Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          Aq3l7edb5OxcYFR9u03b9epN1flm7WtkdDsbhsSaJ5k=
Subject key identifier:   B0:D3:C4:BC:34:AC:B8:4C:FC:9D:FF:AF:EB:ED:1C:1B:2D:73:47:14
Certificate issuer:       /CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
Certificate serial:       7D5F9EEA057071E8BE587B87D9A87AAF4B671F2A
Authority key identifier: CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 18 Dec 2023 19:37:14 +0000
ROA not before:           Mon 18 Dec 2023 19:32:14 +0000
ROA not after:            Mon 16 Dec 2024 19:37:14 +0000
asID:                     268746
IP address blocks:        45.171.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5f:9e:ea:05:70:71:e8:be:58:7b:87:d9:a8:7a:af:4b:67:1f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
        Validity
            Not Before: Dec 18 19:32:14 2023 GMT
            Not After : Dec 16 19:37:14 2024 GMT
        Subject: CN=B0D3C4BC34ACB84CFC9DFFAFEBED1C1B2D734714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:23:5e:f1:0c:fe:fc:f5:4b:7f:2b:66:24:
                    84:f2:4c:24:83:6b:d9:83:bd:1d:64:98:54:e8:7e:
                    fc:48:60:b8:58:0b:d8:4f:84:85:a0:85:97:21:0c:
                    fb:1e:90:ea:35:0d:b0:af:a4:2e:29:2b:af:1f:d0:
                    56:da:5f:40:6f:65:aa:8d:4a:5c:22:02:9d:1f:26:
                    13:85:57:8b:66:6f:a3:e2:ee:63:8f:4d:b8:e0:fc:
                    a7:4f:49:d8:8c:cb:de:00:93:50:98:d6:fd:e5:a3:
                    20:0f:b8:db:68:05:c5:3e:70:56:9a:8d:be:54:48:
                    e0:55:b8:14:77:43:9f:17:f8:00:aa:53:8c:52:fc:
                    e8:0d:01:a7:5f:1e:1b:31:af:47:b7:2d:3a:a2:ba:
                    ec:f4:a2:86:7d:8a:1c:a9:ce:8a:7e:cf:de:38:71:
                    02:f8:18:81:05:ed:1d:70:9e:a1:90:dd:bb:3e:4f:
                    f6:e8:44:f3:7b:85:5a:b8:b2:81:96:67:22:93:00:
                    d9:29:81:a7:d7:e2:fe:d8:75:f9:6f:06:fe:8f:ab:
                    07:ed:f9:c4:8e:a1:5f:0e:2b:a3:2c:5a:bb:93:cc:
                    ac:0a:db:bd:2a:be:6c:11:0f:86:a7:64:67:7d:da:
                    fb:37:fb:ed:ac:6f:a9:1d:03:59:61:64:5f:ef:2c:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D3:C4:BC:34:AC:B8:4C:FC:9D:FF:AF:EB:ED:1C:1B:2D:73:47:14
            X509v3 Authority Key Identifier:
                keyid:CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:67:4a:8a:0f:65:58:00:b2:73:d8:0f:b4:69:b9:86:fc:4f:
         84:74:e7:3e:c3:91:a1:5c:7d:0d:5e:db:f7:8d:24:49:e8:11:
         1c:4e:fc:a4:b4:f3:79:9e:df:a8:27:02:e2:ae:d2:05:ca:2e:
         91:49:d2:21:32:76:c9:ee:30:f0:f5:ff:a2:44:25:b6:e0:d3:
         28:0b:2f:4d:1f:58:38:9d:ba:6b:6e:54:39:00:b4:7a:88:07:
         9c:1c:88:99:6f:9c:b9:08:e0:66:b0:c9:c0:30:17:40:e0:5e:
         33:03:da:f8:2d:1e:44:c4:18:92:c1:e2:db:fd:ff:4c:0a:f8:
         94:af:20:5f:0d:ee:34:fe:6d:b4:0a:eb:fe:9b:46:bb:f8:2a:
         b6:a1:e7:67:60:84:a6:fc:24:d7:db:3c:51:f8:b8:6d:18:03:
         fc:0c:87:d4:9a:22:22:02:0a:90:74:8b:b6:8d:d8:6a:7e:a2:
         15:2e:b2:41:ea:63:e0:dd:32:f8:cd:9a:ff:49:1c:e3:08:6c:
         fc:0b:ff:d8:65:81:ad:b5:e1:cc:80:49:bc:c0:02:0e:fb:92:
         12:81:7b:c6:e9:a9:b3:8a:0f:5f:f4:8c:75:82:d3:25:43:c9:
         12:46:7e:e6:6c:0c:4d:c3:6b:e2:f4:e2:96:09:cf:1f:5e:48:
         d2:cd:fb:62
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfV+e6gVwcei+WHuH2ah6r0tnHyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y4MjlFQjBCMzVEQTI5QjQ5NzA0MkQ3RTc5MEYwRUVD
MzU1MTJFNDAeFw0yMzEyMTgxOTMyMTRaFw0yNDEyMTYxOTM3MTRaMDMxMTAvBgNV
BAMTKEIwRDNDNEJDMzRBQ0I4NENGQzlERkZBRkVCRUQxQzFCMkQ3MzQ3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmyNe8Qz+/PVLfytmJITyTCSD
a9mDvR1kmFTofvxIYLhYC9hPhIWghZchDPsekOo1DbCvpC4pK68f0FbaX0BvZaqN
SlwiAp0fJhOFV4tmb6Pi7mOPTbjg/KdPSdiMy94Ak1CY1v3loyAPuNtoBcU+cFaa
jb5USOBVuBR3Q58X+ACqU4xS/OgNAadfHhsxr0e3LTqiuuz0ooZ9ihypzop+z944
cQL4GIEF7R1wnqGQ3bs+T/boRPN7hVq4soGWZyKTANkpgafX4v7YdflvBv6Pqwft
+cSOoV8OK6MsWruTzKwK270qvmwRD4anZGd92vs3++2sb6kdA1lhZF/vLKRjAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUsNPEvDSsuEz8nf+v6+0cGy1zRxQwHwYDVR0j
BBgwFoAUz4KesLNdoptJcELX55Dw7sNVEuQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvQ0Y4MjlFQjBCMzVEQTI5QjQ5NzA0MkQ3RTc5MEYwRUVDMzU1MTJFNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9DRjgyOUVCMEIzNURBMjlCNDk3
MDQyRDdFNzkwRjBFRUMzNTUxMkU0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzQz
NTJlMzEzNzMxMmUzMjMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
NzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtq+YwDQYJKoZIhvcNAQELBQADggEBADlnSooPZVgA
snPYD7RpuYb8T4R05z7DkaFcfQ1e2/eNJEnoERxO/KS083me36gnAuKu0gXKLpFJ
0iEydsnuMPD1/6JEJbbg0ygLL00fWDidumtuVDkAtHqIB5wciJlvnLkI4GawycAw
F0DgXjMD2vgtHkTEGJLB4tv9/0wK+JSvIF8N7jT+bbQK6/6bRrv4Krah52dghKb8
JNfbPFH4uG0YA/wMh9SaIiICCpB0i7aN2Gp+ohUuskHqY+DdMvjNmv9JHOMIbPwL
/9hlga214cyASbzAAg77khKBe8bpqbOKD1/0jHWC0yVDyRJGfuZsDE3Da+L04pYJ
zx9eSNLN+2I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org