Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa
File:                     34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa (raw, json)
Hash identifier:          GeObiysG1Dfoupc4IYNe47xdbnLCfrKedGD2jMfHxOU=
Subject key identifier:   F2:1E:28:4C:E8:45:BC:22:9C:FE:6B:F6:63:32:5B:0E:65:92:E7:A8
Certificate issuer:       /CN=992EBC162AFA257711721FED3599425F3A2B0077
Certificate serial:       16E5382871324D48B3F898C3BDFE577CF38524F2
Authority key identifier: 99:2E:BC:16:2A:FA:25:77:11:72:1F:ED:35:99:42:5F:3A:2B:00:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992EBC162AFA257711721FED3599425F3A2B0077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa
Signing time:             Thu 07 Mar 2024 20:30:39 +0000
ROA not before:           Thu 07 Mar 2024 20:25:39 +0000
ROA not after:            Thu 06 Mar 2025 20:30:39 +0000
asID:                     268077
IP address blocks:        45.168.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e5:38:28:71:32:4d:48:b3:f8:98:c3:bd:fe:57:7c:f3:85:24:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992EBC162AFA257711721FED3599425F3A2B0077
        Validity
            Not Before: Mar  7 20:25:39 2024 GMT
            Not After : Mar  6 20:30:39 2025 GMT
        Subject: CN=F21E284CE845BC229CFE6BF663325B0E6592E7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:eb:5f:ce:53:f4:bd:c8:3d:a5:30:98:e2:
                    a3:2b:cf:9e:c9:9e:6a:8a:50:aa:09:1c:83:1a:5b:
                    df:3a:5a:df:28:db:fd:e3:7d:01:47:c3:17:5c:b5:
                    7a:30:a1:e9:b4:9a:8f:df:ad:55:9a:ee:ea:29:15:
                    d9:ef:60:20:fa:64:a8:9d:ed:a2:f7:b5:e6:25:9a:
                    4d:ab:0a:5d:dc:e5:d0:97:bd:35:e8:ab:fd:8c:78:
                    7b:3b:6d:81:1a:99:9f:b3:f5:3a:38:30:2b:b2:1b:
                    23:c9:81:19:2b:d3:59:ff:a5:56:63:68:b3:16:b7:
                    4a:9b:fb:56:da:df:d3:79:21:83:90:8e:25:40:87:
                    58:7f:ef:a1:97:96:92:e9:a9:b0:3c:8f:52:28:c7:
                    65:8c:af:8d:8f:7f:5f:3d:5b:7c:ab:fe:71:dd:a7:
                    ce:7f:3c:f3:02:b5:e1:cb:91:87:e6:12:c6:24:2e:
                    95:11:50:a8:86:ed:3c:fa:78:ee:66:96:cf:b9:bd:
                    13:fc:d9:f8:7b:ce:63:a7:f8:27:5c:15:95:ca:d5:
                    67:73:81:d9:4b:2d:3a:57:0e:bd:94:22:ab:37:67:
                    22:dd:a5:cb:3f:e4:c8:81:d6:2b:4e:1e:33:52:a9:
                    3a:64:fb:9a:6f:0c:c7:fd:e4:86:30:29:7e:74:f7:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1E:28:4C:E8:45:BC:22:9C:FE:6B:F6:63:32:5B:0E:65:92:E7:A8
            X509v3 Authority Key Identifier:
                keyid:99:2E:BC:16:2A:FA:25:77:11:72:1F:ED:35:99:42:5F:3A:2B:00:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/992EBC162AFA257711721FED3599425F3A2B0077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992EBC162AFA257711721FED3599425F3A2B0077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:ba:66:1e:ff:72:2b:42:8b:f5:20:53:84:d0:52:af:e8:
         c7:df:c4:40:81:bd:a1:cb:75:0c:85:5a:65:80:ff:e8:07:8c:
         7e:92:94:0f:8d:75:24:56:47:02:70:d9:37:17:42:31:32:6e:
         1e:b6:c4:59:7b:d7:54:5f:a2:bd:13:44:55:34:18:a9:be:ed:
         b2:c1:1a:53:fa:87:d0:d3:56:d1:0e:79:83:62:07:2f:b0:55:
         f5:ad:59:39:5c:e3:0f:07:2c:69:ed:0b:4d:40:6f:29:cb:5c:
         93:cf:14:23:5f:87:f9:87:0e:92:fe:8a:0d:23:78:47:0c:0e:
         0a:1f:02:00:fd:8d:0c:bb:28:32:4c:cd:1d:b8:93:9d:c3:53:
         de:cd:31:46:b4:23:28:41:7f:29:c5:f2:32:24:3f:b8:79:68:
         55:34:8b:3f:a6:b4:8f:07:29:8e:12:eb:39:db:34:cf:63:31:
         0a:08:ed:9e:1c:09:e1:d9:10:36:54:04:64:f3:0b:61:eb:28:
         ce:46:ed:a8:b1:8e:1e:aa:57:00:4c:77:c2:70:b8:46:ed:71:
         c7:28:38:fd:5b:19:2e:55:20:a9:74:a8:90:95:13:a5:d3:39:
         8c:15:c4:a1:ac:9f:a4:67:c6:ca:67:93:d7:8e:b1:36:02:48:
         18:9c:4b:e0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFuU4KHEyTUiz+JjDvf5XfPOFJPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyRUJDMTYyQUZBMjU3NzExNzIxRkVEMzU5OTQyNUYz
QTJCMDA3NzAeFw0yNDAzMDcyMDI1MzlaFw0yNTAzMDYyMDMwMzlaMDMxMTAvBgNV
BAMTKEYyMUUyODRDRTg0NUJDMjI5Q0ZFNkJGNjYzMzI1QjBFNjU5MkU3QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGOtfzlP0vcg9pTCY4qMrz57J
nmqKUKoJHIMaW986Wt8o2/3jfQFHwxdctXowoem0mo/frVWa7uopFdnvYCD6ZKid
7aL3teYlmk2rCl3c5dCXvTXoq/2MeHs7bYEamZ+z9To4MCuyGyPJgRkr01n/pVZj
aLMWt0qb+1ba39N5IYOQjiVAh1h/76GXlpLpqbA8j1Iox2WMr42Pf189W3yr/nHd
p85/PPMCteHLkYfmEsYkLpURUKiG7Tz6eO5mls+5vRP82fh7zmOn+CdcFZXK1Wdz
gdlLLTpXDr2UIqs3ZyLdpcs/5MiB1itOHjNSqTpk+5pvDMf95IYwKX5095pPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8h4oTOhFvCKc/mv2YzJbDmWS56gwHwYDVR0j
BBgwFoAUmS68Fir6JXcRch/tNZlCXzorAHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENOTWJTUHU4cE01RGdNVExmdEd1Rk41SnVwZVFubkxRMnAzbzdiSHVR
djcvMC85OTJFQkMxNjJBRkEyNTc3MTE3MjFGRUQzNTk5NDI1RjNBMkIwMDc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk5MkVCQzE2MkFGQTI1Nzcx
MTcyMUZFRDM1OTk0MjVGM0EyQjAwNzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDTk1iU1B1OHBNNURnTVRMZnRHdUZONUp1cGVRbm5MUTJwM283Ykh1UXY3LzAv
MzQzNTJlMzEzNjM4MmUzMTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqKgwDQYJKoZIhvcNAQELBQADggEBADDlumYe
/3IrQov1IFOE0FKv6MffxECBvaHLdQyFWmWA/+gHjH6SlA+NdSRWRwJw2TcXQjEy
bh62xFl711Rfor0TRFU0GKm+7bLBGlP6h9DTVtEOeYNiBy+wVfWtWTlc4w8HLGnt
C01AbynLXJPPFCNfh/mHDpL+ig0jeEcMDgofAgD9jQy7KDJMzR24k53DU97NMUa0
IyhBfynF8jIkP7h5aFU0iz+mtI8HKY4S6znbNM9jMQoI7Z4cCeHZEDZUBGTzC2Hr
KM5G7aixjh6qVwBMd8JwuEbtcccoOP1bGS5VIKl0qJCVE6XTOYwVxKGsn6Rnxspn
k9eOsTYCSBicS+A=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org