Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa
File:                     34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa (raw, json)
Hash identifier:          wZ4i5KL9K0A/mnMuWaYgi2X1ojwvu+DhXOMJPkUek78=
Subject key identifier:   2D:E8:45:CA:C7:6D:2E:04:E3:AD:E2:C4:6E:C9:F6:FA:4E:9D:8B:3E
Certificate issuer:       /CN=320EB8465036C44E507A88E7F8BABA7B33CA3BD4
Certificate serial:       755FB92C740E2C3B5DA098D0654A891198CD4985
Authority key identifier: 32:0E:B8:46:50:36:C4:4E:50:7A:88:E7:F8:BA:BA:7B:33:CA:3B:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa
Signing time:             Wed 10 Apr 2024 12:10:17 +0000
ROA not before:           Wed 10 Apr 2024 12:05:17 +0000
ROA not after:            Wed 09 Apr 2025 12:10:17 +0000
asID:                     269340
IP address blocks:        45.184.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5f:b9:2c:74:0e:2c:3b:5d:a0:98:d0:65:4a:89:11:98:cd:49:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320EB8465036C44E507A88E7F8BABA7B33CA3BD4
        Validity
            Not Before: Apr 10 12:05:17 2024 GMT
            Not After : Apr  9 12:10:17 2025 GMT
        Subject: CN=2DE845CAC76D2E04E3ADE2C46EC9F6FA4E9D8B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:18:ef:b4:6a:f5:7d:0b:f6:09:e2:86:6f:8e:
                    d3:b4:5c:9b:4f:8c:11:36:57:18:ae:cc:f1:73:0f:
                    6a:39:c7:6f:19:f2:9d:b9:4a:84:7f:f6:32:8f:31:
                    fe:1a:d0:8c:39:78:ae:76:23:e3:ca:77:5d:ca:46:
                    89:d6:ec:6a:e0:d2:35:6d:f8:fd:ad:58:c6:dd:db:
                    a7:77:4f:b6:2b:39:a9:c7:94:dd:90:fe:25:49:ca:
                    72:0d:38:20:bd:da:ce:95:e0:0e:47:93:c3:e3:bf:
                    f9:f1:0a:7b:37:2b:03:24:30:24:f0:b1:f6:33:fc:
                    8f:78:59:76:a0:44:bd:05:65:4c:6f:4c:0f:30:b2:
                    7c:40:df:7d:d8:00:51:e7:a9:bf:40:0e:52:77:3c:
                    29:64:32:87:b9:e8:f3:26:31:21:ee:15:ab:ca:18:
                    b6:ba:93:1b:94:61:7d:ce:bc:49:dd:37:27:43:9e:
                    44:b6:b2:0c:5f:0a:a1:c5:af:f0:9d:05:af:ad:61:
                    59:96:48:1d:c2:44:f2:fb:34:f5:80:52:09:c4:2a:
                    10:c6:e2:7a:6c:8d:b2:22:62:be:f9:70:36:e7:9c:
                    67:45:4d:58:a5:a8:dd:5f:9e:9a:17:65:84:f3:b2:
                    ad:2d:b4:6a:8a:15:30:d9:b9:1b:a6:3b:54:cd:df:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E8:45:CA:C7:6D:2E:04:E3:AD:E2:C4:6E:C9:F6:FA:4E:9D:8B:3E
            X509v3 Authority Key Identifier:
                keyid:32:0E:B8:46:50:36:C4:4E:50:7A:88:E7:F8:BA:BA:7B:33:CA:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:36:e8:a8:a9:39:12:85:90:b2:31:0b:70:e0:d7:b6:81:6c:
         ca:97:b1:ac:fe:59:ac:b9:8b:92:c9:68:a9:51:c6:3c:53:15:
         9a:64:d0:48:5a:a5:74:40:b8:fb:07:d6:d7:3e:fa:35:e5:42:
         a5:cd:ac:7e:a0:e5:7f:31:40:cc:6f:24:f0:18:6c:a0:69:55:
         b4:1f:0a:ea:45:5e:92:76:da:4d:de:c3:ef:8b:10:85:3a:ce:
         3b:bc:4a:a3:ea:bc:c8:29:04:cf:91:82:57:98:29:e8:00:ec:
         9b:be:51:33:ca:08:59:1e:86:e1:d6:16:39:a0:89:a8:76:a4:
         af:39:a5:d5:20:0b:6c:81:7b:a2:71:fc:cd:88:0f:9c:f8:5e:
         5f:83:28:b8:6e:e3:3d:3d:e0:ec:de:d5:45:1d:98:cb:f3:5f:
         c1:2d:bd:93:88:6f:6e:39:7d:e5:bd:75:13:64:1f:34:fe:a6:
         85:3d:c5:a2:9d:38:53:b4:64:44:7b:87:ab:d0:0c:94:65:1d:
         5d:b5:69:89:17:ad:49:a8:42:cc:94:58:41:18:6f:fb:7c:03:
         6a:fa:67:f7:11:6d:0c:78:c0:71:c8:ea:43:f2:01:92:0c:0f:
         38:23:ea:a3:a2:09:7d:67:d5:74:c5:14:a7:77:2b:cb:9e:e0:
         58:e9:46:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdV+5LHQOLDtdoJjQZUqJEZjNSYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIwRUI4NDY1MDM2QzQ0RTUwN0E4OEU3RjhCQUJBN0Iz
M0NBM0JENDAeFw0yNDA0MTAxMjA1MTdaFw0yNTA0MDkxMjEwMTdaMDMxMTAvBgNV
BAMTKDJERTg0NUNBQzc2RDJFMDRFM0FERTJDNDZFQzlGNkZBNEU5RDhCM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoGO+0avV9C/YJ4oZvjtO0XJtP
jBE2VxiuzPFzD2o5x28Z8p25SoR/9jKPMf4a0Iw5eK52I+PKd13KRonW7Grg0jVt
+P2tWMbd26d3T7YrOanHlN2Q/iVJynINOCC92s6V4A5Hk8Pjv/nxCns3KwMkMCTw
sfYz/I94WXagRL0FZUxvTA8wsnxA333YAFHnqb9ADlJ3PClkMoe56PMmMSHuFavK
GLa6kxuUYX3OvEndNydDnkS2sgxfCqHFr/CdBa+tYVmWSB3CRPL7NPWAUgnEKhDG
4npsjbIiYr75cDbnnGdFTVilqN1fnpoXZYTzsq0ttGqKFTDZuRumO1TN3+qRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULehFysdtLgTjreLEbsn2+k6diz4wHwYDVR0j
BBgwFoAUMg64RlA2xE5Qeojn+Lq6ezPKO9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpnVGY1QWJXNVBSS2l6MllGNHBMWjlMR1VyNnplM29iZmpwMTRxelFL
TmcvMS8zMjBFQjg0NjUwMzZDNDRFNTA3QTg4RTdGOEJBQkE3QjMzQ0EzQkQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMEVCODQ2NTAzNkM0NEU1
MDdBODhFN0Y4QkFCQTdCMzNDQTNCRDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqZ1RmNUFiVzVQUktpejJZRjRwTFo5TEdVcjZ6ZTNvYmZqcDE0cXpRS05nLzEv
MzQzNTJlMzEzODM0MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuIwwDQYJKoZIhvcNAQELBQADggEBAAY26Kip
ORKFkLIxC3Dg17aBbMqXsaz+Way5i5LJaKlRxjxTFZpk0EhapXRAuPsH1tc++jXl
QqXNrH6g5X8xQMxvJPAYbKBpVbQfCupFXpJ22k3ew++LEIU6zju8SqPqvMgpBM+R
gleYKegA7Ju+UTPKCFkehuHWFjmgiah2pK85pdUgC2yBe6Jx/M2ID5z4Xl+DKLhu
4z094Oze1UUdmMvzX8EtvZOIb245feW9dRNkHzT+poU9xaKdOFO0ZER7h6vQDJRl
HV21aYkXrUmoQsyUWEEYb/t8A2r6Z/cRbQx4wHHI6kPyAZIMDzgj6qOiCX1n1XTF
FKd3K8ue4FjpRu8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org