Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          wB1dwDZEPDbfyneor48VyJbk2iSvI7m7mIJOtelewnU=
Subject key identifier:   49:E7:6C:B7:21:F5:F8:5D:F6:BB:E2:AF:E4:49:71:BE:47:15:EA:64
Certificate issuer:       /CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
Certificate serial:       525A8CCF614A0E087554E7D44E313FAC6B36C78A
Authority key identifier: 75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa
Signing time:             Wed 13 Mar 2024 20:19:01 +0000
ROA not before:           Wed 13 Mar 2024 20:14:01 +0000
ROA not after:            Wed 12 Mar 2025 20:19:01 +0000
asID:                     269423
IP address blocks:        45.186.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5a:8c:cf:61:4a:0e:08:75:54:e7:d4:4e:31:3f:ac:6b:36:c7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
        Validity
            Not Before: Mar 13 20:14:01 2024 GMT
            Not After : Mar 12 20:19:01 2025 GMT
        Subject: CN=49E76CB721F5F85DF6BBE2AFE44971BE4715EA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:4b:53:39:f5:3c:41:0f:43:91:3b:41:fa:
                    05:46:51:b4:fc:c6:b8:a6:f7:3d:3e:70:ba:26:d6:
                    c8:ee:a4:ec:8e:b4:ec:cf:dd:75:3e:e0:c2:6a:11:
                    f0:20:8a:93:d8:0a:84:ae:21:69:65:70:8d:6f:c8:
                    dd:ec:60:19:03:39:cf:61:7a:39:df:1f:f5:7d:32:
                    29:da:f2:e1:0a:4c:3a:8a:b5:57:fa:31:40:8a:5f:
                    98:04:3d:fa:d3:dd:a4:ea:7c:3f:a6:ef:d1:31:09:
                    0f:57:1f:3c:e2:0c:55:53:f5:6a:f2:7e:9e:09:d9:
                    27:26:49:17:90:14:74:0a:23:41:d4:20:ee:0d:ea:
                    b2:b7:ed:57:16:50:d2:96:11:7d:01:ee:ef:b2:65:
                    da:e1:0e:5e:89:6c:3e:47:6a:71:19:92:25:2a:a6:
                    f7:5e:65:d2:68:c6:0a:c8:82:13:dc:64:e5:c5:e8:
                    b4:51:63:d1:fa:fd:76:ff:f5:0c:2f:09:52:0e:8d:
                    e5:3d:27:80:c7:8b:ad:f3:0a:c8:1d:3a:f6:07:19:
                    c2:89:d3:aa:38:f8:42:42:4a:f4:61:8b:ab:95:c4:
                    a4:ec:79:0f:61:33:cd:44:19:0a:f2:59:0b:41:5a:
                    8a:20:f1:17:cb:6a:d1:b5:9b:04:35:7e:5a:f4:14:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E7:6C:B7:21:F5:F8:5D:F6:BB:E2:AF:E4:49:71:BE:47:15:EA:64
            X509v3 Authority Key Identifier:
                keyid:75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/752DF8A511E583FD16AFDE7868B695CB08BB271E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:6f:ab:39:e9:12:75:40:3e:be:bd:fb:de:5c:d2:e8:61:0f:
         1e:6c:4d:8a:fe:32:ea:e2:ab:7d:2c:a1:bf:3f:b2:95:b7:ed:
         27:7e:ce:37:0a:32:6e:86:aa:27:c5:f3:0d:4f:0f:11:1d:04:
         07:eb:ce:83:2f:3d:ee:12:1f:fa:38:d9:7d:59:7d:f0:32:c4:
         b1:16:42:37:c2:b2:5e:83:69:23:4e:e8:6b:d3:d9:42:36:95:
         43:4a:23:58:d6:db:cc:d0:6b:20:55:fd:ea:be:35:55:51:39:
         0f:a9:44:e0:f1:47:dc:3e:16:58:c4:77:8d:76:62:ae:2b:6c:
         c6:c5:0f:d2:cd:0b:2b:9d:3f:b5:11:fd:87:ec:4f:37:40:8d:
         42:c8:2b:33:f8:20:bd:3f:9d:66:7c:8f:42:1e:26:7e:a5:14:
         4d:78:3e:cf:b2:d8:28:4f:d9:f8:81:3c:9b:1a:a5:03:1c:33:
         94:9e:2c:9d:ed:31:59:d5:3f:15:30:31:48:ce:9f:b7:ec:52:
         42:e8:20:9a:ae:57:d1:81:bb:92:d3:70:b0:43:1e:61:b3:a2:
         63:68:9c:aa:f4:27:f3:35:c9:4d:ed:89:19:b8:78:68:93:9d:
         a4:e0:a1:56:a3:41:aa:96:50:1e:86:b6:b4:a8:94:cf:1f:10:
         a1:26:2f:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUlqMz2FKDgh1VOfUTjE/rGs2x4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUyREY4QTUxMUU1ODNGRDE2QUZERTc4NjhCNjk1Q0Iw
OEJCMjcxRTAeFw0yNDAzMTMyMDE0MDFaFw0yNTAzMTIyMDE5MDFaMDMxMTAvBgNV
BAMTKDQ5RTc2Q0I3MjFGNUY4NURGNkJCRTJBRkU0NDk3MUJFNDcxNUVBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/UtTOfU8QQ9DkTtB+gVGUbT8
xrim9z0+cLom1sjupOyOtOzP3XU+4MJqEfAgipPYCoSuIWllcI1vyN3sYBkDOc9h
ejnfH/V9Mina8uEKTDqKtVf6MUCKX5gEPfrT3aTqfD+m79ExCQ9XHzziDFVT9Wry
fp4J2ScmSReQFHQKI0HUIO4N6rK37VcWUNKWEX0B7u+yZdrhDl6JbD5HanEZkiUq
pvdeZdJoxgrIghPcZOXF6LRRY9H6/Xb/9QwvCVIOjeU9J4DHi63zCsgdOvYHGcKJ
06o4+EJCSvRhi6uVxKTseQ9hM81EGQryWQtBWoog8RfLatG1mwQ1flr0FNHtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSedstyH1+F32u+Kv5ElxvkcV6mQwHwYDVR0j
BBgwFoAUdS34pRHlg/0Wr954aLaVywi7Jx4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHhMSnVBb3FweW5iM1oxTFNiZ3Jmelpad2ZZU3lLb2tQZnMzTDZCenN6
QWovMS83NTJERjhBNTExRTU4M0ZEMTZBRkRFNzg2OEI2OTVDQjA4QkIyNzFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1MkRGOEE1MTFFNTgzRkQx
NkFGREU3ODY4QjY5NUNCMDhCQjI3MUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h4TEp1QW9xcHluYjNaMUxTYmdyZnpaWndmWVN5S29rUGZzM0w2QnpzekFqLzEv
MzQzNTJlMzEzODM2MmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtunswDQYJKoZIhvcNAQELBQADggEBAHpvqznp
EnVAPr69+95c0uhhDx5sTYr+Muriq30sob8/spW37Sd+zjcKMm6GqifF8w1PDxEd
BAfrzoMvPe4SH/o42X1ZffAyxLEWQjfCsl6DaSNO6GvT2UI2lUNKI1jW28zQayBV
/eq+NVVROQ+pRODxR9w+FljEd412Yq4rbMbFD9LNCyudP7UR/YfsTzdAjULIKzP4
IL0/nWZ8j0IeJn6lFE14Ps+y2ChP2fiBPJsapQMcM5SeLJ3tMVnVPxUwMUjOn7fs
UkLoIJquV9GBu5LTcLBDHmGzomNonKr0J/M1yU3tiRm4eGiTnaTgoVajQaqWUB6G
trSolM8fEKEmL8s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org