Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32342d3234203d3e20323637343230.roa
File:                     34352e3233352e3136302e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          Ky//orbX0WfdV5xREELR+uaC3UR0j8p0qt0eqaMgm5c=
Subject key identifier:   14:90:36:FB:E8:21:B6:86:6D:C9:DF:51:8F:E9:86:77:98:66:B5:85
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       4746B7732D47EC2AFBCE524FEE420C5EA2681F48
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32342d3234203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:58:59 +0000
ROA not before:           Wed 28 Feb 2024 13:53:59 +0000
ROA not after:            Wed 26 Feb 2025 13:58:59 +0000
asID:                     267420
IP address blocks:        45.235.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:46:b7:73:2d:47:ec:2a:fb:ce:52:4f:ee:42:0c:5e:a2:68:1f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:53:59 2024 GMT
            Not After : Feb 26 13:58:59 2025 GMT
        Subject: CN=149036FBE821B6866DC9DF518FE986779866B585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:5d:36:e5:07:6f:e3:34:98:a3:cf:9d:46:
                    db:f8:0f:c5:b5:c6:b0:f4:b2:9a:4c:c2:c4:7b:d3:
                    ca:4e:57:17:32:d4:fb:33:5c:6a:b0:6f:ed:33:10:
                    1b:ba:bb:57:b1:51:33:9f:2d:24:43:f3:ff:e5:15:
                    7e:1f:50:4e:df:8a:ab:e9:2b:8f:ab:da:27:5b:8e:
                    c6:62:34:62:ea:81:11:41:8a:e3:00:36:e4:cc:d6:
                    61:bb:0d:0f:c9:08:93:11:78:84:3e:66:ec:2f:14:
                    86:0c:05:80:be:4c:91:06:08:e8:96:9b:7f:e5:78:
                    d6:4f:ca:2b:7b:e7:ba:2d:65:57:64:be:58:95:74:
                    24:11:df:84:b7:ce:ed:18:24:9d:7a:6d:15:dd:df:
                    44:4f:da:94:cc:84:7b:14:a6:8a:95:58:89:39:b6:
                    e7:7d:71:db:e8:e1:5e:77:f6:c1:7b:2a:2c:e9:e7:
                    48:c9:d0:fb:b3:12:18:09:46:86:a8:3a:97:79:1c:
                    2c:fe:e2:3a:d1:27:c2:8c:50:96:f8:46:fe:7f:c3:
                    6f:a7:78:dd:5d:74:9e:4c:90:13:94:4c:b2:57:cc:
                    25:fc:59:0d:1d:7b:a7:68:0a:c9:ef:d2:0a:1a:24:
                    6c:f1:09:e6:11:e1:27:11:66:1f:39:26:79:24:cc:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:90:36:FB:E8:21:B6:86:6D:C9:DF:51:8F:E9:86:77:98:66:B5:85
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3c:93:2f:80:2f:9e:33:f3:1a:d2:bc:47:d0:ed:aa:55:5a:
         6a:cb:f6:5f:d6:82:f3:23:44:3f:3f:99:62:ff:5e:8c:11:ae:
         8a:c0:17:6a:ce:7d:15:6f:ec:58:bd:79:2f:b7:07:19:6b:21:
         fe:b0:17:01:67:67:c3:0a:b0:06:8c:40:f5:79:06:d2:40:a5:
         9f:e4:15:bd:23:e0:dd:b4:ff:c1:c1:d3:a8:8c:f9:41:7c:74:
         30:77:f9:bd:dd:21:22:24:8a:12:23:01:89:38:dd:45:ee:8c:
         89:3a:8d:8c:04:11:d4:79:08:18:38:f1:dd:34:bb:c8:35:00:
         da:ae:00:03:5c:5f:15:8c:33:ee:25:a7:33:71:6b:17:82:28:
         87:59:a3:6b:bb:a4:8e:61:65:ab:b2:a5:95:be:34:7f:44:d5:
         cd:ed:23:c2:15:47:8b:8a:75:bc:1c:96:18:54:dd:0d:95:0f:
         05:f8:f0:57:c6:f9:9e:70:d6:47:5a:e1:0f:a1:bf:67:6d:46:
         1b:19:42:d9:6c:87:e6:3a:35:6d:a0:8e:b3:c9:75:f1:f0:2c:
         2a:5b:ff:af:76:bf:ba:f1:bd:6a:1e:07:e5:ac:fd:3a:2a:6c:
         c5:d4:ef:24:52:de:f6:22:51:9e:50:c0:73:ce:9f:46:cf:0d:
         8c:e7:fd:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR0a3cy1H7Cr7zlJP7kIMXqJoH0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk5OTNFNEU3QTQ2OTQ4MkY0OERFNkM1NTdDMUJFNDE1
RTE5MkEzNDAeFw0yNDAyMjgxMzUzNTlaFw0yNTAyMjYxMzU4NTlaMDMxMTAvBgNV
BAMTKDE0OTAzNkZCRTgyMUI2ODY2REM5REY1MThGRTk4Njc3OTg2NkI1ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscF025Qdv4zSYo8+dRtv4D8W1
xrD0sppMwsR708pOVxcy1PszXGqwb+0zEBu6u1exUTOfLSRD8//lFX4fUE7fiqvp
K4+r2idbjsZiNGLqgRFBiuMANuTM1mG7DQ/JCJMReIQ+ZuwvFIYMBYC+TJEGCOiW
m3/leNZPyit757otZVdkvliVdCQR34S3zu0YJJ16bRXd30RP2pTMhHsUpoqVWIk5
tud9cdvo4V539sF7Kizp50jJ0PuzEhgJRoaoOpd5HCz+4jrRJ8KMUJb4Rv5/w2+n
eN1ddJ5MkBOUTLJXzCX8WQ0de6doCsnv0goaJGzxCeYR4ScRZh85JnkkzNv7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFJA2++ghtoZtyd9Rj+mGd5hmtYUwHwYDVR0j
BBgwFoAUyZk+TnpGlIL0jebFV8G+QV4ZKjQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC9DOTk5M0U0RTdBNDY5NDgyRjQ4REU2QzU1N0MxQkU0MTVFMTkyQTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5OTkzRTRFN0E0Njk0ODJG
NDhERTZDNTU3QzFCRTQxNUUxOTJBMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzQzNTJlMzIzMzM1MmUzMTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt66AwDQYJKoZIhvcNAQELBQADggEBAKw8ky+A
L54z8xrSvEfQ7apVWmrL9l/WgvMjRD8/mWL/XowRrorAF2rOfRVv7Fi9eS+3Bxlr
If6wFwFnZ8MKsAaMQPV5BtJApZ/kFb0j4N20/8HB06iM+UF8dDB3+b3dISIkihIj
AYk43UXujIk6jYwEEdR5CBg48d00u8g1ANquAANcXxWMM+4lpzNxaxeCKIdZo2u7
pI5hZauypZW+NH9E1c3tI8IVR4uKdbwclhhU3Q2VDwX48FfG+Z5w1kda4Q+hv2dt
RhsZQtlsh+Y6NW2gjrPJdfHwLCpb/692v7rxvWoeB+Ws/ToqbMXU7yRS3vYiUZ5Q
wHPOn0bPDYzn/co=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org