Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132322e302f32332d3233203d3e20323639303936.roa
File:                     34352e3138352e3132322e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          Zd70tFkjJg+KolMTcTT9gL1jnzQ0LSCAThw5nv1lO3U=
Subject key identifier:   74:39:9B:9D:3C:50:4D:08:C1:B0:70:40:40:22:55:A2:E3:01:C8:9F
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       31C166CA59626A4CF9950BC5EC27FB3F72A29CF4
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132322e302f32332d3233203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 15:01:31 +0000
ROA not before:           Wed 05 Apr 2023 14:56:31 +0000
ROA not after:            Wed 03 Apr 2024 15:01:31 +0000
asID:                     269096
IP address blocks:        45.185.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c1:66:ca:59:62:6a:4c:f9:95:0b:c5:ec:27:fb:3f:72:a2:9c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 14:56:31 2023 GMT
            Not After : Apr  3 15:01:31 2024 GMT
        Subject: CN=74399B9D3C504D08C1B07040402255A2E301C89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:49:e8:59:59:78:66:d5:6d:c0:be:60:a6:
                    70:e2:85:2f:a7:a4:90:5e:54:df:6a:06:ea:d0:fc:
                    b9:69:0d:bf:63:58:3c:67:aa:c6:40:a8:e2:fc:9d:
                    64:9f:11:19:4d:b5:75:1e:26:97:9b:72:77:97:d8:
                    67:c9:65:36:09:ef:84:af:5a:6f:74:88:04:cd:ec:
                    b9:35:db:fe:f7:fa:81:e3:12:16:0e:72:bd:71:af:
                    b5:e9:0b:f4:bd:48:b3:b8:eb:75:f6:2e:9e:f4:d2:
                    4e:cc:34:e9:ae:d1:b5:10:9c:74:d8:57:c8:8b:13:
                    1a:ca:12:5a:21:94:17:71:af:01:91:ce:9d:46:f3:
                    8b:68:aa:32:42:01:76:11:a3:6a:85:8d:10:04:87:
                    48:ae:67:ab:c6:53:b0:0d:07:21:a9:14:b1:11:05:
                    47:b4:53:5b:8a:fd:43:11:8c:6f:d7:4f:eb:ae:51:
                    f5:9a:bc:d1:44:b9:53:13:ad:a7:c0:4c:3f:52:af:
                    89:18:09:e5:60:9b:91:8c:9b:9c:47:8a:6c:11:0d:
                    b9:0a:79:d8:3b:85:06:23:64:56:ef:49:95:20:9b:
                    60:47:c8:7d:fd:8d:7c:c9:ff:16:b8:b2:b5:b1:25:
                    23:b1:d0:5b:63:32:a9:35:e3:2b:b7:99:d3:60:05:
                    85:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:39:9B:9D:3C:50:4D:08:C1:B0:70:40:40:22:55:A2:E3:01:C8:9F
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132322e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:b9:31:77:ec:0c:73:d1:fe:5b:1c:5c:ea:cf:fa:96:e5:95:
         c4:25:0b:c6:92:1b:43:e0:cd:09:37:e8:35:3c:a0:84:a2:63:
         0e:2a:28:11:ec:74:51:92:77:d9:a5:c6:36:5d:5e:08:08:8e:
         d4:ad:37:67:64:c1:5f:87:0f:dc:ac:d2:52:7e:eb:fa:39:af:
         60:2c:96:71:53:5b:b1:93:91:43:3a:ae:6a:60:78:f5:e5:3e:
         49:9c:1a:36:59:18:0a:1f:aa:4b:b9:b9:32:3d:ff:e0:40:70:
         db:a1:a0:4e:c2:0e:35:35:f8:e3:88:2b:7e:db:c0:b2:27:93:
         11:2a:52:0a:6d:02:b4:52:48:62:dc:fd:03:9e:d2:53:57:b4:
         c5:c1:db:4e:e5:72:cc:13:b4:b5:e6:71:0f:d6:f0:da:52:35:
         32:1f:e5:6b:17:b3:60:f8:3d:fa:3c:58:e6:5b:11:a5:6d:19:
         9a:2e:6b:4b:a9:9d:bb:73:ea:60:f8:f4:2d:8d:cd:45:bb:18:
         88:b2:40:b7:46:e4:48:25:04:30:2c:14:90:9b:35:25:83:20:
         79:47:4b:e3:b0:16:56:d8:52:ac:6e:2d:0c:f2:9f:5c:e1:1f:
         19:da:fb:7a:fe:ad:ca:65:0a:bb:c3:c1:e9:0e:27:9a:ac:3c:
         59:9b:48:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMcFmylliakz5lQvF7Cf7P3KinPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI0QzFDOTcxOTMwNjQxRjUyQ0Y3NkQ2NjA3REVENUJC
MDNCQTE1RjAeFw0yMzA0MDUxNDU2MzFaFw0yNDA0MDMxNTAxMzFaMDMxMTAvBgNV
BAMTKDc0Mzk5QjlEM0M1MDREMDhDMUIwNzA0MDQwMjI1NUEyRTMwMUM4OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEUnoWVl4ZtVtwL5gpnDihS+n
pJBeVN9qBurQ/LlpDb9jWDxnqsZAqOL8nWSfERlNtXUeJpebcneX2GfJZTYJ74Sv
Wm90iATN7Lk12/73+oHjEhYOcr1xr7XpC/S9SLO463X2Lp700k7MNOmu0bUQnHTY
V8iLExrKElohlBdxrwGRzp1G84toqjJCAXYRo2qFjRAEh0iuZ6vGU7ANByGpFLER
BUe0U1uK/UMRjG/XT+uuUfWavNFEuVMTrafATD9Sr4kYCeVgm5GMm5xHimwRDbkK
edg7hQYjZFbvSZUgm2BHyH39jXzJ/xa4srWxJSOx0FtjMqk14yu3mdNgBYUvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdDmbnTxQTQjBsHBAQCJVouMByJ8wHwYDVR0j
BBgwFoAUgkwclxkwZB9Sz3bWYH3tW7A7oV8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlRVEx3OTkzYjVkV0xOcUFXNkI3MWJYUlk1MmczU2VNMXdDZnhDaEZj
UFIvMS84MjRDMUM5NzE5MzA2NDFGNTJDRjc2RDY2MDdERUQ1QkIwM0JBMTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgyNEMxQzk3MTkzMDY0MUY1
MkNGNzZENjYwN0RFRDVCQjAzQkExNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g5UVRMdzk5M2I1ZFdMTnFBVzZCNzFiWFJZNTJnM1NlTTF3Q2Z4Q2hGY1BSLzEv
MzQzNTJlMzEzODM1MmUzMTMyMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuXowDQYJKoZIhvcNAQELBQADggEBAFK5MXfs
DHPR/lscXOrP+pbllcQlC8aSG0PgzQk36DU8oISiYw4qKBHsdFGSd9mlxjZdXggI
jtStN2dkwV+HD9ys0lJ+6/o5r2AslnFTW7GTkUM6rmpgePXlPkmcGjZZGAofqku5
uTI9/+BAcNuhoE7CDjU1+OOIK37bwLInkxEqUgptArRSSGLc/QOe0lNXtMXB207l
cswTtLXmcQ/W8NpSNTIf5WsXs2D4Pfo8WOZbEaVtGZoua0upnbtz6mD49C2NzUW7
GIiyQLdG5EglBDAsFJCbNSWDIHlHS+OwFlbYUqxuLQzyn1zhHxna+3r+rcplCrvD
wekOJ5qsPFmbSDs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org