Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36392e302f32342d3234203d3e20323639353732.roa
File:                     34352e3138392e36392e302f32342d3234203d3e20323639353732.roa (raw, json)
Hash identifier:          PWR6M1Qq/wyLVQerhQtLpPqOfjFFVzOi/mr9cWRw9eY=
Subject key identifier:   DD:EA:A6:37:0E:F9:71:3F:F9:0D:D3:5E:B8:11:A0:68:ED:AF:7D:53
Certificate issuer:       /CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
Certificate serial:       11A5B82C4228922FE026380F8EDE48BD98F8CD4E
Authority key identifier: FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36392e302f32342d3234203d3e20323639353732.roa
Signing time:             Mon 24 Jul 2023 17:00:00 +0000
ROA not before:           Mon 24 Jul 2023 16:55:00 +0000
ROA not after:            Mon 22 Jul 2024 17:00:00 +0000
asID:                     269572
IP address blocks:        45.189.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a5:b8:2c:42:28:92:2f:e0:26:38:0f:8e:de:48:bd:98:f8:cd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
        Validity
            Not Before: Jul 24 16:55:00 2023 GMT
            Not After : Jul 22 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:f6:ee:b2:36:5a:d5:5c:e9:b3:6d:73:88:
                    76:9b:e6:91:3a:1d:85:8d:97:df:61:51:54:42:0a:
                    18:6a:a4:60:63:73:4d:b3:ba:d3:d6:eb:53:ed:b3:
                    91:49:a3:e6:36:cf:60:3b:4f:7b:ee:ca:be:62:2c:
                    90:c7:03:63:18:18:5c:09:16:c0:65:70:c6:0e:2b:
                    8d:c5:96:78:c4:d9:fa:a9:90:40:08:7d:b8:f3:1b:
                    04:b6:4d:ea:f8:82:ab:19:32:43:9a:8e:4d:13:f2:
                    f8:31:c1:1b:97:f0:be:77:2d:83:1c:e8:6c:c9:fe:
                    c7:53:db:f0:d2:2f:ff:77:6d:e5:16:19:04:b5:c2:
                    cd:dd:97:5d:16:5c:d3:35:02:b0:f7:0d:d0:c9:ac:
                    b2:5d:46:a7:bf:c0:f9:ee:a5:fc:86:61:db:be:2a:
                    6d:b9:f4:87:b7:11:11:37:d8:35:04:14:67:1b:a9:
                    83:93:39:19:4c:56:71:30:47:3f:7b:5d:c8:c4:6f:
                    32:ee:ea:d8:6e:11:3e:86:e7:f1:03:a3:db:62:8d:
                    b7:f3:11:fd:32:85:4c:05:68:9c:28:ed:34:f7:6c:
                    82:23:a7:37:98:aa:ff:00:3d:06:73:b6:1b:ab:1b:
                    99:44:a9:f4:fe:fa:77:a1:ad:51:c9:29:e1:a1:9a:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EA:A6:37:0E:F9:71:3F:F9:0D:D3:5E:B8:11:A0:68:ED:AF:7D:53
            X509v3 Authority Key Identifier:
                keyid:FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36392e302f32342d3234203d3e20323639353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ec:f1:2d:30:4d:36:e1:15:24:12:d0:a5:97:fc:2c:bf:e3:
         35:01:80:4c:61:4c:97:83:38:a3:f7:01:59:2d:fd:4b:5a:27:
         c3:64:a8:c8:8f:47:01:c3:d4:c5:75:59:cd:c5:b2:bc:fe:20:
         30:fb:e9:b8:09:74:33:fa:e1:14:6f:0f:c6:6c:58:74:06:d4:
         18:3b:ac:69:e7:fc:58:1e:27:c1:0f:a3:30:7c:50:eb:80:a6:
         f9:eb:50:21:01:24:2e:d0:dd:be:11:a4:a0:5d:ba:84:93:1e:
