Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/34352e3232362e39382e302f32332d3233203d3e20323637303230.roa
File:                     34352e3232362e39382e302f32332d3233203d3e20323637303230.roa (raw, json)
Hash identifier:          zs+beHPEQk7G2OoF/N4KN4z/yfFiIqy+FZbGUEjEFK4=
Subject key identifier:   AC:79:29:F9:D1:94:76:86:54:98:7B:33:A3:76:F7:67:A3:9F:42:50
Certificate issuer:       /CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
Certificate serial:       3EC601D4218162811E0FC6C415610544687F661D
Authority key identifier: CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/34352e3232362e39382e302f32332d3233203d3e20323637303230.roa
Signing time:             Thu 08 Sep 2022 19:50:36 +0000
ROA not before:           Thu 08 Sep 2022 19:45:36 +0000
ROA not after:            Thu 07 Sep 2023 19:50:36 +0000
asID:                     267020
IP address blocks:        45.226.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c6:01:d4:21:81:62:81:1e:0f:c6:c4:15:61:05:44:68:7f:66:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
        Validity
            Not Before: Sep  8 19:45:36 2022 GMT
            Not After : Sep  7 19:50:36 2023 GMT
        Subject: CN=AC7929F9D194768654987B33A376F767A39F4250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:39:9d:02:a2:e0:09:42:19:40:99:e6:f8:
                    78:42:fe:cb:87:5d:9e:4d:16:c2:6a:f1:e0:0f:3a:
                    65:72:b7:01:4f:39:c0:0d:23:a4:56:87:0b:ce:63:
                    93:3b:75:60:5b:10:93:55:7a:23:55:59:71:41:34:
                    62:e5:27:fb:e7:ab:23:30:19:ed:0c:86:c1:36:48:
                    eb:7c:48:61:9e:01:47:6a:b5:6f:fe:d0:28:2f:11:
                    91:c3:38:7d:70:9e:73:a3:76:dc:59:af:27:bf:e8:
                    a3:f6:8f:04:8e:0e:38:62:16:6f:00:35:90:f5:e1:
                    aa:bc:e4:ac:5b:91:a8:38:d7:3b:ef:b1:70:eb:37:
                    59:03:4c:37:00:2d:76:ad:6e:e3:74:40:a8:d3:b9:
                    19:28:73:fa:e6:a3:95:00:c5:e0:e9:6b:72:3e:7f:
                    eb:e8:5b:a5:5f:ce:97:1d:2a:f4:74:bd:7f:a7:10:
                    8c:2d:ec:2d:60:2b:a9:32:44:d0:89:76:c2:7c:44:
                    43:12:82:76:0d:4f:04:e7:08:b5:40:0e:38:15:ff:
                    bc:bc:5a:6b:a7:c1:1a:94:58:5c:db:db:29:37:a7:
                    25:99:13:d5:db:07:15:7f:5d:0d:6e:55:ae:e7:02:
                    f2:a8:0f:e1:37:29:76:c7:d7:ae:34:53:74:be:c2:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:79:29:F9:D1:94:76:86:54:98:7B:33:A3:76:F7:67:A3:9F:42:50
            X509v3 Authority Key Identifier:
                keyid:CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/34352e3232362e39382e302f32332d3233203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:11:ad:2e:77:75:96:52:50:db:23:b5:29:b5:2d:c8:90:9a:
