Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/34352e3136342e3135342e302f32332d3233203d3e20323638363139.roa
File:                     34352e3136342e3135342e302f32332d3233203d3e20323638363139.roa (raw, json)
Hash identifier:          OBeFqsVr6N3tompEnyfOfnpm1xlEr+xHYIc38Bna5fw=
Subject key identifier:   59:12:B3:5F:EC:66:69:CA:A7:C9:07:7E:41:B5:C3:DA:75:F3:4C:55
Certificate issuer:       /CN=360AF1068F03010D0F49188E66411805181F3A57
Certificate serial:       1A92DC5D8743CAE0B5E8B2C15D195E02C09BC7AC
Authority key identifier: 36:0A:F1:06:8F:03:01:0D:0F:49:18:8E:66:41:18:05:18:1F:3A:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/360AF1068F03010D0F49188E66411805181F3A57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/34352e3136342e3135342e302f32332d3233203d3e20323638363139.roa
Signing time:             Tue 21 Mar 2023 18:43:18 +0000
ROA not before:           Tue 21 Mar 2023 18:38:18 +0000
ROA not after:            Tue 19 Mar 2024 18:43:18 +0000
asID:                     268619
IP address blocks:        45.164.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:92:dc:5d:87:43:ca:e0:b5:e8:b2:c1:5d:19:5e:02:c0:9b:c7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360AF1068F03010D0F49188E66411805181F3A57
        Validity
            Not Before: Mar 21 18:38:18 2023 GMT
            Not After : Mar 19 18:43:18 2024 GMT
        Subject: CN=5912B35FEC6669CAA7C9077E41B5C3DA75F34C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:e1:b1:54:e7:ad:60:11:f8:a7:95:49:6c:
                    96:f6:b4:9a:f0:e3:43:7f:c8:9a:a7:02:40:bb:78:
                    fb:b8:04:84:29:a5:5d:02:01:1c:bd:c7:ce:d5:be:
                    d8:a2:3e:85:ea:ac:ae:70:24:40:e5:78:49:2d:fe:
                    ca:60:cb:66:2d:66:14:db:b3:7f:64:a9:35:eb:30:
                    5c:01:43:48:f6:99:af:44:00:ba:c4:f2:29:6d:89:
                    ba:75:bc:89:45:39:d2:e2:bb:e4:a8:b6:69:a3:8e:
                    6a:ea:9a:1c:52:43:1c:67:c2:fa:a0:b6:82:1c:7d:
                    b9:75:ae:09:8d:e7:9a:bb:2b:6b:b2:82:89:b9:6d:
                    3e:d6:93:a5:6c:3e:e1:56:5b:99:4b:e0:64:e1:69:
                    37:2a:4a:70:57:ff:91:36:a9:43:88:3f:a7:7c:5f:
                    fe:63:95:76:ad:07:1c:dc:bc:99:12:99:ff:b2:43:
                    ce:a1:da:6a:63:cb:76:32:29:ad:f8:45:50:c4:5c:
                    7b:1c:1b:e2:cc:08:4c:60:f7:61:65:aa:c7:0d:70:
                    71:09:87:6a:df:d1:98:22:bf:f2:67:f7:53:1a:62:
                    7f:0e:f2:21:54:76:1f:5a:cb:a5:20:af:2e:6b:e9:
                    9c:f7:48:32:0c:ed:33:1d:93:c8:05:40:6c:fb:33:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:12:B3:5F:EC:66:69:CA:A7:C9:07:7E:41:B5:C3:DA:75:F3:4C:55
            X509v3 Authority Key Identifier:
                keyid:36:0A:F1:06:8F:03:01:0D:0F:49:18:8E:66:41:18:05:18:1F:3A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/360AF1068F03010D0F49188E66411805181F3A57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/360AF1068F03010D0F49188E66411805181F3A57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/34352e3136342e3135342e302f32332d3233203d3e20323638363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:d7:42:b4:cc:c1:38:cc:77:da:4a:cc:13:21:76:40:e3:77:
         47:5c:44:57:95:2d:8d:2c:e7:5c:82:bc:c5:44:7c:7e:ae:44:
         0f:82:d6:08:a7:25:5e:b3:29:fb:fc:7b:30:90:e7:55:18:71:
         41:05:5b:91:a7:ae:a3:e1:6d:d7:5a:d9:cf:41:b2:10:48:4e:
         be:ad:ac:da:d7:dd:85:e3:fe:f8:88:8d:d4:ac:55:de:cb:95:
         9d:85:53:d0:fd:24:8a:85:d3:04:9f:32:78:be:17:ad:66:18:
         34:a0:fc:f8:1c:07:e5:cc:e6:7e:94:a7:74:17:50:06:e4:79:
         67:40:7a:29:06:35:58:3d:a6:90:33:92:af:92:54:cb:1b:4c:
         62:3b:0a:e2:2d:cb:d3:19:95:3a:c5:35:1d:a1:2a:c0:8b:49:
         64:3c:f0:63:59:c3:05:83:4f:83:46:47:38:e3:8a:08:a7:fe:
         46:67:d9:39:08:f6:d6:83:1e:13:3e:ec:17:dc:2d:f4:0d:33:
         ac:37:ab:26:a5:1c:e9:a3:43:fb:99:d9:f1:53:1a:3e:9c:5f:
         5b:92:b4:51:88:fa:b8:44:f6:33:38:1f:ee:af:2a:17:0a:40:
         79:3e:03:df:4e:ba:32:57:f4:4b:04:27:73:b1:62:4c:cc:b5:
         3d:14:9f:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGpLcXYdDyuC16LLBXRleAsCbx6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYwQUYxMDY4RjAzMDEwRDBGNDkxODhFNjY0MTE4MDUx
ODFGM0E1NzAeFw0yMzAzMjExODM4MThaFw0yNDAzMTkxODQzMThaMDMxMTAvBgNV
BAMTKDU5MTJCMzVGRUM2NjY5Q0FBN0M5MDc3RTQxQjVDM0RBNzVGMzRDNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTOGxVOetYBH4p5VJbJb2tJrw
40N/yJqnAkC7ePu4BIQppV0CARy9x87VvtiiPoXqrK5wJEDleEkt/spgy2YtZhTb
s39kqTXrMFwBQ0j2ma9EALrE8iltibp1vIlFOdLiu+SotmmjjmrqmhxSQxxnwvqg
toIcfbl1rgmN55q7K2uygom5bT7Wk6VsPuFWW5lL4GThaTcqSnBX/5E2qUOIP6d8
X/5jlXatBxzcvJkSmf+yQ86h2mpjy3YyKa34RVDEXHscG+LMCExg92FlqscNcHEJ
h2rf0Zgiv/Jn91MaYn8O8iFUdh9ay6Ugry5r6Zz3SDIM7TMdk8gFQGz7M3hVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWRKzX+xmacqnyQd+QbXD2nXzTFUwHwYDVR0j
BBgwFoAUNgrxBo8DAQ0PSRiOZkEYBRgfOlcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhRNFB1ZlFDY05ScVZoZWlSMzZ0U1RTcU1EYlNpa0g0aUFuTlVTMkxN
WkwvMC8zNjBBRjEwNjhGMDMwMTBEMEY0OTE4OEU2NjQxMTgwNTE4MUYzQTU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MEFGMTA2OEYwMzAxMEQw
RjQ5MTg4RTY2NDExODA1MTgxRjNBNTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYUTRQdWZRQ2NOUnFWaGVpUjM2dFNUU3FNRGJTaWtINGlBbk5VUzJMTVpMLzAv
MzQzNTJlMzEzNjM0MmUzMTM1MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNjMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpJowDQYJKoZIhvcNAQELBQADggEBALnXQrTM
wTjMd9pKzBMhdkDjd0dcRFeVLY0s51yCvMVEfH6uRA+C1ginJV6zKfv8ezCQ51UY
cUEFW5GnrqPhbdda2c9BshBITr6trNrX3YXj/viIjdSsVd7LlZ2FU9D9JIqF0wSf
Mni+F61mGDSg/PgcB+XM5n6Up3QXUAbkeWdAeikGNVg9ppAzkq+SVMsbTGI7CuIt
y9MZlTrFNR2hKsCLSWQ88GNZwwWDT4NGRzjjigin/kZn2TkI9taDHhM+7BfcLfQN
M6w3qyalHOmjQ/uZ2fFTGj6cX1uStFGI+rhE9jM4H+6vKhcKQHk+A99OujJX9EsE
J3OxYkzMtT0Un8M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org