         6a:d0:b3:c7:b6:39:0b:e7:d5:cb:eb:84:7c:2d:22:a4:39:f6:
         6a:7e:d1:69:41:87:ed:6a:7b:18:06:05:40:02:6a:34:35:66:
         3f:80:1f:55:bf:f3:24:29:42:f5:e4:37:26:fc:74:7e:c8:9f:
         c0:3c:bd:bc:f6:e4:23:93:22:2d:43:49:c7:b0:3f:fe:a3:e5:
         b6:c6:73:eb:f7:ad:48:ee:38:b1:55:38:d9:04:5c:7c:4e:9c:
         3f:98:b3:cf:0c:3f:ff:c5:e0:63:fd:a7:02:98:ae:c6:2f:e6:
         f1:7f:08:6b:24:d8:74:a5:81:2c:c0:d7:37:2d:73:98:f9:80:
         44:0d:20:f7:c8:63:31:54:55:2a:10:81:55:a1:f7:4e:de:41:
         87:dc:fd:80
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUEaW4LEIoki/gJjgPjt5IvZj4zU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE2QUE0N0FDNDUwQTc1QzMwRkJDMjc5MUY4NjE0QThB
ODA1RjI5QzAeFw0yMzA3MjQxNjU1MDBaFw0yNDA3MjIxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUIzQkY2RUVCMjM2NUFENTVD
RTlCMzZENzM4ODc2OUJFNjkxM0ExRDg1OEQ5N0RGNjE1MTU0NDIwQTE4NkFBNDYw
NjM3MzREQjNCQUQzRDZFQjUzRURCMzkxNDlBM0U2MzZDRjYwM0I0RjdCRUVDQUJF
NjIyQzkwQzcwMzYzMTgxODVDMDkxNkMwNjU3MEM2MEUyQjhEQzU5Njc4QzREOUZB
QTk5MDQwMDg3REI4RjMxQjA0QjY0REVBRjg4MkFCMTkzMjQzOUE4RTREMTNGMkY4
MzFDMTFCOTdGMEJFNzcyRDgzMUNFODZDQzlGRUM3NTNEQkYwRDIyRkZGNzc2REU1
MTYxOTA0QjVDMkNEREQ5NzVEMTY1Q0QzMzUwMkIwRjcwREQwQzlBQ0IyNUQ0NkE3
QkZDMEY5RUVBNUZDODY2MURCQkUyQTZEQjlGNDg3QjcxMTExMzdEODM1MDQxNDY3
MUJBOTgzOTMzOTE5NEM1NjcxMzA0NzNGN0I1REM4QzQ2RjMyRUVFQUQ4NkUxMTNF
ODZFN0YxMDNBM0RCNjI4REI3RjMxMUZEMzI4NTRDMDU2ODlDMjhFRDM0Rjc2Qzgy
MjNBNzM3OThBQUZGMDAzRDA2NzNCNjFCQUIxQjk5NDRBOUY0RkVGQTc3QTFBRDUx
QzkyOUUxQTE5QTEwQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmzv27rI2WtVc6bNtc4h2m+aROh2FjZffYVFUQgoYaqRgY3NNs7rT
1utT7bORSaPmNs9gO0977sq+YiyQxwNjGBhcCRbAZXDGDiuNxZZ4xNn6qZBACH24
8xsEtk3q+IKrGTJDmo5NE/L4McEbl/C+dy2DHOhsyf7HU9vw0i//d23lFhkEtcLN
3ZddFlzTNQKw9w3QyayyXUanv8D57qX8hmHbviptufSHtxERN9g1BBRnG6mDkzkZ
TFZxMEc/e13IxG8y7urYbhE+hufxA6PbYo238xH9MoVMBWicKO0092yCI6c3mKr/
AD0Gc7YbqxuZRKn0/vp3oa1RySnhoZoQuwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FN3qpjcO+XE/+Q3TXrgRoGjtr31TMB8GA1UdIwQYMBaAFPpqpHrEUKdcMPvCeR+G
FKioBfKcMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vY2I3aEd4Y2M3QWpaUEFq
RU13YmNUVzJaVjFHaHNyTGJ2NmluV0NwMkpTbi8wL0ZBNkFBNDdBQzQ1MEE3NUMz
MEZCQzI3OTFGODYxNEE4QTgwNUYyOUMuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvRkE2QUE0N0FDNDUwQTc1QzMwRkJDMjc5MUY4NjE0QThBODA1RjI5
Qy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vY2I3aEd4Y2M3QWpaUEFqRU13YmNU
VzJaVjFHaHNyTGJ2NmluV0NwMkpTbi8wLzM0MzUyZTMxMzgzOTJlMzYzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM1MzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC29RTAN
BgkqhkiG9w0BAQsFAAOCAQEAcOzxLTBNNuEVJBLQpZf8LL/jNQGATGFMl4M4o/cB
WS39S1onw2SoyI9HAcPUxXVZzcWyvP4gMPvpuAl0M/rhFG8PxmxYdAbUGDusaef8
WB4nwQ+jMHxQ64Cm+etQIQEkLtDdvhGkoF26hJMeatCzx7Y5C+fVy+uEfC0ipDn2
an7RaUGH7Wp7GAYFQAJqNDVmP4AfVb/zJClC9eQ3Jvx0fsifwDy9vPbkI5MiLUNJ
x7A//qPltsZz6/etSO44sVU42QRcfE6cP5izzww//8XgY/2nApiuxi/m8X8IayTY
dKWBLMDXNy1zmPmARA0g98hjMVRVKhCBVaH3Tt5Bh9z9gA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org