Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/0/34352e3137342e33362e302f32322d3234203d3e20323638383338.roa
File:                     34352e3137342e33362e302f32322d3234203d3e20323638383338.roa (raw, json)
Hash identifier:          SjgB/vgFtNZpagVi5ckrYE6mdGlERYmfFDwC3MocCSY=
Subject key identifier:   05:DE:E1:5A:88:A8:92:59:F6:96:8D:14:3D:3E:C5:77:60:C1:AE:D0
Certificate issuer:       /CN=EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6
Certificate serial:       1CB86F5B1FF67E0FCA861A442D5DCEA9F2090410
Authority key identifier: EF:E0:39:64:DB:34:2A:D0:23:EA:7E:3D:58:F0:9D:FE:0D:F6:2B:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/0/34352e3137342e33362e302f32322d3234203d3e20323638383338.roa
Signing time:             Tue 27 Feb 2024 14:14:03 +0000
ROA not before:           Tue 27 Feb 2024 14:09:03 +0000
ROA not after:            Tue 25 Feb 2025 14:14:03 +0000
asID:                     268838
IP address blocks:        45.174.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b8:6f:5b:1f:f6:7e:0f:ca:86:1a:44:2d:5d:ce:a9:f2:09:04:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6
        Validity
            Not Before: Feb 27 14:09:03 2024 GMT
            Not After : Feb 25 14:14:03 2025 GMT
        Subject: CN=05DEE15A88A89259F6968D143D3EC57760C1AED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:b4:67:90:e8:12:0a:d8:7e:92:c8:e0:2e:
                    92:90:43:95:d0:de:99:73:89:97:ea:c3:c2:65:08:
                    ba:84:d1:e7:97:d7:de:45:f9:ff:02:a2:b7:4f:7e:
                    33:8f:6f:bd:3b:70:92:e0:b6:da:3f:e0:4c:35:ad:
                    97:94:5b:ea:06:e3:ef:7c:1b:66:48:01:b7:df:7c:
                    49:83:12:b8:cc:b1:73:ca:3f:a7:d8:85:53:a2:b5:
                    c1:3d:54:80:57:07:97:a0:ea:1a:2a:3d:d1:d4:54:
                    72:ba:44:4e:3a:5d:ef:a4:dc:42:d9:89:7b:e2:c8:
                    bd:d4:5e:6d:7c:32:82:bc:52:90:e9:e0:ff:85:d9:
                    6f:ad:34:6f:c4:03:8a:7a:9c:35:96:0c:d7:05:0e:
                    30:36:85:7a:ae:0a:7c:1a:a0:a0:f1:13:ab:7f:f5:
                    97:04:be:4a:54:46:55:bf:78:43:9d:fa:54:39:50:
                    0a:35:28:61:cd:6b:58:dc:70:e4:5d:8d:cd:71:08:
                    a3:a3:6e:26:03:27:b0:3e:7a:ce:3d:a3:e3:dc:f4:
                    80:31:64:ea:f6:d1:a1:60:85:c6:d9:92:db:6b:db:
                    33:d6:e7:eb:8d:ac:67:21:01:7b:55:e3:4e:03:d7:
                    b2:80:89:f7:75:7a:27:75:66:c8:e4:c6:d5:1a:75:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:E1:5A:88:A8:92:59:F6:96:8D:14:3D:3E:C5:77:60:C1:AE:D0
            X509v3 Authority Key Identifier:
                keyid:EF:E0:39:64:DB:34:2A:D0:23:EA:7E:3D:58:F0:9D:FE:0D:F6:2B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/0/EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/0/34352e3137342e33362e302f32322d3234203d3e20323638383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:fb:bc:0b:14:74:e0:42:f4:b6:b3:b2:d2:9f:e2:cb:39:6e:
         8c:07:e5:59:64:f4:78:2b:21:84:f9:3d:95:2f:9f:13:7b:ec:
         a1:93:bb:22:92:bb:90:7d:d5:05:71:2d:c6:18:5f:18:2f:9a:
         c0:10:41:33:bb:e3:b2:8e:42:a4:4f:d9:0d:73:3f:71:e8:d7:
         e6:96:d0:77:b5:b2:6b:f2:a4:4f:08:7b:e3:bc:f9:72:61:7b:
         da:e3:52:b7:b5:04:3d:33:a5:62:99:c0:0e:34:7e:91:84:70:
         af:94:28:c7:4c:db:e0:3a:3a:40:1c:1e:91:90:24:f8:90:ec:
         88:13:cc:39:5b:60:3a:e8:42:66:b6:eb:8d:72:75:44:7e:52:
         99:1b:f9:c5:30:bd:a8:93:91:ca:e3:98:f8:e3:08:53:2e:0b:
         05:5e:ce:a0:a0:71:28:90:b2:72:cc:2f:b5:02:9c:08:a7:b4:
         5d:00:78:97:fd:a6:1d:79:f2:24:bf:f2:c5:c3:c9:9e:10:d7:
         37:9f:10:fc:88:cb:e8:6e:59:c1:f1:4d:c2:ed:28:82:8f:cb:
         ba:6c:f6:32:50:46:02:27:47:39:ef:8d:82:cf:73:a2:32:14:
         c0:d6:32:6f:eb:84:80:f8:0e:ad:01:93:00:f4:4c:76:c5:c5:
         c1:cb:66:fc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHLhvWx/2fg/KhhpELV3OqfIJBBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZFMDM5NjREQjM0MkFEMDIzRUE3RTNENThGMDlERkUw
REY2MkJENjAeFw0yNDAyMjcxNDA5MDNaFw0yNTAyMjUxNDE0MDNaMDMxMTAvBgNV
BAMTKDA1REVFMTVBODhBODkyNTlGNjk2OEQxNDNEM0VDNTc3NjBDMUFFRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf/LRnkOgSCth+ksjgLpKQQ5XQ
3plziZfqw8JlCLqE0eeX195F+f8CordPfjOPb707cJLgtto/4Ew1rZeUW+oG4+98
G2ZIAbfffEmDErjMsXPKP6fYhVOitcE9VIBXB5eg6hoqPdHUVHK6RE46Xe+k3ELZ
iXviyL3UXm18MoK8UpDp4P+F2W+tNG/EA4p6nDWWDNcFDjA2hXquCnwaoKDxE6t/
9ZcEvkpURlW/eEOd+lQ5UAo1KGHNa1jccORdjc1xCKOjbiYDJ7A+es49o+Pc9IAx
ZOr20aFghcbZkttr2zPW5+uNrGchAXtV404D17KAifd1eid1ZsjkxtUaddW5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBd7hWoiokln2lo0UPT7Fd2DBrtAwHwYDVR0j
BBgwFoAU7+A5ZNs0KtAj6n49WPCd/g32K9YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3d3NkROTGo3NG1tU2o1cGVEd0trU0c5UlhaOUpqMjFHdWs2S0h4Y1NV
WDIvMC9FRkUwMzk2NERCMzQyQUQwMjNFQTdFM0Q1OEYwOURGRTBERjYyQkQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGRTAzOTY0REIzNDJBRDAy
M0VBN0UzRDU4RjA5REZFMERGNjJCRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3dzZETkxqNzRtbVNqNXBlRHdLa1NHOVJYWjlKajIxR3VrNktIeGNTVVgyLzAv
MzQzNTJlMzEzNzM0MmUzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa4kMA0GCSqGSIb3DQEBCwUAA4IBAQAY+7wLFHTg
QvS2s7LSn+LLOW6MB+VZZPR4KyGE+T2VL58Te+yhk7sikruQfdUFcS3GGF8YL5rA
EEEzu+OyjkKkT9kNcz9x6NfmltB3tbJr8qRPCHvjvPlyYXva41K3tQQ9M6VimcAO
NH6RhHCvlCjHTNvgOjpAHB6RkCT4kOyIE8w5W2A66EJmtuuNcnVEflKZG/nFML2o
k5HK45j44whTLgsFXs6goHEokLJyzC+1ApwIp7RdAHiX/aYdefIkv/LFw8meENc3
nxD8iMvoblnB8U3C7SiCj8u6bPYyUEYCJ0c5742Cz3OiMhTA1jJv64SA+A6tAZMA
9Ex2xcXBy2b8
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org