Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/34352e3233352e39342e302f32342d3234203d3e20323637343130.roa
File:                     34352e3233352e39342e302f32342d3234203d3e20323637343130.roa (raw, json)
Hash identifier:          TozgtAl3XQYDKQziYDeuxcUU46W7+Snz/1/cwa2wvUY=
Subject key identifier:   07:40:F8:B6:07:EA:18:7B:25:91:5A:29:56:04:8C:94:C2:1A:A1:CB
Certificate issuer:       /CN=CB82F441A2AB9E9D367CB186AB1C39CCFD34599C
Certificate serial:       6B333ED3972D29B3C3AEC87E031B70A719F144A0
Authority key identifier: CB:82:F4:41:A2:AB:9E:9D:36:7C:B1:86:AB:1C:39:CC:FD:34:59:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/34352e3233352e39342e302f32342d3234203d3e20323637343130.roa
Signing time:             Sun 25 Jun 2023 16:25:44 +0000
ROA not before:           Sun 25 Jun 2023 16:20:44 +0000
ROA not after:            Sun 23 Jun 2024 16:25:44 +0000
asID:                     267410
IP address blocks:        45.235.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:33:3e:d3:97:2d:29:b3:c3:ae:c8:7e:03:1b:70:a7:19:f1:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB82F441A2AB9E9D367CB186AB1C39CCFD34599C
        Validity
            Not Before: Jun 25 16:20:44 2023 GMT
            Not After : Jun 23 16:25:44 2024 GMT
        Subject: CN=0740F8B607EA187B25915A2956048C94C21AA1CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:c2:96:b5:f4:28:8a:d3:b0:7b:8e:8c:fc:
                    9a:f1:b2:1f:0e:d0:93:5c:f5:ae:6d:66:7d:2f:37:
                    14:53:1a:98:19:99:46:fd:78:71:15:67:e5:9a:db:
                    f7:f6:4b:af:94:4d:ec:1f:cb:2a:c8:d2:b5:c7:52:
                    cf:86:88:fe:bf:37:2d:e4:00:86:8b:83:bc:35:e1:
                    d4:b4:d3:73:3c:09:52:8a:37:33:6f:5f:ab:ea:a2:
                    f0:16:21:05:1f:dd:32:15:c6:5a:48:b5:5b:ed:50:
                    19:0e:9a:6f:f2:8c:91:33:c0:b4:4a:1c:1b:39:6d:
                    59:78:ef:a9:c4:cd:f3:df:57:fa:fc:b9:a7:5a:76:
                    ff:9e:96:5d:e9:74:57:57:1c:93:6b:98:b3:bd:91:
                    8f:f9:68:9f:66:3b:3a:a9:bb:0e:d8:d0:f2:06:e1:
                    af:3c:d1:68:11:d0:d5:9b:ad:d9:20:a2:44:e1:d1:
                    58:0a:e6:2b:64:0a:58:ef:4c:14:9c:de:9a:12:ee:
                    b2:e4:77:e9:64:b8:f5:7d:26:24:02:4f:a4:d3:db:
                    d5:a0:93:22:38:c0:b3:3f:6f:c3:e9:d8:0b:b8:a9:
                    90:1e:2e:e3:46:e0:ee:bb:0e:20:91:11:33:18:ef:
                    af:25:1f:1a:7e:f2:8e:55:fd:3a:dd:88:88:5d:50:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:40:F8:B6:07:EA:18:7B:25:91:5A:29:56:04:8C:94:C2:1A:A1:CB
            X509v3 Authority Key Identifier:
                keyid:CB:82:F4:41:A2:AB:9E:9D:36:7C:B1:86:AB:1C:39:CC:FD:34:59:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/34352e3233352e39342e302f32342d3234203d3e20323637343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:00:e4:2f:8b:72:f1:3f:e0:da:2c:e9:0d:cd:50:fc:66:e5:
         8e:12:53:f6:79:b8:f5:a0:64:ba:0a:8d:6e:1a:4d:86:c0:a9:
         d9:73:8a:50:70:c3:d9:85:77:f6:40:d3:4e:d5:09:ca:8f:3f:
         4a:1d:23:d0:6c:19:3e:47:04:c3:71:eb:7e:53:96:f2:5f:45:
         c5:dc:ec:86:e0:0f:8b:cb:52:f3:ce:67:b0:fd:19:86:77:8f:
         df:80:e5:8e:4a:66:0e:e6:c6:c5:2d:8d:15:a4:19:49:e4:ed:
         df:d0:df:7b:06:1f:38:39:9c:6f:47:cf:7f:8d:17:63:63:d4:
         53:1f:82:95:03:b5:50:c1:b4:1e:b3:c0:58:8b:ed:c2:c8:bd:
         fb:d1:1b:ea:dc:3c:fc:43:e1:83:6c:26:91:a9:45:e7:e2:ff:
         c6:50:a6:43:e7:6d:04:8d:69:0b:73:b5:6b:23:c1:f8:7b:2b:
         e5:ec:28:47:fd:03:b0:52:b4:39:74:81:15:d2:1c:73:7f:fa:
         14:8b:16:34:e0:3d:e7:4f:43:10:25:7f:33:4b:6d:22:55:a1:
         82:22:df:81:18:bf:5d:72:d3:4a:a1:b9:3c:e1:42:2d:20:57:
         70:89:97:c0:e1:66:29:00:a0:e7:ea:53:65:4e:e2:dd:34:3c:
         16:bb:e3:e7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUazM+05ctKbPDrsh+AxtwpxnxRKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I4MkY0NDFBMkFCOUU5RDM2N0NCMTg2QUIxQzM5Q0NG
RDM0NTk5QzAeFw0yMzA2MjUxNjIwNDRaFw0yNDA2MjMxNjI1NDRaMDMxMTAvBgNV
BAMTKDA3NDBGOEI2MDdFQTE4N0IyNTkxNUEyOTU2MDQ4Qzk0QzIxQUExQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbt8KWtfQoitOwe46M/Jrxsh8O
0JNc9a5tZn0vNxRTGpgZmUb9eHEVZ+Wa2/f2S6+UTewfyyrI0rXHUs+GiP6/Ny3k
AIaLg7w14dS003M8CVKKNzNvX6vqovAWIQUf3TIVxlpItVvtUBkOmm/yjJEzwLRK
HBs5bVl476nEzfPfV/r8uadadv+ell3pdFdXHJNrmLO9kY/5aJ9mOzqpuw7Y0PIG
4a880WgR0NWbrdkgokTh0VgK5itkCljvTBSc3poS7rLkd+lkuPV9JiQCT6TT29Wg
kyI4wLM/b8Pp2Au4qZAeLuNG4O67DiCRETMY768lHxp+8o5V/TrdiIhdUPWPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUB0D4tgfqGHslkVopVgSMlMIaocswHwYDVR0j
BBgwFoAUy4L0QaKrnp02fLGGqxw5zP00WZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkIyRWE3SEU2ZkRCTGVYOFlHSkRWbUh0eDVBNXZWZVpLY2dtZFVIc1JU
U2EvMC9DQjgyRjQ0MUEyQUI5RTlEMzY3Q0IxODZBQjFDMzlDQ0ZEMzQ1OTlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCODJGNDQxQTJBQjlFOUQz
NjdDQjE4NkFCMUMzOUNDRkQzNDU5OUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCMkVhN0hFNmZEQkxlWDhZR0pEVm1IdHg1QTV2VmVaS2NnbWRVSHNSVFNhLzAv
MzQzNTJlMzIzMzM1MmUzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeteMA0GCSqGSIb3DQEBCwUAA4IBAQBIAOQvi3Lx
P+DaLOkNzVD8ZuWOElP2ebj1oGS6Co1uGk2GwKnZc4pQcMPZhXf2QNNO1QnKjz9K
HSPQbBk+RwTDcet+U5byX0XF3OyG4A+Ly1Lzzmew/RmGd4/fgOWOSmYO5sbFLY0V
pBlJ5O3f0N97Bh84OZxvR89/jRdjY9RTH4KVA7VQwbQes8BYi+3CyL370Rvq3Dz8
Q+GDbCaRqUXn4v/GUKZD520EjWkLc7VrI8H4eyvl7ChH/QOwUrQ5dIEV0hxzf/oU
ixY04D3nT0MQJX8zS20iVaGCIt+BGL9dctNKobk84UItIFdwiZfA4WYpAKDn6lNl
TuLdNDwWu+Pn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org