Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32342d3234203d3e20323639323534.roa
File:                     34352e3138332e31362e302f32342d3234203d3e20323639323534.roa (raw, json)
Hash identifier:          HIn2cahmA0gHnRLTS7c3nTAkJ8ogMxV7oVmDVAssCFk=
Subject key identifier:   1A:BA:72:51:63:06:62:95:2E:8B:91:DD:9E:F2:6A:92:09:2F:8C:95
Certificate issuer:       /CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
Certificate serial:       081CEB9240865F5767A9C1955D59BF08C5583237
Authority key identifier: 47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32342d3234203d3e20323639323534.roa
Signing time:             Tue 15 Aug 2023 14:30:57 +0000
ROA not before:           Tue 15 Aug 2023 14:25:57 +0000
ROA not after:            Tue 13 Aug 2024 14:30:57 +0000
asID:                     269254
IP address blocks:        45.183.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1c:eb:92:40:86:5f:57:67:a9:c1:95:5d:59:bf:08:c5:58:32:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
        Validity
            Not Before: Aug 15 14:25:57 2023 GMT
            Not After : Aug 13 14:30:57 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:ee:a6:db:c6:7c:d1:8b:d7:52:3a:13:e3:
                    a2:58:f5:65:7d:1d:4d:65:4f:18:ad:c2:1f:6f:18:
                    74:f4:a5:7d:38:cf:4e:41:25:f1:b4:7b:03:2a:56:
                    86:d9:8b:2b:07:94:9a:32:b5:30:57:12:5a:83:66:
                    a8:43:1f:eb:e5:e0:80:66:bc:de:57:bf:cf:47:91:
                    53:54:ea:75:a5:45:c0:6b:f1:e8:fc:27:9d:3c:95:
                    05:20:68:23:03:da:67:9a:87:2d:76:62:8b:a2:18:
                    fd:85:5e:93:60:f0:63:80:7b:40:ef:cb:e2:03:40:
                    af:3d:c1:36:88:d9:40:3d:8e:63:56:a9:ef:ed:ab:
                    5b:94:d1:d7:1b:20:78:5d:3e:64:a6:0f:ca:a5:27:
                    22:2d:7a:62:34:d1:ec:43:df:1c:7e:06:76:13:d4:
                    41:71:2c:f7:94:21:99:b2:a9:3b:59:36:cf:27:51:
                    f1:4a:d1:f9:73:1b:bb:96:0f:b9:c1:12:d2:c8:3f:
                    98:48:51:47:56:71:54:22:02:82:a4:37:e9:2a:5a:
                    82:f9:26:bc:ac:73:ed:db:d5:b4:db:84:2d:01:95:
                    c7:e3:c7:62:17:da:7c:ca:04:4e:06:00:8d:9a:cd:
                    02:e8:0b:ea:e0:2b:97:eb:91:f3:16:8a:44:88:9e:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BA:72:51:63:06:62:95:2E:8B:91:DD:9E:F2:6A:92:09:2F:8C:95
            X509v3 Authority Key Identifier:
                keyid:47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32342d3234203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:df:9f:fd:34:c4:05:73:59:e1:0c:3f:61:53:94:8c:46:db:
         d7:27:e5:09:aa:08:33:4e:47:ed:88:dc:34:15:01:a9:cf:ce:
         0f:64:ce:4d:6e:27:b6:4c:88:2d:88:a5:87:f7:20:e7:b9:78:
         5c:88:91:65:b2:e4:09:c4:8f:41:71:4c:3d:2b:1c:73:72:37:
         64:99:a0:b3:9a:21:23:10:b1:9c:a6:f1:d6:f2:8c:1f:7c:d4:
         c7:16:7d:5a:50:42:62:7e:14:e6:01:33:81:18:73:eb:75:07:
         17:2b:16:2e:41:f4:2f:54:09:c9:b2:63:76:07:f9:be:71:4a:
         3c:47:d1:65:9a:46:ac:db:a8:55:17:07:9e:b2:7c:50:60:47:
         f8:31:9c:a4:f5:8f:29:75:3e:6e:c8:9e:f2:33:76:64:25:26:
         63:7b:76:42:c5:ca:a8:6b:3a:a2:a3:94:52:cb:69:fb:78:c3:
         61:2d:bc:d4:e1:82:f5:e0:2e:80:c3:53:49:f4:d4:c7:de:c7:
         9b:99:3f:64:61:82:d1:fa:f8:36:82:f2:c8:50:19:ad:2f:b5:
         37:c2:e3:8f:7c:bb:cb:27:75:72:3b:c0:59:96:19:ca:37:8b:
         d6:1a:b9:89:b3:76:74:6b:46:e0:3f:e2:61:a3:3d:de:55:43:
         4a:37:63:65
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUCBzrkkCGX1dnqcGVXVm/CMVYMjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwM0RGNTc2RENGQUM0QjExREE5QUYyNzgwMjg3MTRG
M0VDRDlGQzAeFw0yMzA4MTUxNDI1NTdaFw0yNDA4MTMxNDMwNTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM1OUVFQTZEQkM2N0NEMThC
RDc1MjNBMTNFM0EyNThGNTY1N0QxRDRENjU0RjE4QURDMjFGNkYxODc0RjRBNTdE
MzhDRjRFNDEyNUYxQjQ3QjAzMkE1Njg2RDk4QjJCMDc5NDlBMzJCNTMwNTcxMjVB
ODM2NkE4NDMxRkVCRTVFMDgwNjZCQ0RFNTdCRkNGNDc5MTUzNTRFQTc1QTU0NUMw
NkJGMUU4RkMyNzlEM0M5NTA1MjA2ODIzMDNEQTY3OUE4NzJENzY2MjhCQTIxOEZE
ODU1RTkzNjBGMDYzODA3QjQwRUZDQkUyMDM0MEFGM0RDMTM2ODhEOTQwM0Q4RTYz
NTZBOUVGRURBQjVCOTREMUQ3MUIyMDc4NUQzRTY0QTYwRkNBQTUyNzIyMkQ3QTYy
MzREMUVDNDNERjFDN0UwNjc2MTNENDQxNzEyQ0Y3OTQyMTk5QjJBOTNCNTkzNkNG
Mjc1MUYxNEFEMUY5NzMxQkJCOTYwRkI5QzExMkQyQzgzRjk4NDg1MTQ3NTY3MTU0
MjIwMjgyQTQzN0U5MkE1QTgyRjkyNkJDQUM3M0VEREJENUI0REI4NDJEMDE5NUM3
RTNDNzYyMTdEQTdDQ0EwNDRFMDYwMDhEOUFDRDAyRTgwQkVBRTAyQjk3RUI5MUYz
MTY4QTQ0ODg5RUQ0QUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs1nuptvGfNGL11I6E+OiWPVlfR1NZU8YrcIfbxh09KV9OM9OQSXx
tHsDKlaG2YsrB5SaMrUwVxJag2aoQx/r5eCAZrzeV7/PR5FTVOp1pUXAa/Ho/Ced
PJUFIGgjA9pnmoctdmKLohj9hV6TYPBjgHtA78viA0CvPcE2iNlAPY5jVqnv7atb
lNHXGyB4XT5kpg/KpSciLXpiNNHsQ98cfgZ2E9RBcSz3lCGZsqk7WTbPJ1HxStH5
cxu7lg+5wRLSyD+YSFFHVnFUIgKCpDfpKlqC+Sa8rHPt29W024QtAZXH48diF9p8
ygROBgCNms0C6Avq4CuX65HzFopEiJ7UqwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FBq6clFjBmKVLouR3Z7yapIJL4yVMB8GA1UdIwQYMBaAFEcD31dtz6xLEdqa8ngC
hxTz7Nn8MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hVY3UxU0N6NjN6RGlF
bmhYNURHMnVxd0JGaGMxdnJ0VURMekRkdndSYmRDLzAvNDcwM0RGNTc2RENGQUM0
QjExREE5QUYyNzgwMjg3MTRGM0VDRDlGQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NzAzREY1NzZEQ0ZBQzRCMTFEQTlBRjI3ODAyODcxNEYzRUNE
OUZDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IVWN1MVNDejYzekRpRW5oWDVE
RzJ1cXdCRmhjMXZydFVETHpEZHZ3UmJkQy8wLzM0MzUyZTMxMzgzMzJlMzEzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTMyMzUzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC23
EDANBgkqhkiG9w0BAQsFAAOCAQEAT9+f/TTEBXNZ4Qw/YVOUjEbb1yflCaoIM05H
7YjcNBUBqc/OD2TOTW4ntkyILYilh/cg57l4XIiRZbLkCcSPQXFMPSscc3I3ZJmg
s5ohIxCxnKbx1vKMH3zUxxZ9WlBCYn4U5gEzgRhz63UHFysWLkH0L1QJybJjdgf5
vnFKPEfRZZpGrNuoVRcHnrJ8UGBH+DGcpPWPKXU+bsie8jN2ZCUmY3t2QsXKqGs6
oqOUUstp+3jDYS281OGC9eAugMNTSfTUx97Hm5k/ZGGC0fr4NoLyyFAZrS+1N8Lj
j3y7yyd1cjvAWZYZyjeL1hq5ibN2dGtG4D/iYaM93lVDSjdjZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org