Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/0/34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa
File:                     34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (raw, json)
Hash identifier:          ScpocPfLaWex+U/wibsAooby5GrFiiCi8DqHNyllVwg=
Subject key identifier:   2A:60:5A:BC:C5:95:B5:EB:AA:D7:6D:2D:03:BE:D5:AC:F7:97:92:B7
Certificate issuer:       /CN=FC249576766C8B2426656C425843715C26193ED7
Certificate serial:       2D91E24847062BCC40280D68F653948A43921928
Authority key identifier: FC:24:95:76:76:6C:8B:24:26:65:6C:42:58:43:71:5C:26:19:3E:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC249576766C8B2426656C425843715C26193ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/0/34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa
Signing time:             Thu 07 Mar 2024 21:52:28 +0000
ROA not before:           Thu 07 Mar 2024 21:47:28 +0000
ROA not after:            Thu 06 Mar 2025 21:52:28 +0000
asID:                     269473
IP address blocks:        45.187.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:91:e2:48:47:06:2b:cc:40:28:0d:68:f6:53:94:8a:43:92:19:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC249576766C8B2426656C425843715C26193ED7
        Validity
            Not Before: Mar  7 21:47:28 2024 GMT
            Not After : Mar  6 21:52:28 2025 GMT
        Subject: CN=2A605ABCC595B5EBAAD76D2D03BED5ACF79792B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:1a:56:05:18:c0:db:1e:bb:19:4e:a5:2a:
                    72:4b:5a:2a:7c:96:df:65:66:72:c9:a9:e7:3e:2f:
                    e4:e8:2e:f5:14:39:ca:5e:2e:93:0a:d6:e0:cd:b5:
                    95:89:cb:3a:88:78:b6:f1:02:96:78:4d:63:75:93:
                    0e:9b:8e:3a:20:67:fc:41:8e:3f:c9:fd:ff:07:83:
                    fa:06:b9:0b:d3:bb:78:b1:74:7a:12:0f:84:c8:f0:
                    ca:f3:cf:31:ad:7e:e7:1a:4f:43:53:c7:68:8a:44:
                    dd:b1:49:2e:d0:a1:54:49:31:82:eb:0a:6a:64:32:
                    57:30:40:3d:9a:55:6e:02:d6:08:dd:4c:81:1c:f4:
                    47:3c:6b:78:c0:60:ce:10:49:53:85:48:76:91:c9:
                    65:3f:3e:21:23:a8:e8:f7:3e:21:4e:63:8a:d3:a2:
                    34:c0:dd:43:64:a8:66:45:b0:4f:ff:cc:3b:0b:3f:
                    06:ff:bf:f8:65:8f:ea:9e:5b:3a:76:75:3d:de:05:
                    af:c5:3a:bb:bd:31:dd:44:c4:f5:a4:70:ec:40:dc:
                    3a:5c:c2:d6:e1:20:c2:7b:13:6c:a7:36:48:b7:db:
                    66:c4:bc:9d:f6:3c:6b:56:63:48:99:09:3a:28:4e:
                    22:8a:03:f8:99:11:72:28:71:40:88:db:82:fb:5e:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:60:5A:BC:C5:95:B5:EB:AA:D7:6D:2D:03:BE:D5:AC:F7:97:92:B7
            X509v3 Authority Key Identifier:
