqlti7hKLajwiFbYB5xIxLOF/DmFdkgszbqQ0niz
tTs3afQY+Y0N4tYcR3mZGd/HEriMC2gCe3pBNBgfw0JlLH3LfCWduW5FtPwSRN8Q
ugPfvpnAmXBDpjTZ+0mXauDxXD+1/hWMoW6YGK8AWhVApi4idJ5VqxolUBIXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyN4/ebA8cjOCcGL8g0XvMNWsDQwwHwYDVR0j
BBgwFoAUgkwclxkwZB9Sz3bWYH3tW7A7oV8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlRVEx3OTkzYjVkV0xOcUFXNkI3MWJYUlk1MmczU2VNMXdDZnhDaEZj
UFIvMS84MjRDMUM5NzE5MzA2NDFGNTJDRjc2RDY2MDdERUQ1QkIwM0JBMTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgyNEMxQzk3MTkzMDY0MUY1
MkNGNzZENjYwN0RFRDVCQjAzQkExNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g5UVRMdzk5M2I1ZFdMTnFBVzZCNzFiWFJZNTJnM1NlTTF3Q2Z4Q2hGY1BSLzEv
MzQzNTJlMzEzODM1MmUzMTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuXgwDQYJKoZIhvcNAQELBQADggEBAJikkKIA
14F9HWxEqzbG5yQtFzHD6Un/giDYFCEMOE3W9ChnKrKgyBye9kk4jnbtQqsMewZd
b4hhWYWF04vtqOYzRPJVhA9PUD2cEW3aAmVYdwdZS+CW2qQYKlgze6W59UzSseOq
WhAwCgmNZiWJC1isZbtCABkEP4cQsNRndcwYAEIBvLxR6b0EEs6Ym40PoDvM993P
+CKp8cIGZuZQEQQQZS61Gq4e+wQaQ5WIhloTlS7KCzDUylegOIGqN8v70m2mtK/S
w+Rz6M8TqbJf9ykZpLj9cDUCSC9mMBT7GZ3smumsFOu0GX8t0qqXsSbe1DHYw4Rl
r9/65c6bcASq9AY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org