Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139362e302f32342d3234203d3e20323639313937.roa
File:                     34352e3138312e3139362e302f32342d3234203d3e20323639313937.roa (raw, json)
Hash identifier:          EHBL1LB5y+u957lJbrlEnrWAdnqhjWd8ePl7PCtHF0s=
Subject key identifier:   44:96:25:86:58:30:7C:F7:F8:28:A9:F9:94:E3:4E:6F:6E:70:A6:E9
Certificate issuer:       /CN=06AB476C0D831228F3F27817D9D72D20D21DB145
Certificate serial:       0318BDA6086E3CEEEF359C0EFC98B1F919110090
Authority key identifier: 06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139362e302f32342d3234203d3e20323639313937.roa
Signing time:             Thu 27 Jul 2023 12:21:56 +0000
ROA not before:           Thu 27 Jul 2023 12:16:56 +0000
ROA not after:            Thu 25 Jul 2024 12:21:56 +0000
asID:                     269197
IP address blocks:        45.181.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:18:bd:a6:08:6e:3c:ee:ef:35:9c:0e:fc:98:b1:f9:19:11:00:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AB476C0D831228F3F27817D9D72D20D21DB145
        Validity
            Not Before: Jul 27 12:16:56 2023 GMT
            Not After : Jul 25 12:21:56 2024 GMT
        Subject: CN=4496258658307CF7F828A9F994E34E6F6E70A6E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:e8:dd:8d:11:de:b7:7c:56:00:d1:02:ad:
                    b9:d0:a4:8c:c5:31:f6:20:79:ca:83:4e:77:a1:ad:
                    dd:6c:18:88:cf:6c:4f:ad:90:4f:8c:1c:6d:96:2b:
                    00:ab:d9:a7:78:4e:8b:03:80:3f:59:65:c6:d4:76:
                    eb:38:db:86:33:b9:08:7d:41:00:fd:f7:ac:b8:8c:
                    6c:bd:8b:1a:1a:bb:7a:21:34:f4:77:78:7a:76:a6:
                    27:7d:8a:d6:f0:cd:33:fa:49:22:c3:24:17:51:3b:
                    c0:a5:bb:52:04:26:b2:61:d8:67:c8:bd:58:4a:24:
                    fa:df:17:b4:77:dc:44:cb:db:61:71:9b:b9:7a:af:
                    22:9c:28:7c:c1:f7:3a:26:0d:c9:68:e0:4e:e3:11:
                    d1:a1:68:bd:cc:cf:ad:c4:aa:e9:7a:b2:4f:97:fb:
                    3d:41:d4:e4:5e:0a:ab:84:dc:03:b2:90:99:85:0c:
                    71:a6:13:2e:fc:13:ff:20:b5:4c:61:2a:f4:f0:e4:
                    ad:5d:ec:6c:31:df:4f:40:7d:3b:a8:69:c7:cd:eb:
                    4f:cf:08:0d:2b:fc:c1:85:78:3b:7c:7a:e2:87:04:
                    ed:7f:0e:9e:cc:b8:9d:0c:cd:ee:6c:36:e3:45:05:
                    25:37:40:04:4c:7a:f8:5f:dc:cc:b2:5c:95:e8:e4:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:96:25:86:58:30:7C:F7:F8:28:A9:F9:94:E3:4E:6F:6E:70:A6:E9
            X509v3 Authority Key Identifier:
                keyid:06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/06AB476C0D831228F3F27817D9D72D20D21DB145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139362e302f32342d3234203d3e20323639313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:be:08:49:0b:6a:7e:d5:7a:48:37:03:62:7c:5c:29:bd:
         53:c5:5c:37:84:91:e0:86:b6:cf:35:cd:50:24:5c:8f:96:6b:
         d4:22:3f:e4:6a:fa:bd:74:52:f3:bd:45:a6:8a:4f:46:e1:9b:
         d5:42:69:b6:33:6b:8b:8e:7e:f8:a4:7c:94:2f:9f:a2:36:5f:
         93:29:47:68:d0:1d:24:d2:be:22:8c:25:a4:ed:7f:f0:09:24:
         5b:5c:f7:bf:b8:7f:c3:1b:7a:ff:64:b4:bb:65:ac:43:06:b6:
         a0:42:48:d2:58:63:01:15:8b:96:e4:df:33:d9:b6:21:37:35:
         f7:b4:de:7a:e2:7a:ca:0a:78:a0:6c:62:bf:58:f2:e0:47:ee:
         6e:93:f4:52:9e:1e:12:37:e0:b1:71:f2:be:a8:ef:9b:2c:6e:
         da:aa:2f:b7:8f:11:ea:9c:cc:4d:7f:48:e5:2a:14:cf:4c:fa:
         b0:6b:c9:50:18:f8:45:50:a6:85:32:30:6c:1c:c0:99:7b:bb:
         6b:4d:d6:52:b7:da:e7:f8:5c:2d:05:17:ac:f1:97:be:4b:d1:
         82:89:c0:17:5a:74:b7:65:7c:d5:07:bb:72:c9:23:94:e2:36:
         db:b5:c9:ca:94:7a:0d:3a:ec:06:11:1f:77:f1:df:45:f0:e2:
         de:ab:7a:cc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAxi9pghuPO7vNZwO/Jix+RkRAJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBQjQ3NkMwRDgzMTIyOEYzRjI3ODE3RDlENzJEMjBE
MjFEQjE0NTAeFw0yMzA3MjcxMjE2NTZaFw0yNDA3MjUxMjIxNTZaMDMxMTAvBgNV
BAMTKDQ0OTYyNTg2NTgzMDdDRjdGODI4QTlGOTk0RTM0RTZGNkU3MEE2RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDls+jdjRHet3xWANECrbnQpIzF
MfYgecqDTnehrd1sGIjPbE+tkE+MHG2WKwCr2ad4TosDgD9ZZcbUdus424YzuQh9
QQD996y4jGy9ixoau3ohNPR3eHp2pid9itbwzTP6SSLDJBdRO8Clu1IEJrJh2GfI
vVhKJPrfF7R33ETL22Fxm7l6ryKcKHzB9zomDclo4E7jEdGhaL3Mz63Equl6sk+X
+z1B1OReCquE3AOykJmFDHGmEy78E/8gtUxhKvTw5K1d7Gwx309AfTuoacfN60/P
CA0r/MGFeDt8euKHBO1/Dp7MuJ0Mze5sNuNFBSU3QARMevhf3MyyXJXo5I11AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURJYlhlgwfPf4KKn5lONOb25wpukwHwYDVR0j
BBgwFoAUBqtHbA2DEijz8ngX2dctINIdsUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1Na
dUQvMC8wNkFCNDc2QzBEODMxMjI4RjNGMjc4MTdEOUQ3MkQyMEQyMURCMTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA2QUI0NzZDMEQ4MzEyMjhG
M0YyNzgxN0Q5RDcyRDIwRDIxREIxNDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWS2tUWmZLaUxGb3JVTWhZUkp5R2JuWXBFeEY0a0Q1QVFaaGk4dTdTWnVELzAv
MzQzNTJlMzEzODMxMmUzMTM5MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAttcQwDQYJKoZIhvcNAQELBQADggEBAFu8vghJ
C2p+1XpINwNifFwpvVPFXDeEkeCGts81zVAkXI+Wa9QiP+Rq+r10UvO9RaaKT0bh
m9VCabYza4uOfvikfJQvn6I2X5MpR2jQHSTSviKMJaTtf/AJJFtc97+4f8Mbev9k
tLtlrEMGtqBCSNJYYwEVi5bk3zPZtiE3Nfe03nriesoKeKBsYr9Y8uBH7m6T9FKe
HhI34LFx8r6o75ssbtqqL7ePEeqczE1/SOUqFM9M+rBryVAY+EVQpoUyMGwcwJl7
u2tN1lK32uf4XC0FF6zxl75L0YKJwBdadLdlfNUHu3LJI5TiNtu1ycqUeg067AYR
H3fx30Xw4t6resw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org