Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa
File:                     34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          VR5VeA1t9G7/hg4/oC10sJiosW25mk4beiYSOWJqAGo=
Subject key identifier:   EE:5D:15:83:24:A3:37:23:30:AF:6E:17:EC:F3:C0:73:DF:32:3A:5C
Certificate issuer:       /CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
Certificate serial:       4C1CA04E39CFE13B14A01CF3C00F9B6ACC6CB40E
Authority key identifier: C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa
Signing time:             Mon 25 Mar 2024 18:02:01 +0000
ROA not before:           Mon 25 Mar 2024 17:57:01 +0000
ROA not after:            Mon 24 Mar 2025 18:02:01 +0000
asID:                     263047
IP address blocks:        45.188.224.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1c:a0:4e:39:cf:e1:3b:14:a0:1c:f3:c0:0f:9b:6a:cc:6c:b4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
        Validity
            Not Before: Mar 25 17:57:01 2024 GMT
            Not After : Mar 24 18:02:01 2025 GMT
        Subject: CN=EE5D158324A3372330AF6E17ECF3C073DF323A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:a1:a7:62:55:e1:47:44:75:9d:e2:72:4e:
                    7f:5d:b2:dd:53:11:f7:ea:6c:ed:57:9d:4a:89:67:
                    96:48:50:7d:0c:4e:86:55:45:b4:29:71:c6:33:62:
                    e0:9f:e8:29:a8:fd:73:1a:c7:6d:1f:37:ca:04:48:
                    ca:96:f4:eb:c9:d9:6f:34:34:1d:76:c0:10:c8:1d:
                    74:16:de:86:54:8b:21:45:14:14:34:b4:49:e0:b2:
                    dc:9d:c8:ad:b1:54:05:fc:83:35:c3:83:91:e9:e7:
                    1e:9c:b5:73:18:34:b5:1a:49:07:63:73:22:1e:41:
                    6b:8c:bd:08:2c:2c:46:c7:79:5b:79:1d:e6:37:f2:
                    75:e9:31:9d:8a:9a:7a:57:69:ee:be:f1:2d:19:a9:
                    8f:3f:23:48:3c:4e:44:9b:b4:15:fc:3b:b8:18:24:
                    25:d6:7c:8f:ff:42:ec:43:8a:d9:1c:1d:2c:31:4d:
                    b4:e8:dd:08:ba:44:4e:5e:55:b5:59:c2:9b:7a:b7:
                    ff:08:3c:3a:16:65:e3:c6:db:87:f8:d1:a9:75:ef:
                    4b:c2:63:a3:f0:03:96:69:ed:40:02:61:98:c1:61:
                    69:91:95:2e:9f:bd:e2:99:f9:36:d9:c8:62:32:64:
                    a9:99:a6:98:21:77:34:f9:17:05:56:8b:f4:b5:5e:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5D:15:83:24:A3:37:23:30:AF:6E:17:EC:F3:C0:73:DF:32:3A:5C
            X509v3 Authority Key Identifier:
                keyid:C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:b6:74:26:21:76:b8:b5:d0:61:54:5c:b4:76:d9:42:0e:0f:
