Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230302e302f32342d3234203d3e20323637333936.roa
File:                     34352e3233332e3230302e302f32342d3234203d3e20323637333936.roa (raw, json)
Hash identifier:          nZ0T5Opg5CzYFMwxRglmwAK8Ah9WdPasAS1cb35BLps=
Subject key identifier:   61:A7:1C:AB:CA:FA:F7:BA:31:5E:A6:B4:3E:13:B8:E2:EB:CC:F3:83
Certificate issuer:       /CN=24C0C154980B1116A9062AE924B9DF7EB8CEA165
Certificate serial:       3AE01DC93112B63BEFFD362C7AB9CE85FAAE65EA
Authority key identifier: 24:C0:C1:54:98:0B:11:16:A9:06:2A:E9:24:B9:DF:7E:B8:CE:A1:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24C0C154980B1116A9062AE924B9DF7EB8CEA165.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230302e302f32342d3234203d3e20323637333936.roa
Signing time:             Thu 13 Jul 2023 13:44:00 +0000
ROA not before:           Thu 13 Jul 2023 13:39:00 +0000
ROA not after:            Thu 11 Jul 2024 13:44:00 +0000
asID:                     267396
IP address blocks:        45.233.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e0:1d:c9:31:12:b6:3b:ef:fd:36:2c:7a:b9:ce:85:fa:ae:65:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0C154980B1116A9062AE924B9DF7EB8CEA165
        Validity
            Not Before: Jul 13 13:39:00 2023 GMT
            Not After : Jul 11 13:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e8:9f:bc:fe:2c:93:35:0a:f3:64:8e:64:6d:
                    93:f9:6d:b3:78:ef:1c:64:78:f6:8b:b4:b5:f1:b7:
                    34:3a:45:7c:28:39:db:5d:c0:68:91:0b:23:47:a9:
                    2d:5a:57:e6:6a:6c:0e:fc:95:34:8f:2b:db:92:99:
                    ef:89:45:df:b7:4f:f0:ad:a3:9b:6d:9d:c3:dc:9f:
                    e5:a2:36:37:95:e0:e5:08:33:60:f8:b7:0e:0e:06:
                    52:f0:91:3d:36:97:24:92:23:cd:c0:0b:82:77:c9:
                    28:89:d2:ae:71:e8:a0:6f:6f:85:b0:64:6a:7e:18:
                    03:46:91:d6:c2:03:b2:36:91:bc:67:04:7d:50:29:
                    cb:57:92:e1:a2:9b:91:8c:ec:14:68:72:34:57:40:
                    b7:b1:23:29:f4:05:47:98:bd:70:3b:56:86:e8:38:
                    f5:ea:f6:0a:6a:3e:66:2d:43:48:09:41:20:14:a7:
                    ff:df:b4:65:48:fb:80:20:72:62:72:a1:7c:eb:79:
                    21:aa:a7:92:68:00:b7:18:36:b3:a3:75:b8:a6:ed:
                    49:fe:a7:3a:44:17:3c:2f:c1:f7:92:17:ae:b3:e7:
                    d2:25:11:20:ca:a2:7a:10:69:bf:12:a8:ee:7a:d8:
                    fe:d6:34:68:7f:9b:3d:0f:79:1a:1d:b1:9e:28:63:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:1C:AB:CA:FA:F7:BA:31:5E:A6:B4:3E:13:B8:E2:EB:CC:F3:83
            X509v3 Authority Key Identifier:
                keyid:24:C0:C1:54:98:0B:11:16:A9:06:2A:E9:24:B9:DF:7E:B8:CE:A1:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/24C0C154980B1116A9062AE924B9DF7EB8CEA165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24C0C154980B1116A9062AE924B9DF7EB8CEA165.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230302e302f32342d3234203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e8:84:0b:cd:25:34:c0:f0:29:0c:d2:e6:d5:31:b7:43:25:
         27:3d:fd:28:12:df:21:cc:fe:ec:55:ad:65:0e:f8:23:9d:0b:
         5f:05:f1:a9:92:6e:11:97:65:1a:82:e7:8e:2d:a4:01:1a:8b:
         85:c8:e4:b7:d2:9b:6e:b1:6d:48:91:24:57:24:15:94:c7:b6:
         fa:05:82:22:da:94:f7:6a:9b:1e:69:67:3d:a5:18:8f:c1:e4:
         f7:ac:b9:c1:ff:cf:f6:0a:c1:df:5d:bf:b9:3e:07:e6:30:b4:
         a9:d6:ea:16:bd:86:f9:96:dd:ab:89:1d:a1:9a:61:12:2d:fd:
         68:5a:ed:77:d0:60:8d:38:3d:47:7d:53:1e:e5:cf:ae:98:46:
         d2:d5:68:17:a9:1d:49:61:b7:f3:f0:93:6a:a2:73:ae:c4:1f:
         52:18:0a:26:f7:32:3b:b1:58:3c:28:9e:c0:ed:ff:f6:35:40:
         c6:36:a0:ae:45:88:56:ff:06:0e:14:05:6c:ff:b8:d2:a7:db:
         97:ff:fe:02:12:d4:99:f4:a0:e6:2d:ac:47:01:a5:fe:8f:ef:
         6b:ec:f5:20:e2:69:8a:a2:a9:67:92:d4:da:fd:15:57:1e:bf:
         49:3e:ef:36:a4:95:be:bb:89:e2:70:c6:ce:d8:81:a6:ed:24:
         b8:ed:3f:a0
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUOuAdyTEStjvv/TYsernOhfquZeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDMEMxNTQ5ODBCMTExNkE5MDYyQUU5MjRCOURGN0VC
OENFQTE2NTAeFw0yMzA3MTMxMzM5MDBaFw0yNDA3MTExMzQ0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTZFODlGQkNGRTJDOTMzNTBB
RjM2NDhFNjQ2RDkzRjk2REIzNzhFRjFDNjQ3OEY2OEJCNEI1RjFCNzM0M0E0NTdD
MjgzOURCNURDMDY4OTEwQjIzNDdBOTJENUE1N0U2NkE2QzBFRkM5NTM0OEYyQkRC
OTI5OUVGODk0NURGQjc0RkYwQURBMzlCNkQ5REMzREM5RkU1QTIzNjM3OTVFMEU1
MDgzMzYwRjhCNzBFMEUwNjUyRjA5MTNEMzY5NzI0OTIyM0NEQzAwQjgyNzdDOTI4
ODlEMkFFNzFFOEEwNkY2Rjg1QjA2NDZBN0UxODAzNDY5MUQ2QzIwM0IyMzY5MUJD
NjcwNDdENTAyOUNCNTc5MkUxQTI5QjkxOENFQzE0Njg3MjM0NTc0MEI3QjEyMzI5
RjQwNTQ3OThCRDcwM0I1Njg2RTgzOEY1RUFGNjBBNkEzRTY2MkQ0MzQ4MDk0MTIw
MTRBN0ZGREZCNDY1NDhGQjgwMjA3MjYyNzJBMTdDRUI3OTIxQUFBNzkyNjgwMEI3
MTgzNkIzQTM3NUI4QTZFRDQ5RkVBNzNBNDQxNzNDMkZDMUY3OTIxN0FFQjNFN0Qy
MjUxMTIwQ0FBMjdBMTA2OUJGMTJBOEVFN0FEOEZFRDYzNDY4N0Y5QjNEMEY3OTFB
MURCMTlFMjg2M0MxRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5uifvP4skzUK82SOZG2T+W2zeO8cZHj2i7S18bc0OkV8KDnbXcBo
kQsjR6ktWlfmamwO/JU0jyvbkpnviUXft0/wraObbZ3D3J/lojY3leDlCDNg+LcO
DgZS8JE9NpckkiPNwAuCd8koidKuceigb2+FsGRqfhgDRpHWwgOyNpG8ZwR9UCnL
V5LhopuRjOwUaHI0V0C3sSMp9AVHmL1wO1aG6Dj16vYKaj5mLUNICUEgFKf/37Rl
SPuAIHJicqF863khqqeSaAC3GDazo3W4pu1J/qc6RBc8L8H3kheus+fSJREgyqJ6
EGm/Eqjuetj+1jRof5s9D3kaHbGeKGPB0QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGGnHKvK+ve6MV6mtD4TuOLrzPODMB8GA1UdIwQYMBaAFCTAwVSYCxEWqQYq6SS5
3364zqFlMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hHak1TMjJwNEhCbnhL
cUFCUHFwMzk2dmNwc3ZMbjF4Z3ZEaFJBd2tMVTNTLzAvMjRDMEMxNTQ5ODBCMTEx
NkE5MDYyQUU5MjRCOURGN0VCOENFQTE2NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yNEMwQzE1NDk4MEIxMTE2QTkwNjJBRTkyNEI5REY3RUI4Q0VB
MTY1LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IR2pNUzIycDRIQm54S3FBQlBx
cDM5NnZjcHN2TG4xeGd2RGhSQXdrTFUzUy8wLzM0MzUyZTMyMzMzMzJlMzIzMDMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzMzOTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LenIMA0GCSqGSIb3DQEBCwUAA4IBAQBT6IQLzSU0wPApDNLm1TG3QyUnPf0oEt8h
zP7sVa1lDvgjnQtfBfGpkm4Rl2UagueOLaQBGouFyOS30ptusW1IkSRXJBWUx7b6
BYIi2pT3apseaWc9pRiPweT3rLnB/8/2CsHfXb+5PgfmMLSp1uoWvYb5lt2riR2h
mmESLf1oWu130GCNOD1HfVMe5c+umEbS1WgXqR1JYbfz8JNqonOuxB9SGAom9zI7
sVg8KJ7A7f/2NUDGNqCuRYhW/wYOFAVs/7jSp9uX//4CEtSZ9KDmLaxHAaX+j+9r
7PUg4mmKoqlnktTa/RVXHr9JPu82pJW+u4nicMbO2IGm7SS47T+g
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org