         c5:af:37:79:e5:fc:c1:77:c2:b9:6a:f8:27:37:42:ae:26:1b:
         78:68:43:94:3b:1d:5b:c0:47:9a:ef:ce:07:7b:e1:81:3a:4e:
         f5:be:6c:ce:76:69:ff:8f:07:5a:b8:2a:fb:be:e7:dc:ec:4a:
         63:3c:db:bd:08:67:1e:53:72:18:b0:f5:ba:3f:aa:4c:e8:d8:
         48:bf:76:9e:b4:87:5d:e0:97:41:96:99:71:19:e6:26:b4:85:
         09:57:3b:05:b2:7a:df:d4:26:d9:0a:02:6c:f5:5a:d3:71:e6:
         83:8d:ea:98:cd:f6:ec:e3:57:22:a1:3c:cf:bc:a1:f6:c9:31:
         8a:84:e6:9b:42:96:13:e4:b4:16:e6:2e:f6:4c:5d:63:66:a2:
         cf:bf:64:77:d3:eb:0b:c6:9f:4e:88:b6:c6:9b:3d:ba:8a:85:
         04:57:4a:e2:f5:e4:66:fe:e0:ae:39:ec:b4:e6:5b:f4:6f:40:
         c1:0d:41:85:ac:fd:06:b4:94:a9:9a:1d:77:b7:f4:82:fc:7d:
         4d:1a:fb:5a:a7:38:d2:10:88:b8:65:8a:e4:52:3a:71:d2:23:
         fd:ff:b2:72:8f:95:a2:67:f9:13:82:f3:f5:f9:1e:b1:bb:9c:
         28:81:54:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPsYB1CGBYoEeD8bEFWEFRGh/Zh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2NzIwRTA5NkUyQjNCNTg3NURFRjFGNjVGNkQ5N0ZC
QjU2NTYyMzAeFw0yMjA5MDgxOTQ1MzZaFw0yMzA5MDcxOTUwMzZaMDMxMTAvBgNV
BAMTKEFDNzkyOUY5RDE5NDc2ODY1NDk4N0IzM0EzNzZGNzY3QTM5RjQyNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hDmdAqLgCUIZQJnm+HhC/suH
XZ5NFsJq8eAPOmVytwFPOcANI6RWhwvOY5M7dWBbEJNVeiNVWXFBNGLlJ/vnqyMw
Ge0MhsE2SOt8SGGeAUdqtW/+0CgvEZHDOH1wnnOjdtxZrye/6KP2jwSODjhiFm8A
NZD14aq85Kxbkag41zvvsXDrN1kDTDcALXatbuN0QKjTuRkoc/rmo5UAxeDpa3I+
f+voW6VfzpcdKvR0vX+nEIwt7C1gK6kyRNCJdsJ8REMSgnYNTwTnCLVADjgV/7y8
WmunwRqUWFzb2yk3pyWZE9XbBxV/XQ1uVa7nAvKoD+E3KXbH1640U3S+wmu1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrHkp+dGUdoZUmHszo3b3Z6OfQlAwHwYDVR0j
BBgwFoAUzWcg4Jbis7WHXe8fZfbZf7tWViMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExMS21WdEp5YU1IWjZvQVNQQjlVazJtb1M1R21qV2FrUnZ2NURxQzlt
OEgvMC9DRDY3MjBFMDk2RTJCM0I1ODc1REVGMUY2NUY2RDk3RkJCNTY1NjIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENjcyMEUwOTZFMkIzQjU4
NzVERUYxRjY1RjZEOTdGQkI1NjU2MjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMTEttVnRKeWFNSFo2b0FTUEI5VWsybW9TNUdtaldha1J2djVEcUM5bThILzAv
MzQzNTJlMzIzMjM2MmUzOTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzAzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeJiMA0GCSqGSIb3DQEBCwUAA4IBAQDBEa0ud3WW
UlDbI7UptS3IkJrFrzd55fzBd8K5avgnN0KuJht4aEOUOx1bwEea784He+GBOk71
vmzOdmn/jwdauCr7vufc7EpjPNu9CGceU3IYsPW6P6pM6NhIv3aetIdd4JdBlplx
GeYmtIUJVzsFsnrf1CbZCgJs9VrTceaDjeqYzfbs41cioTzPvKH2yTGKhOabQpYT
5LQW5i72TF1jZqLPv2R30+sLxp9OiLbGmz26ioUEV0ri9eRm/uCuOey05lv0b0DB
DUGFrP0GtJSpmh13t/SC/H1NGvtapzjSEIi4ZYrkUjpx0iP9/7Jyj5WiZ/kTgvP1
+R6xu5wogVRQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org