Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32332d3233203d3e20323637303637.roa
File:                     34352e3232382e38342e302f32332d3233203d3e20323637303637.roa (raw, json)
Hash identifier:          1bgjsDY/43ipfIatXCHno40suBZGoK9MbQGDMx8Kw5A=
Subject key identifier:   A5:6E:62:13:68:7F:62:06:FF:00:2F:4C:50:35:6B:43:25:7F:5D:08
Certificate issuer:       /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial:       0D3D4CD38BAA18B85701762C507E86D50D37625B
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32332d3233203d3e20323637303637.roa
Signing time:             Fri 23 Feb 2024 14:40:52 +0000
ROA not before:           Fri 23 Feb 2024 14:35:52 +0000
ROA not after:            Fri 21 Feb 2025 14:40:52 +0000
asID:                     267067
IP address blocks:        45.228.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3d:4c:d3:8b:aa:18:b8:57:01:76:2c:50:7e:86:d5:0d:37:62:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
        Validity
            Not Before: Feb 23 14:35:52 2024 GMT
            Not After : Feb 21 14:40:52 2025 GMT
        Subject: CN=A56E6213687F6206FF002F4C50356B43257F5D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:89:d2:0d:af:3a:9d:7c:73:36:7b:cc:bb:3b:
                    f9:04:ac:f5:3f:20:cf:ee:01:d5:d7:f9:26:ab:ec:
                    b7:b7:53:5f:58:1c:d0:bb:ec:53:42:da:fc:2c:dd:
                    d2:75:7a:f7:75:55:4e:b0:dd:ca:14:73:71:a8:ea:
                    c4:91:a8:76:95:e2:be:d1:1c:88:ad:e2:58:a5:18:
                    57:43:b8:f7:b4:7d:18:d9:d3:07:52:ba:a3:fa:23:
                    bb:40:bc:0c:44:e0:54:d5:76:60:fe:c3:bb:bc:9d:
                    fb:cc:61:d7:60:44:e5:77:b5:09:e1:45:05:d4:92:
                    2d:fc:92:4a:cc:77:ec:1d:da:f0:af:e2:7f:49:74:
                    3e:3f:aa:df:8a:fc:dc:53:dc:77:d2:44:cb:d2:1c:
                    d3:8e:d8:aa:62:41:6a:a6:88:b8:46:7b:66:4b:da:
                    72:62:2c:02:ad:d2:6b:40:c2:88:0b:7d:03:e6:87:
                    30:af:72:35:66:76:9f:53:f9:56:0f:b9:a5:66:25:
                    6a:a2:ad:77:cf:33:6f:44:5d:9a:4f:35:97:0e:86:
                    5e:f5:ca:f9:84:3e:44:be:63:cb:13:1c:06:db:99:
                    27:f0:c8:69:ce:3f:ff:67:ad:1f:69:77:a7:f7:86:
                    e1:e9:80:d8:43:86:02:4a:65:f6:74:97:f9:2f:78:
                    96:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6E:62:13:68:7F:62:06:FF:00:2F:4C:50:35:6B:43:25:7F:5D:08
            X509v3 Authority Key Identifier:
                keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32332d3233203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:6c:91:d3:20:e6:86:b7:f5:9e:9e:00:14:7a:aa:5c:8d:
         7f:21:22:c3:e1:72:e1:dc:56:ca:86:fa:05:8f:3d:f9:b6:ab:
         44:d0:dc:7f:f0:9f:fc:0d:84:ad:cf:a7:e9:96:49:e9:94:6c:
         69:b6:97:89:2d:c2:b5:5b:45:70:c6:05:4b:74:e6:5c:c3:ca:
         dc:20:53:63:5b:2e:57:d9:7b:1b:aa:78:3d:4f:ba:bf:c9:0e:
         6f:dc:b2:59:6a:6e:19:75:85:ce:82:a4:7e:81:4d:fe:30:7a:
         d9:4d:96:c3:4f:70:28:4a:7f:1c:ad:95:57:fb:64:b3:94:8b:
         38:d8:d6:4f:e1:b7:78:e6:5a:f7:41:89:fc:b6:b3:8e:59:23:
         99:2b:1a:a6:a9:bf:9a:10:c5:c3:0e:d9:ea:84:be:8f:81:52:
         44:42:54:04:ab:26:3d:cb:5e:f0:44:9f:02:ab:0a:8e:86:bd:
         c9:81:59:ad:5b:08:2f:cf:cd:47:5f:2f:9a:ba:e6:b3:2a:2f:
         19:f8:9e:7d:e3:15:08:93:f1:1a:36:f7:35:7a:77:90:af:71:
         20:d1:19:1b:2f:9e:9e:73:91:2a:6e:07:b4:17:2e:67:66:5a:
         bd:25:27:05:80:9f:7e:86:4a:43:c9:fe:ec:62:49:f9:00:f2:
         b0:b3:15:cc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDT1M04uqGLhXAXYsUH6G1Q03YlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE2NDVCNEMzMDREQjI1NEI1QkY2NjY5QTkzMEEyOTQ3
ODBEQzQ5QjAeFw0yNDAyMjMxNDM1NTJaFw0yNTAyMjExNDQwNTJaMDMxMTAvBgNV
BAMTKEE1NkU2MjEzNjg3RjYyMDZGRjAwMkY0QzUwMzU2QjQzMjU3RjVEMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsidINrzqdfHM2e8y7O/kErPU/
IM/uAdXX+Sar7Le3U19YHNC77FNC2vws3dJ1evd1VU6w3coUc3Go6sSRqHaV4r7R
HIit4lilGFdDuPe0fRjZ0wdSuqP6I7tAvAxE4FTVdmD+w7u8nfvMYddgROV3tQnh
RQXUki38kkrMd+wd2vCv4n9JdD4/qt+K/NxT3HfSRMvSHNOO2KpiQWqmiLhGe2ZL
2nJiLAKt0mtAwogLfQPmhzCvcjVmdp9T+VYPuaVmJWqirXfPM29EXZpPNZcOhl71
yvmEPkS+Y8sTHAbbmSfwyGnOP/9nrR9pd6f3huHpgNhDhgJKZfZ0l/kveJb7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpW5iE2h/Ygb/AC9MUDVrQyV/XQgwHwYDVR0j
BBgwFoAUqmRbTDBNslS1v2ZpqTCilHgNxJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHFhdEdrRjRRRFA2U2V0N1VjYlhuR0dqMlRrZWhEQloyNExHaWFMQWJk
enUvMC9BQTY0NUI0QzMwNERCMjU0QjVCRjY2NjlBOTMwQTI5NDc4MERDNDlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNjQ1QjRDMzA0REIyNTRC
NUJGNjY2OUE5MzBBMjk0NzgwREM0OUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxYXRHa0Y0UURQNlNldDdVY2JYbkdHajJUa2VoREJaMjRMR2lhTEFiZHp1LzAv
MzQzNTJlMzIzMjM4MmUzODM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzAzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeRUMA0GCSqGSIb3DQEBCwUAA4IBAQCqImyR0yDm
hrf1np4AFHqqXI1/ISLD4XLh3FbKhvoFjz35tqtE0Nx/8J/8DYStz6fplknplGxp
tpeJLcK1W0VwxgVLdOZcw8rcIFNjWy5X2Xsbqng9T7q/yQ5v3LJZam4ZdYXOgqR+
gU3+MHrZTZbDT3AoSn8crZVX+2SzlIs42NZP4bd45lr3QYn8trOOWSOZKxqmqb+a
EMXDDtnqhL6PgVJEQlQEqyY9y17wRJ8CqwqOhr3JgVmtWwgvz81HXy+auuazKi8Z
+J594xUIk/EaNvc1eneQr3Eg0RkbL56ec5Eqbge0Fy5nZlq9JScFgJ9+hkpDyf7s
Ykn5APKwsxXM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org