Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139382e302f32342d3234203d3e20323639313937.roa
File:                     34352e3138312e3139382e302f32342d3234203d3e20323639313937.roa (raw, json)
Hash identifier:          zGHd00dmRyBm2DZ8YmOFyKaYcDuA+LGyODOqciTI17o=
Subject key identifier:   D7:FB:43:52:7C:66:2B:C2:26:DF:41:FE:49:5B:2D:B1:B2:06:8F:81
Certificate issuer:       /CN=06AB476C0D831228F3F27817D9D72D20D21DB145
Certificate serial:       18E4CB378304A57F31E3C9715E03857E599C70DE
Authority key identifier: 06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139382e302f32342d3234203d3e20323639313937.roa
Signing time:             Thu 27 Jul 2023 12:21:56 +0000
ROA not before:           Thu 27 Jul 2023 12:16:56 +0000
ROA not after:            Thu 25 Jul 2024 12:21:56 +0000
asID:                     269197
IP address blocks:        45.181.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e4:cb:37:83:04:a5:7f:31:e3:c9:71:5e:03:85:7e:59:9c:70:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AB476C0D831228F3F27817D9D72D20D21DB145
        Validity
            Not Before: Jul 27 12:16:56 2023 GMT
            Not After : Jul 25 12:21:56 2024 GMT
        Subject: CN=D7FB43527C662BC226DF41FE495B2DB1B2068F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:65:29:93:91:75:30:18:1b:ce:84:2b:e2:
                    59:a8:02:1a:e9:a7:c5:cb:03:d3:a0:f2:a6:0a:3b:
                    f0:7c:51:72:9e:53:6d:c6:41:76:53:bf:07:07:6b:
                    11:ce:92:d8:24:09:e3:d7:e5:e8:23:79:4c:aa:66:
                    ce:12:1e:21:a4:8d:a4:40:d8:62:07:e2:76:81:99:
                    a7:f0:6b:d4:0b:40:ec:04:16:cc:28:f5:f0:86:f9:
                    f0:b5:42:ce:7a:94:b4:6b:46:0b:bb:17:e9:a0:ed:
                    ce:34:80:0f:d3:54:cd:ea:06:8f:fe:8c:29:83:a5:
                    43:51:53:c6:4b:c3:39:a2:e0:2c:ba:d4:af:3f:e6:
                    1a:bb:db:47:43:13:c1:f5:5e:3b:74:54:be:f5:3e:
                    4d:e4:90:07:85:81:9a:aa:d3:8b:d4:ee:4e:30:d7:
                    df:bb:4d:09:86:f7:9b:f9:2e:cb:01:33:2f:d8:60:
                    96:1f:fe:71:4f:7e:3e:ab:ba:61:45:51:06:2c:ec:
                    5a:39:b7:2a:31:e9:fd:66:52:89:0d:28:3f:10:c3:
                    5c:4c:cf:5e:22:90:fd:f8:cd:b9:7e:d7:76:e9:5e:
                    7a:3c:66:d5:21:5f:97:eb:cc:02:94:03:18:60:e0:
                    f8:c6:bc:94:ab:0f:86:db:78:a0:b5:cf:23:6d:bd:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FB:43:52:7C:66:2B:C2:26:DF:41:FE:49:5B:2D:B1:B2:06:8F:81
            X509v3 Authority Key Identifier:
                keyid:06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/06AB476C0D831228F3F27817D9D72D20D21DB145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139382e302f32342d3234203d3e20323639313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:97:7f:92:cd:2a:a7:65:72:39:be:d1:39:f5:2a:b2:ef:
         69:32:c7:d1:8d:6e:bc:3e:7a:ee:aa:57:c5:71:73:b9:dd:9a:
         ff:1e:67:99:a3:df:17:2c:78:fa:a7:fd:2b:4f:70:7a:5e:5f:
         9c:7b:d9:30:12:63:40:c6:33:7f:82:95:62:23:22:2f:60:e1:
         e6:b8:92:6f:b5:88:d9:f6:bf:42:5a:6f:0a:e3:f4:76:46:be:
         dd:90:d1:30:be:db:80:c5:b7:8f:57:6d:56:9b:9c:1b:09:b9:
         6f:2d:88:ab:69:d6:b2:6f:00:87:53:06:e1:7b:99:72:2e:64:
         0a:e6:cf:a7:e2:2e:85:c1:f7:dc:df:9a:58:19:af:30:69:3b:
         9d:37:81:6c:93:f7:a1:64:91:52:ec:86:ae:29:c1:49:12:a1:
         3f:7e:77:1f:d9:5f:50:d3:51:76:02:77:df:e8:3a:52:26:50:
         89:30:0b:b8:a2:1b:76:19:a1:0b:0a:6d:0a:b4:96:f8:7b:be:
         4e:76:d6:fb:11:0b:e0:ea:af:f4:fa:b0:c9:a9:98:d9:ac:93:
         1c:db:56:09:54:80:10:dd:4c:13:4a:ad:02:da:a4:22:cc:44:
         e1:e5:e3:c5:98:8c:43:bf:9b:f6:d1:1c:17:1a:5a:bc:9b:67:
         70:45:93:9c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGOTLN4MEpX8x48lxXgOFflmccN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBQjQ3NkMwRDgzMTIyOEYzRjI3ODE3RDlENzJEMjBE
MjFEQjE0NTAeFw0yMzA3MjcxMjE2NTZaFw0yNDA3MjUxMjIxNTZaMDMxMTAvBgNV
BAMTKEQ3RkI0MzUyN0M2NjJCQzIyNkRGNDFGRTQ5NUIyREIxQjIwNjhGODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJWUpk5F1MBgbzoQr4lmoAhrp
p8XLA9Og8qYKO/B8UXKeU23GQXZTvwcHaxHOktgkCePX5egjeUyqZs4SHiGkjaRA
2GIH4naBmafwa9QLQOwEFswo9fCG+fC1Qs56lLRrRgu7F+mg7c40gA/TVM3qBo/+
jCmDpUNRU8ZLwzmi4Cy61K8/5hq720dDE8H1Xjt0VL71Pk3kkAeFgZqq04vU7k4w
19+7TQmG95v5LssBMy/YYJYf/nFPfj6rumFFUQYs7Fo5tyox6f1mUokNKD8Qw1xM
z14ikP34zbl+13bpXno8ZtUhX5frzAKUAxhg4PjGvJSrD4bbeKC1zyNtvYVFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1/tDUnxmK8Im30H+SVstsbIGj4EwHwYDVR0j
BBgwFoAUBqtHbA2DEijz8ngX2dctINIdsUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1Na
dUQvMC8wNkFCNDc2QzBEODMxMjI4RjNGMjc4MTdEOUQ3MkQyMEQyMURCMTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA2QUI0NzZDMEQ4MzEyMjhG
M0YyNzgxN0Q5RDcyRDIwRDIxREIxNDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWS2tUWmZLaUxGb3JVTWhZUkp5R2JuWXBFeEY0a0Q1QVFaaGk4dTdTWnVELzAv
MzQzNTJlMzEzODMxMmUzMTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAttcYwDQYJKoZIhvcNAQELBQADggEBAKU3l3+S
zSqnZXI5vtE59Sqy72kyx9GNbrw+eu6qV8Vxc7ndmv8eZ5mj3xcsePqn/StPcHpe
X5x72TASY0DGM3+ClWIjIi9g4ea4km+1iNn2v0Jabwrj9HZGvt2Q0TC+24DFt49X
bVabnBsJuW8tiKtp1rJvAIdTBuF7mXIuZArmz6fiLoXB99zfmlgZrzBpO503gWyT
96FkkVLshq4pwUkSoT9+dx/ZX1DTUXYCd9/oOlImUIkwC7iiG3YZoQsKbQq0lvh7
vk521vsRC+Dqr/T6sMmpmNmskxzbVglUgBDdTBNKrQLapCLMROHl48WYjEO/m/bR
HBcaWrybZ3BFk5w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org