Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38352e302f32342d3234203d3e20323637303637.roa
File:                     34352e3232382e38352e302f32342d3234203d3e20323637303637.roa (raw, json)
Hash identifier:          b7r86BxH8R979eul6qQbXP7iSxjP0HbOPGoe1Yaxqpg=
Subject key identifier:   8F:7F:B7:12:FA:52:7F:80:EF:26:8C:10:13:73:05:45:FF:01:4E:94
Certificate issuer:       /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial:       6A22EA8D2834C457ED7EA4B76B3A77AF79FAC016
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38352e302f32342d3234203d3e20323637303637.roa
Signing time:             Fri 24 Mar 2023 14:08:25 +0000
ROA not before:           Fri 24 Mar 2023 14:03:25 +0000
ROA not after:            Fri 22 Mar 2024 14:08:25 +0000
asID:                     267067
IP address blocks:        45.228.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:22:ea:8d:28:34:c4:57:ed:7e:a4:b7:6b:3a:77:af:79:fa:c0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
        Validity
            Not Before: Mar 24 14:03:25 2023 GMT
            Not After : Mar 22 14:08:25 2024 GMT
        Subject: CN=8F7FB712FA527F80EF268C1013730545FF014E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7b:46:e8:85:18:c9:ef:b3:13:90:a5:73:fc:
                    39:00:47:88:ee:ac:7f:75:ec:ff:a3:9a:a9:09:32:
                    37:c3:74:17:d9:56:47:5b:9c:fc:20:f9:48:57:5e:
                    44:74:9b:36:71:13:8e:cd:c8:bd:cf:95:56:90:39:
                    f8:84:73:ef:59:aa:30:ed:02:e5:26:1c:e3:46:63:
                    60:a0:d1:2d:25:ff:c0:a3:f0:b9:a8:30:fa:75:70:
                    17:44:d5:d9:42:26:fb:cf:44:0f:88:0a:fd:8b:e0:
                    52:9a:33:ec:54:dc:6b:52:b3:87:d4:cf:26:02:64:
                    62:78:4c:e4:aa:69:1c:b2:fc:0b:f1:73:49:7d:c4:
                    e6:8e:56:f2:e4:fa:20:a0:b6:d2:aa:85:a2:b9:ca:
                    7f:80:46:07:0d:fe:85:34:e4:05:06:39:7b:eb:a9:
                    a5:a3:80:46:b8:55:3a:b7:4e:dd:18:c3:e9:10:ae:
                    2c:eb:3c:a5:55:fa:e2:7c:ae:9c:ac:f1:f6:6c:47:
                    ae:8b:b0:63:7c:92:24:87:9f:d9:01:2d:1e:55:0a:
                    7e:8e:22:e9:9d:01:b2:c8:2d:42:37:c5:bf:50:e9:
                    57:3f:c8:7f:51:f7:4e:2c:c9:90:ae:49:77:6b:4c:
                    a6:30:4a:0c:96:ca:55:16:1f:08:23:ce:87:f1:b3:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7F:B7:12:FA:52:7F:80:EF:26:8C:10:13:73:05:45:FF:01:4E:94
            X509v3 Authority Key Identifier:
                keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38352e302f32342d3234203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e9:e3:41:93:ac:95:72:74:60:1f:9f:9c:5a:b4:64:ae:ab:
         28:67:61:8b:71:4e:df:8d:b0:b4:16:f6:52:bc:c6:db:21:2c:
         89:18:77:d1:36:01:e4:0d:86:b0:2a:53:6a:bc:1a:ce:f3:84:
         1f:7c:3b:f4:82:17:7f:dc:8f:71:69:54:a9:aa:c8:67:a1:02:
         71:9a:1b:7e:1f:51:fe:0e:1f:27:4f:a6:9d:3a:3d:a1:f6:c0:
         40:bc:26:dd:82:a6:7f:10:aa:14:d1:a6:50:60:25:c4:0f:1d:
         57:35:d5:0a:6d:b8:f2:48:18:27:7d:ab:e5:38:65:50:3d:ac:
         dd:ee:34:70:7d:24:2e:9a:12:48:ef:e2:51:a1:21:fc:ac:b0:
         c1:f3:14:7e:1c:33:16:4f:eb:c1:b2:e9:76:6c:f8:60:0c:51:
         2d:32:25:cf:ec:c3:2b:c6:13:d7:92:27:7f:d8:b0:58:65:f6:
         a3:6a:47:22:f2:ca:ce:af:3e:58:77:46:81:d2:98:dd:19:c1:
         c5:b7:eb:78:25:13:81:67:49:95:62:33:3c:a5:93:73:2f:bc:
         f9:f5:c9:39:d7:20:90:04:a9:24:96:2d:e9:00:4c:0d:a6:e6:
         4e:c2:2e:44:97:7f:d4:94:4f:68:8a:8d:0b:3e:1b:93:9e:47:
         4d:51:7b:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaiLqjSg0xFftfqS3azp3r3n6wBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE2NDVCNEMzMDREQjI1NEI1QkY2NjY5QTkzMEEyOTQ3
ODBEQzQ5QjAeFw0yMzAzMjQxNDAzMjVaFw0yNDAzMjIxNDA4MjVaMDMxMTAvBgNV
BAMTKDhGN0ZCNzEyRkE1MjdGODBFRjI2OEMxMDEzNzMwNTQ1RkYwMTRFOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDze0bohRjJ77MTkKVz/DkAR4ju
rH917P+jmqkJMjfDdBfZVkdbnPwg+UhXXkR0mzZxE47NyL3PlVaQOfiEc+9ZqjDt
AuUmHONGY2Cg0S0l/8Cj8LmoMPp1cBdE1dlCJvvPRA+ICv2L4FKaM+xU3GtSs4fU
zyYCZGJ4TOSqaRyy/Avxc0l9xOaOVvLk+iCgttKqhaK5yn+ARgcN/oU05AUGOXvr
qaWjgEa4VTq3Tt0Yw+kQrizrPKVV+uJ8rpys8fZsR66LsGN8kiSHn9kBLR5VCn6O
IumdAbLILUI3xb9Q6Vc/yH9R904syZCuSXdrTKYwSgyWylUWHwgjzofxs+CzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUj3+3EvpSf4DvJowQE3MFRf8BTpQwHwYDVR0j
BBgwFoAUqmRbTDBNslS1v2ZpqTCilHgNxJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHFhdEdrRjRRRFA2U2V0N1VjYlhuR0dqMlRrZWhEQloyNExHaWFMQWJk
enUvMC9BQTY0NUI0QzMwNERCMjU0QjVCRjY2NjlBOTMwQTI5NDc4MERDNDlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNjQ1QjRDMzA0REIyNTRC
NUJGNjY2OUE5MzBBMjk0NzgwREM0OUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxYXRHa0Y0UURQNlNldDdVY2JYbkdHajJUa2VoREJaMjRMR2lhTEFiZHp1LzAv
MzQzNTJlMzIzMjM4MmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeRVMA0GCSqGSIb3DQEBCwUAA4IBAQBn6eNBk6yV
cnRgH5+cWrRkrqsoZ2GLcU7fjbC0FvZSvMbbISyJGHfRNgHkDYawKlNqvBrO84Qf
fDv0ghd/3I9xaVSpqshnoQJxmht+H1H+Dh8nT6adOj2h9sBAvCbdgqZ/EKoU0aZQ
YCXEDx1XNdUKbbjySBgnfavlOGVQPazd7jRwfSQumhJI7+JRoSH8rLDB8xR+HDMW
T+vBsul2bPhgDFEtMiXP7MMrxhPXkid/2LBYZfajakci8srOrz5Yd0aB0pjdGcHF
t+t4JROBZ0mVYjM8pZNzL7z59ck51yCQBKkkli3pAEwNpuZOwi5El3/UlE9oio0L
PhuTnkdNUXvH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org