Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36352e302f32342d3234203d3e20323638303036.roa
File:                     34352e3136372e36352e302f32342d3234203d3e20323638303036.roa (raw, json)
Hash identifier:          MbYOtgontUBNz6DZ953OUdb1TIapPTy80ydYhkvmOHg=
Subject key identifier:   FC:6D:44:73:2E:2C:80:31:4F:7C:72:C0:AA:BD:D1:7F:40:E7:96:E1
Certificate issuer:       /CN=4BF5B35D2D18CCAFE6BF20BA0CB468578089836F
Certificate serial:       65D723F1E9158901343E312ADD18357B81A707C9
Authority key identifier: 4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36352e302f32342d3234203d3e20323638303036.roa
Signing time:             Tue 23 May 2023 12:20:45 +0000
ROA not before:           Tue 23 May 2023 12:15:45 +0000
ROA not after:            Tue 21 May 2024 12:20:45 +0000
asID:                     268006
IP address blocks:        45.167.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d7:23:f1:e9:15:89:01:34:3e:31:2a:dd:18:35:7b:81:a7:07:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B35D2D18CCAFE6BF20BA0CB468578089836F
        Validity
            Not Before: May 23 12:15:45 2023 GMT
            Not After : May 21 12:20:45 2024 GMT
        Subject: CN=FC6D44732E2C80314F7C72C0AABDD17F40E796E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:57:96:ae:6e:ae:dd:ff:ba:be:bd:d3:2e:
                    bd:b5:37:9d:a1:f8:1b:1b:f4:b5:13:62:03:3b:6b:
                    a6:e1:61:97:cb:ba:b5:98:a9:e0:1f:dc:0d:ac:8a:
                    22:fe:ed:1b:7f:3c:99:ff:32:e5:fd:28:29:5e:06:
                    f3:45:11:e2:ea:d3:87:d3:80:6b:35:bd:e2:de:6b:
                    2f:c0:10:fa:97:70:75:d1:71:cc:91:b4:02:96:dc:
                    4e:e5:5e:e0:be:09:0f:73:d6:7e:ee:df:38:b8:ee:
                    c4:bc:05:5a:b0:4f:89:0e:0c:21:44:0d:0c:90:ac:
                    ac:a4:93:86:69:3f:5e:16:4f:6e:37:a6:1b:9c:e9:
                    7c:75:24:40:97:90:9e:8b:27:99:8c:4e:6c:24:49:
                    df:c4:38:0a:6c:60:96:57:62:26:35:f3:d4:ce:26:
                    b0:59:5e:fa:ad:aa:49:e3:2b:b5:f0:cf:c4:ae:03:
                    cf:36:c6:34:f9:99:be:c0:69:02:29:22:e2:90:e9:
                    61:0c:cb:56:b4:f0:7e:53:f8:b8:6b:1a:f4:f9:6b:
                    65:bd:90:80:6c:51:f4:f0:97:55:34:3b:1b:9b:53:
                    c9:8f:80:e8:a0:9a:77:00:91:ac:7b:09:22:f6:e1:
                    46:9e:2a:c3:63:0a:a7:54:cf:4b:c9:7b:2c:13:50:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:44:73:2E:2C:80:31:4F:7C:72:C0:AA:BD:D1:7F:40:E7:96:E1
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36352e302f32342d3234203d3e20323638303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:6d:5c:5c:6f:20:10:53:ad:0b:93:73:69:8f:eb:55:81:96:
         f0:2d:4e:53:11:e7:4f:da:65:34:f9:14:b8:ac:0a:6e:9c:d1:
         a3:5f:b0:cc:46:e6:95:83:f3:db:f7:6f:87:44:ec:ab:13:fa:
         6b:bf:f1:7b:bb:73:b4:d8:ef:e9:e0:bc:49:fa:08:c9:08:61:
         62:29:a7:b6:a2:49:9a:c2:b2:4d:6f:e0:d5:76:79:ba:29:af:
         fb:99:f6:2b:cd:da:31:c9:6c:27:e3:7f:57:35:06:e0:73:d8:
         a1:c4:38:6f:34:d0:ab:72:f7:cf:c1:95:35:5d:f0:64:55:b1:
         a2:72:84:6b:cd:a3:43:8b:2e:dd:69:8f:b1:5a:8d:c4:94:87:
         50:43:f9:b1:5d:c1:d3:15:75:5b:62:6f:03:75:0e:f4:85:36:
         05:d3:36:91:65:59:24:c9:ff:2c:e6:55:7f:c5:73:42:cd:53:
         78:41:40:15:7a:1e:24:aa:74:8c:1e:cc:f0:b6:fd:19:23:43:
         c6:9c:e6:0f:d7:9e:bb:6c:5f:03:a6:b0:3a:34:41:db:33:86:
         15:e5:8a:72:96:33:c9:21:f7:5e:42:63:77:50:bc:74:1a:d7:
         c2:b6:ce:19:fc:9b:b2:50:ac:68:85:39:7a:49:86:de:0c:e7:
         41:2b:da:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZdcj8ekViQE0PjEq3Rg1e4GnB8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGNUIzNUQyRDE4Q0NBRkU2QkYyMEJBMENCNDY4NTc4
MDg5ODM2RjAeFw0yMzA1MjMxMjE1NDVaFw0yNDA1MjExMjIwNDVaMDMxMTAvBgNV
BAMTKEZDNkQ0NDczMkUyQzgwMzE0RjdDNzJDMEFBQkREMTdGNDBFNzk2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22leWrm6u3f+6vr3TLr21N52h
+Bsb9LUTYgM7a6bhYZfLurWYqeAf3A2siiL+7Rt/PJn/MuX9KCleBvNFEeLq04fT
gGs1veLeay/AEPqXcHXRccyRtAKW3E7lXuC+CQ9z1n7u3zi47sS8BVqwT4kODCFE
DQyQrKykk4ZpP14WT243phuc6Xx1JECXkJ6LJ5mMTmwkSd/EOApsYJZXYiY189TO
JrBZXvqtqknjK7Xwz8SuA882xjT5mb7AaQIpIuKQ6WEMy1a08H5T+LhrGvT5a2W9
kIBsUfTwl1U0OxubU8mPgOigmncAkax7CSL24UaeKsNjCqdUz0vJeywTUEP5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/G1Ecy4sgDFPfHLAqr3Rf0DnluEwHwYDVR0j
BBgwFoAUS/WzXS0YzK/mvyC6DLRoV4CJg28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGdnUTJKVXQ1QWQ4RHp0c3U1ZkhRcVAxdldUUVNHZkVvNG1MQVd5Z2R2
RVcvMC80QkY1QjM1RDJEMThDQ0FGRTZCRjIwQkEwQ0I0Njg1NzgwODk4MzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCRjVCMzVEMkQxOENDQUZF
NkJGMjBCQTBDQjQ2ODU3ODA4OTgzNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hnZ1EySlV0NUFkOER6dHN1NWZIUXFQMXZXVFFTR2ZFbzRtTEFXeWdkdkVXLzAv
MzQzNTJlMzEzNjM3MmUzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALadBMA0GCSqGSIb3DQEBCwUAA4IBAQAAbVxcbyAQ
U60Lk3Npj+tVgZbwLU5TEedP2mU0+RS4rApunNGjX7DMRuaVg/Pb92+HROyrE/pr
v/F7u3O02O/p4LxJ+gjJCGFiKae2okmawrJNb+DVdnm6Ka/7mfYrzdoxyWwn439X
NQbgc9ihxDhvNNCrcvfPwZU1XfBkVbGicoRrzaNDiy7daY+xWo3ElIdQQ/mxXcHT
FXVbYm8DdQ70hTYF0zaRZVkkyf8s5lV/xXNCzVN4QUAVeh4kqnSMHszwtv0ZI0PG
nOYP1567bF8DprA6NEHbM4YV5YpyljPJIfdeQmN3ULx0GtfCts4Z/JuyUKxohTl6
SYbeDOdBK9qT
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org