                keyid:FC:24:95:76:76:6C:8B:24:26:65:6C:42:58:43:71:5C:26:19:3E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/0/FC249576766C8B2426656C425843715C26193ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC249576766C8B2426656C425843715C26193ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/0/34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c2:9c:55:74:25:81:0c:3b:6d:0b:da:7a:3d:9f:af:81:f0:
         8f:76:da:f5:1e:55:c9:57:f7:15:dc:a2:b4:52:62:49:47:f6:
         c8:b0:6e:64:3d:02:c6:4f:a9:9d:03:b6:0e:c1:b3:68:3d:05:
         c6:04:f4:2e:d0:ef:de:9b:ec:d0:f5:fc:08:1b:3f:01:f5:d9:
         5a:05:a6:a9:2e:f1:c0:5f:89:26:23:e7:f3:8b:c4:14:e1:40:
         08:85:7d:79:49:0c:9d:2a:c2:32:e1:30:01:bd:9b:70:8f:9f:
         06:b7:6e:17:74:20:28:37:63:81:f9:bc:48:43:fa:d9:02:57:
         12:61:ae:39:c8:94:5f:b2:4b:c4:9b:97:1e:3a:b7:9f:a9:54:
         b8:31:2d:73:6e:f1:a2:bd:e8:bf:bf:95:07:47:83:1f:e5:dc:
         2b:2b:cb:8f:70:aa:7c:5b:65:36:91:72:57:ef:de:a7:72:e9:
         7b:35:e7:fe:a2:73:be:94:3b:7f:f2:13:a6:0a:66:54:fd:90:
         f9:04:c2:be:95:b4:14:23:f7:81:fe:19:97:a8:9a:e6:ac:e0:
         a3:f5:22:dd:f2:31:42:5e:0f:08:17:0b:48:d0:94:f4:8d:3b:
         b3:46:77:fb:34:80:bd:73:48:f1:74:b9:07:c7:a7:31:64:d2:
         e5:b1:60:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULZHiSEcGK8xAKA1o9lOUikOSGSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMyNDk1NzY3NjZDOEIyNDI2NjU2QzQyNTg0MzcxNUMy
NjE5M0VENzAeFw0yNDAzMDcyMTQ3MjhaFw0yNTAzMDYyMTUyMjhaMDMxMTAvBgNV
BAMTKDJBNjA1QUJDQzU5NUI1RUJBQUQ3NkQyRDAzQkVENUFDRjc5NzkyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16BpWBRjA2x67GU6lKnJLWip8
lt9lZnLJqec+L+ToLvUUOcpeLpMK1uDNtZWJyzqIeLbxApZ4TWN1kw6bjjogZ/xB
jj/J/f8Hg/oGuQvTu3ixdHoSD4TI8MrzzzGtfucaT0NTx2iKRN2xSS7QoVRJMYLr
CmpkMlcwQD2aVW4C1gjdTIEc9Ec8a3jAYM4QSVOFSHaRyWU/PiEjqOj3PiFOY4rT
ojTA3UNkqGZFsE//zDsLPwb/v/hlj+qeWzp2dT3eBa/FOru9Md1ExPWkcOxA3Dpc
wtbhIMJ7E2ynNki322bEvJ32PGtWY0iZCTooTiKKA/iZEXIocUCI24L7XlxjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKmBavMWVteuq120tA77VrPeXkrcwHwYDVR0j
BBgwFoAU/CSVdnZsiyQmZWxCWENxXCYZPtcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VY
RjkvMC9GQzI0OTU3Njc2NkM4QjI0MjY2NTZDNDI1ODQzNzE1QzI2MTkzRUQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDMjQ5NTc2NzY2QzhCMjQy
NjY1NkM0MjU4NDM3MTVDMjYxOTNFRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hydlR4YTJZTnhZeVBwM2M1UHE1MXVvM1dHbmp4TWhuTWpIc0J2ZDdlWEY5LzAv
MzQzNTJlMzEzODM3MmUzMTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtu6owDQYJKoZIhvcNAQELBQADggEBAEzCnFV0
JYEMO20L2no9n6+B8I922vUeVclX9xXcorRSYklH9siwbmQ9AsZPqZ0Dtg7Bs2g9
BcYE9C7Q796b7ND1/AgbPwH12VoFpqku8cBfiSYj5/OLxBThQAiFfXlJDJ0qwjLh
MAG9m3CPnwa3bhd0ICg3Y4H5vEhD+tkCVxJhrjnIlF+yS8Sblx46t5+pVLgxLXNu
8aK96L+/lQdHgx/l3Csry49wqnxbZTaRclfv3qdy6Xs15/6ic76UO3/yE6YKZlT9
kPkEwr6VtBQj94H+GZeomuas4KP1It3yMUJeDwgXC0jQlPSNO7NGd/s0gL1zSPF0
uQfHpzFk0uWxYGo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org