         92:f4:69:3a:af:34:a0:e2:d5:4e:50:24:69:5f:d4:a9:4a:10:
         99:09:0e:50:60:14:0f:ce:df:07:b9:73:ce:39:ae:b8:b3:b8:
         ce:9e:b9:66:5d:64:66:50:e9:ed:6b:5a:0c:a6:08:3c:16:a1:
         e5:b4:e5:65:b7:92:e3:05:de:a6:4a:40:0e:b4:42:71:a0:10:
         bf:7d:9d:d1:b6:36:3a:a0:6c:df:d0:05:f1:21:7d:08:7c:3f:
         4f:b0:54:0c:97:c8:fe:80:9c:22:8d:3f:2d:75:a4:ae:32:0d:
         1e:39:5f:58:6d:11:4b:e5:8c:ec:15:80:0b:7a:ac:50:fb:8e:
         d5:69:a0:27:d9:36:9d:8f:4f:a0:3d:ac:e3:1a:e7:2c:74:12:
         db:9e:04:f0:52:f7:8b:1a:f7:86:18:f1:70:6e:fc:07:1e:f1:
         25:40:eb:09:f5:b5:f9:79:f8:8a:44:46:2e:e7:fe:95:fc:26:
         cf:8e:f9:af:de:9c:ec:f5:9d:d2:20:2e:4b:fe:6d:5a:10:45:
         eb:29:d0:98:51:0e:f1:ea:ee:41:10:cc:72:98:ff:cf:bb:39:
         e8:62:66:c5:16:ed:54:ee:db:01:80:40:b0:79:73:5e:53:e8:
         b9:ac:86:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTBygTjnP4TsUoBzzwA+basxstA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJGODc3NDgzOEJGMTA3MkIzOEI3Mjc2RkI2Q0QyRjNC
QkZENTY0NTAeFw0yNDAzMjUxNzU3MDFaFw0yNTAzMjQxODAyMDFaMDMxMTAvBgNV
BAMTKEVFNUQxNTgzMjRBMzM3MjMzMEFGNkUxN0VDRjNDMDczREYzMjNBNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlFaGnYlXhR0R1neJyTn9dst1T
EffqbO1XnUqJZ5ZIUH0MToZVRbQpccYzYuCf6Cmo/XMax20fN8oESMqW9OvJ2W80
NB12wBDIHXQW3oZUiyFFFBQ0tEngstydyK2xVAX8gzXDg5Hp5x6ctXMYNLUaSQdj
cyIeQWuMvQgsLEbHeVt5HeY38nXpMZ2KmnpXae6+8S0ZqY8/I0g8TkSbtBX8O7gY
JCXWfI//QuxDitkcHSwxTbTo3Qi6RE5eVbVZwpt6t/8IPDoWZePG24f40al170vC
Y6PwA5Zp7UACYZjBYWmRlS6fveKZ+TbZyGIyZKmZppghdzT5FwVWi/S1XnzFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7l0VgySjNyMwr24X7PPAc98yOlwwHwYDVR0j
BBgwFoAUwvh3SDi/EHKzi3J2+2zS87v9VkUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlnYjc5RGhZMW95QW1zSFkzUXdpa2tuUUVCV2pDMUpXd3R0THhCRVM2
enUvMC9DMkY4Nzc0ODM4QkYxMDcyQjM4QjcyNzZGQjZDRDJGM0JCRkQ1NjQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyRjg3NzQ4MzhCRjEwNzJC
MzhCNzI3NkZCNkNEMkYzQkJGRDU2NDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5Z2I3OURoWTFveUFtc0hZM1F3aWtrblFFQldqQzFKV3d0dEx4QkVTNnp1LzAv
MzQzNTJlMzEzODM4MmUzMjMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvOAwDQYJKoZIhvcNAQELBQADggEBAB62dCYh
dri10GFUXLR22UIOD5L0aTqvNKDi1U5QJGlf1KlKEJkJDlBgFA/O3we5c845rriz
uM6euWZdZGZQ6e1rWgymCDwWoeW05WW3kuMF3qZKQA60QnGgEL99ndG2NjqgbN/Q
BfEhfQh8P0+wVAyXyP6AnCKNPy11pK4yDR45X1htEUvljOwVgAt6rFD7jtVpoCfZ
Np2PT6A9rOMa5yx0EtueBPBS94sa94YY8XBu/Ace8SVA6wn1tfl5+IpERi7n/pX8
Js+O+a/enOz1ndIgLkv+bVoQResp0JhRDvHq7kEQzHKY/8+7OehiZsUW7VTu2wGA
QLB5c15T6Lmshj0=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org