Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e31302e302f32342d3234203d3e20323638333435.roa
File:                     34352e3233392e31302e302f32342d3234203d3e20323638333435.roa (raw, json)
Hash identifier:          d6kYtcVIR4GoMnq4d2DJ55CuTW92U/OFpkRz/OLyya0=
Subject key identifier:   69:D5:B7:DA:B6:18:2A:0C:55:14:8B:DC:9B:4D:E2:05:1C:53:96:7F
Certificate issuer:       /CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
Certificate serial:       2289BD1229419DA298B8AC96A72749DAF493AD2D
Authority key identifier: C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e31302e302f32342d3234203d3e20323638333435.roa
Signing time:             Tue 26 Apr 2022 14:21:08 +0000
ROA not before:           Tue 26 Apr 2022 14:16:08 +0000
ROA not after:            Tue 25 Apr 2023 14:21:08 +0000
asID:                     268345
IP address blocks:        45.239.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:89:bd:12:29:41:9d:a2:98:b8:ac:96:a7:27:49:da:f4:93:ad:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
        Validity
            Not Before: Apr 26 14:16:08 2022 GMT
            Not After : Apr 25 14:21:08 2023 GMT
        Subject: CN=69D5B7DAB6182A0C55148BDC9B4DE2051C53967F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:4a:78:31:f0:e1:58:0f:63:c7:37:4a:e4:
                    ae:cd:30:45:0e:52:a3:71:de:81:40:85:a9:3a:68:
                    ea:32:b0:69:f2:52:9e:d6:c5:43:ba:b2:f0:da:38:
                    b1:56:d8:9e:7d:27:9f:43:e7:ff:ad:06:ef:ac:cc:
                    39:37:49:c6:6e:0f:4b:10:31:39:e8:2f:df:92:e7:
                    d7:3a:b6:9e:12:aa:25:52:a7:de:f9:de:76:1a:9a:
                    da:9a:35:5f:75:a8:d6:5c:8d:a1:fd:44:6f:dc:79:
                    9e:4f:a1:97:64:94:9f:ca:9f:7d:e1:4d:d9:5d:ae:
                    1e:ad:8a:d9:fa:a0:e2:a3:fe:1c:ad:f3:78:2b:8e:
                    35:6e:f6:10:26:29:96:0c:0f:e8:09:d3:ab:46:b5:
                    ae:3c:ad:38:72:e8:38:6c:ad:00:16:59:fe:04:24:
                    2c:92:b7:7e:10:c1:b0:c9:a4:7e:cb:fb:d6:cf:dd:
                    b8:fb:af:fc:a2:aa:9b:3a:bb:d2:e3:34:3a:7d:56:
                    cd:76:f3:65:51:e9:ea:6d:ef:33:3a:14:f7:2b:63:
                    e0:bc:a7:31:21:27:23:a1:3c:15:52:85:16:f2:4b:
                    48:6e:e9:02:03:4b:ff:ae:57:10:6e:c0:dd:3b:3a:
                    a6:c3:4d:c7:2f:df:48:d4:bc:1b:04:81:22:d2:eb:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D5:B7:DA:B6:18:2A:0C:55:14:8B:DC:9B:4D:E2:05:1C:53:96:7F
            X509v3 Authority Key Identifier:
                keyid:C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e31302e302f32342d3234203d3e20323638333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:01:a5:61:be:01:0d:31:1e:3a:c6:9d:ce:13:3d:bb:a7:49:
         70:2f:ca:2d:60:39:77:41:8e:a8:06:91:95:1b:96:5d:bd:44:
         81:6f:75:b4:55:8d:5f:77:5e:ea:11:06:7d:b1:2e:d9:8d:6e:
         c4:d7:40:34:c2:6d:9d:d6:11:24:c0:45:07:2b:a9:60:55:d8:
         23:c9:b8:7e:5f:f3:fb:1e:9e:6b:b0:90:69:f0:b0:35:46:4d:
         da:48:be:bd:96:a9:a3:f7:5e:07:a3:1a:ba:2b:76:2a:8b:19:
         5b:42:7d:0a:49:9a:0a:8d:31:f0:22:0e:23:56:e3:3a:4a:bb:
         72:dc:3d:7f:67:9e:ab:ad:25:c1:a1:69:a6:67:9e:07:2a:c6:
         69:7c:90:03:7d:a5:0a:06:57:df:cc:d3:1d:e1:15:a0:84:fe:
         84:0a:2f:a3:16:ab:97:09:8c:ab:87:aa:8a:66:b8:4c:78:2f:
         7a:34:e1:96:e6:d8:44:ee:57:e0:60:e9:20:db:45:eb:3f:7b:
         54:c2:0e:fc:3e:32:d2:cb:55:57:ac:e7:b6:41:1d:90:ae:df:
         8a:f5:d8:e9:ba:85:9a:97:d8:9f:42:66:d7:ee:21:91:c5:ce:
         d9:b5:92:24:16:01:74:6e:a0:b9:ad:74:bf:e9:d8:37:45:12:
         1e:5e:05:9c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIom9EilBnaKYuKyWpydJ2vSTrS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYwNjYxMjI2MjBFOUUxNjYxRUY4QjkwODIzQUY2RDE2
Q0Q3REE5ODAeFw0yMjA0MjYxNDE2MDhaFw0yMzA0MjUxNDIxMDhaMDMxMTAvBgNV
BAMTKDY5RDVCN0RBQjYxODJBMEM1NTE0OEJEQzlCNERFMjA1MUM1Mzk2N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeZkp4MfDhWA9jxzdK5K7NMEUO
UqNx3oFAhak6aOoysGnyUp7WxUO6svDaOLFW2J59J59D5/+tBu+szDk3ScZuD0sQ
MTnoL9+S59c6tp4SqiVSp9753nYamtqaNV91qNZcjaH9RG/ceZ5PoZdklJ/Kn33h
Tdldrh6titn6oOKj/hyt83grjjVu9hAmKZYMD+gJ06tGta48rThy6DhsrQAWWf4E
JCySt34QwbDJpH7L+9bP3bj7r/yiqps6u9LjNDp9Vs1282VR6ept7zM6FPcrY+C8
pzEhJyOhPBVShRbyS0hu6QIDS/+uVxBuwN07OqbDTccv30jUvBsEgSLS60UrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUadW32rYYKgxVFIvcm03iBRxTln8wHwYDVR0j
BBgwFoAUxgZhImIOnhZh74uQgjr20WzX2pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFprUVVxQ2RVREhoUnFKR1hzSlB2djJpMlFhejZ5TVVLQ2gzVGNXZzlL
RTkvMC9DNjA2NjEyMjYyMEU5RTE2NjFFRjhCOTA4MjNBRjZEMTZDRDdEQTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2MDY2MTIyNjIwRTlFMTY2
MUVGOEI5MDgyM0FGNkQxNkNEN0RBOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0haa1FVcUNkVURIaFJxSkdYc0pQdnYyaTJRYXo2eU1VS0NoM1RjV2c5S0U5LzAv
MzQzNTJlMzIzMzM5MmUzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe8KMA0GCSqGSIb3DQEBCwUAA4IBAQBrAaVhvgEN
MR46xp3OEz27p0lwL8otYDl3QY6oBpGVG5ZdvUSBb3W0VY1fd17qEQZ9sS7ZjW7E
10A0wm2d1hEkwEUHK6lgVdgjybh+X/P7Hp5rsJBp8LA1Rk3aSL69lqmj914Hoxq6
K3YqixlbQn0KSZoKjTHwIg4jVuM6Srty3D1/Z56rrSXBoWmmZ54HKsZpfJADfaUK
BlffzNMd4RWghP6ECi+jFquXCYyrh6qKZrhMeC96NOGW5thE7lfgYOkg20XrP3tU
wg78PjLSy1VXrOe2QR2Qrt+K9djpuoWal9ifQmbX7iGRxc7ZtZIkFgF0bqC5rXS/
6dg3RRIeXgWc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org