Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/0/34352e3137322e36302e302f32322d3234203d3e20323638373531.roa
File:                     34352e3137322e36302e302f32322d3234203d3e20323638373531.roa (raw, json)
Hash identifier:          fsqvHEtMfs5IqJn5pr0CByvDEbLtLUiAI8KkMvXnb5Y=
Subject key identifier:   B5:E5:40:22:A4:1E:C6:26:1F:1C:A4:7B:85:F4:AB:89:1A:B6:F8:63
Certificate issuer:       /CN=C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E
Certificate serial:       76D0A6B63A511D8C40BA1AEBB07E31B54760766B
Authority key identifier: C0:DA:C4:1E:A5:64:8C:64:04:CF:F0:6E:09:D7:CA:F7:F2:43:F9:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/0/34352e3137322e36302e302f32322d3234203d3e20323638373531.roa
Signing time:             Wed 05 Jul 2023 17:00:00 +0000
ROA not before:           Wed 05 Jul 2023 16:55:00 +0000
ROA not after:            Fri 05 Jul 2024 17:00:00 +0000
asID:                     268751
IP address blocks:        45.172.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d0:a6:b6:3a:51:1d:8c:40:ba:1a:eb:b0:7e:31:b5:47:60:76:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E
        Validity
            Not Before: Jul  5 16:55:00 2023 GMT
            Not After : Jul  5 17:00:00 2024 GMT
        Subject: CN=3082010A0282010100B401D3D912DF231C07BF562D1BB165BB033DDC0FB512B644FC93E22C76495891ED77C4C5ED17EFC16D82774B761E6AA84406C9264F273398EE915596BFF8384712358741EC7F6D86B68B806B32EBDD2CCD65118ADAB5FB4D257E2882BACFE02F17B27A724EE71D839C0E8CB0A9A333D9B0C6BBDDB673024517D5C89FE181FACB0BA3CB7F7C9F10931126242D3EE91D015AE6761B73953280DCE61CB146256463C4861119DE5DD283EF494BBE7FC02ADD7BAD89776351E06D7C949A38EB90A31EB8842F1F7A0BB93D2B5CFD3EFA690414F8CA11487EF1939DA10741F80EC08300BBF7A9FEB5C94560C964FF7F5FD13434F6BD4A058075DE3C8D154D99EB8C39A70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:d3:d9:12:df:23:1c:07:bf:56:2d:1b:b1:
                    65:bb:03:3d:dc:0f:b5:12:b6:44:fc:93:e2:2c:76:
                    49:58:91:ed:77:c4:c5:ed:17:ef:c1:6d:82:77:4b:
                    76:1e:6a:a8:44:06:c9:26:4f:27:33:98:ee:91:55:
                    96:bf:f8:38:47:12:35:87:41:ec:7f:6d:86:b6:8b:
                    80:6b:32:eb:dd:2c:cd:65:11:8a:da:b5:fb:4d:25:
                    7e:28:82:ba:cf:e0:2f:17:b2:7a:72:4e:e7:1d:83:
                    9c:0e:8c:b0:a9:a3:33:d9:b0:c6:bb:dd:b6:73:02:
                    45:17:d5:c8:9f:e1:81:fa:cb:0b:a3:cb:7f:7c:9f:
                    10:93:11:26:24:2d:3e:e9:1d:01:5a:e6:76:1b:73:
                    95:32:80:dc:e6:1c:b1:46:25:64:63:c4:86:11:19:
                    de:5d:d2:83:ef:49:4b:be:7f:c0:2a:dd:7b:ad:89:
                    77:63:51:e0:6d:7c:94:9a:38:eb:90:a3:1e:b8:84:
                    2f:1f:7a:0b:b9:3d:2b:5c:fd:3e:fa:69:04:14:f8:
                    ca:11:48:7e:f1:93:9d:a1:07:41:f8:0e:c0:83:00:
                    bb:f7:a9:fe:b5:c9:45:60:c9:64:ff:7f:5f:d1:34:
                    34:f6:bd:4a:05:80:75:de:3c:8d:15:4d:99:eb:8c:
                    39:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E5:40:22:A4:1E:C6:26:1F:1C:A4:7B:85:F4:AB:89:1A:B6:F8:63
            X509v3 Authority Key Identifier:
                keyid:C0:DA:C4:1E:A5:64:8C:64:04:CF:F0:6E:09:D7:CA:F7:F2:43:F9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/0/C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0DAC41EA5648C6404CFF06E09D7CAF7F243F99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/0/34352e3137322e36302e302f32322d3234203d3e20323638373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:b2:3a:41:55:98:98:35:11:b8:42:06:dc:68:c6:d7:55:b7:
         6c:23:b7:86:8f:60:7a:85:fc:b1:e7:f7:0e:42:8f:6d:a6:9c:
         17:bf:a8:54:14:c2:7b:73:43:d0:56:d3:d8:57:7c:c0:fa:8a:
         ba:92:99:64:f6:dc:6d:89:5c:b6:a8:4b:53:3b:5e:8e:d1:24:
         03:98:0a:42:d8:4e:4b:a2:03:9e:fd:1e:8d:f8:e5:41:fa:7b:
         11:73:b1:99:c4:fe:9e:f3:f1:fe:78:ce:01:81:72:20:83:a3:
         69:27:14:39:c3:1b:1c:51:d7:59:9f:91:d5:f6:71:68:1a:a8:
         e7:d0:1c:57:68:2b:71:ec:95:96:91:fe:e4:75:5c:f1:0f:3a:
         52:0f:76:3d:ab:e9:eb:16:da:08:10:f7:d6:77:2e:2b:94:35:
         ac:08:3c:82:3e:20:88:16:6d:90:e0:09:31:d8:11:b4:2b:9d:
         1a:69:82:4b:07:02:13:80:c0:08:e8:b7:4c:e1:00:e7:52:45:
         4a:73:58:48:95:63:18:06:5e:ee:17:3b:45:69:00:a7:39:48:
         85:7f:9d:fb:dd:a0:a4:09:b3:83:2a:2b:1f:7b:8b:f7:a6:a4:
         b4:d4:4e:d6:64:66:03:94:b5:3f:fa:cc:74:fb:37:52:b0:14:
         fb:b8:66:32
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUdtCmtjpRHYxAuhrrsH4xtUdgdmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBEQUM0MUVBNTY0OEM2NDA0Q0ZGMDZFMDlEN0NBRjdG
MjQzRjk5RTAeFw0yMzA3MDUxNjU1MDBaFw0yNDA3MDUxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQwMUQzRDkxMkRGMjMxQzA3
QkY1NjJEMUJCMTY1QkIwMzNEREMwRkI1MTJCNjQ0RkM5M0UyMkM3NjQ5NTg5MUVE
NzdDNEM1RUQxN0VGQzE2RDgyNzc0Qjc2MUU2QUE4NDQwNkM5MjY0RjI3MzM5OEVF
OTE1NTk2QkZGODM4NDcxMjM1ODc0MUVDN0Y2RDg2QjY4QjgwNkIzMkVCREQyQ0NE
NjUxMThBREFCNUZCNEQyNTdFMjg4MkJBQ0ZFMDJGMTdCMjdBNzI0RUU3MUQ4MzlD
MEU4Q0IwQTlBMzMzRDlCMEM2QkJEREI2NzMwMjQ1MTdENUM4OUZFMTgxRkFDQjBC
QTNDQjdGN0M5RjEwOTMxMTI2MjQyRDNFRTkxRDAxNUFFNjc2MUI3Mzk1MzI4MERD
RTYxQ0IxNDYyNTY0NjNDNDg2MTExOURFNUREMjgzRUY0OTRCQkU3RkMwMkFERDdC
QUQ4OTc3NjM1MUUwNkQ3Qzk0OUEzOEVCOTBBMzFFQjg4NDJGMUY3QTBCQjkzRDJC
NUNGRDNFRkE2OTA0MTRGOENBMTE0ODdFRjE5MzlEQTEwNzQxRjgwRUMwODMwMEJC
RjdBOUZFQjVDOTQ1NjBDOTY0RkY3RjVGRDEzNDM0RjZCRDRBMDU4MDc1REUzQzhE
MTU0RDk5RUI4QzM5QTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtAHT2RLfIxwHv1YtG7FluwM93A+1ErZE/JPiLHZJWJHtd8TF7Rfv
wW2Cd0t2HmqoRAbJJk8nM5jukVWWv/g4RxI1h0Hsf22GtouAazLr3SzNZRGK2rX7
TSV+KIK6z+AvF7J6ck7nHYOcDoywqaMz2bDGu922cwJFF9XIn+GB+ssLo8t/fJ8Q
kxEmJC0+6R0BWuZ2G3OVMoDc5hyxRiVkY8SGERneXdKD70lLvn/AKt17rYl3Y1Hg
bXyUmjjrkKMeuIQvH3oLuT0rXP0++mkEFPjKEUh+8ZOdoQdB+A7AgwC796n+tclF
YMlk/39f0TQ09r1KBYB13jyNFU2Z64w5pwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FLXlQCKkHsYmHxyke4X0q4katvhjMB8GA1UdIwQYMBaAFMDaxB6lZIxkBM/wbgnX
yvfyQ/meMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVTRqWnJUV0NnQnp4TVA2
VmJubnBTQThuaGgxaXVXNkg2aTd2eVV0RUt4di8wL0MwREFDNDFFQTU2NDhDNjQw
NENGRjA2RTA5RDdDQUY3RjI0M0Y5OUUuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvQzBEQUM0MUVBNTY0OEM2NDA0Q0ZGMDZFMDlEN0NBRjdGMjQzRjk5
RS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVTRqWnJUV0NnQnp4TVA2VmJubnBT
QThuaGgxaXVXNkg2aTd2eVV0RUt4di8wLzM0MzUyZTMxMzczMjJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzODM3MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2sPDAN
BgkqhkiG9w0BAQsFAAOCAQEAE7I6QVWYmDURuEIG3GjG11W3bCO3ho9geoX8sef3
DkKPbaacF7+oVBTCe3ND0FbT2Fd8wPqKupKZZPbcbYlctqhLUztejtEkA5gKQthO
S6IDnv0ejfjlQfp7EXOxmcT+nvPx/njOAYFyIIOjaScUOcMbHFHXWZ+R1fZxaBqo
59AcV2grceyVlpH+5HVc8Q86Ug92Pavp6xbaCBD31ncuK5Q1rAg8gj4giBZtkOAJ
MdgRtCudGmmCSwcCE4DACOi3TOEA51JFSnNYSJVjGAZe7hc7RWkApzlIhX+d+92g
pAmzgyorH3uL96aktNRO1mRmA5S1P/rMdPs3UrAU+7hmMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org