Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/0/34352e3138322e36382e302f32322d3234203d3e20323639323135.roa
File:                     34352e3138322e36382e302f32322d3234203d3e20323639323135.roa (raw, json)
Hash identifier:          9ohsAa817Pfq66nQjbuPqK2g+zeXeclne5ul3BL74UU=
Subject key identifier:   51:4F:84:3E:12:23:9D:91:59:33:25:7E:15:38:03:3B:FB:FF:F7:E4
Certificate issuer:       /CN=C5CD326FCF0499DD7B0D2AEE545E54B8092095F5
Certificate serial:       3C83EEBEEAE3A20975193D2212DB929717E1D999
Authority key identifier: C5:CD:32:6F:CF:04:99:DD:7B:0D:2A:EE:54:5E:54:B8:09:20:95:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5CD326FCF0499DD7B0D2AEE545E54B8092095F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/0/34352e3138322e36382e302f32322d3234203d3e20323639323135.roa
Signing time:             Fri 29 Dec 2023 15:00:00 +0000
ROA not before:           Fri 29 Dec 2023 14:55:00 +0000
ROA not after:            Fri 27 Dec 2024 15:00:00 +0000
asID:                     269215
IP address blocks:        45.182.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:83:ee:be:ea:e3:a2:09:75:19:3d:22:12:db:92:97:17:e1:d9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CD326FCF0499DD7B0D2AEE545E54B8092095F5
        Validity
            Not Before: Dec 29 14:55:00 2023 GMT
            Not After : Dec 27 15:00:00 2024 GMT
        Subject: CN=514F843E12239D915933257E1538033BFBFFF7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:68:48:e7:1f:ca:26:d2:ba:a3:ab:6c:84:
                    9e:e8:6f:b0:5a:76:78:c4:eb:a0:e3:af:ef:b2:cf:
                    4e:cf:1d:93:95:8b:9d:ba:34:3a:f2:58:10:86:61:
                    3c:53:9d:05:1e:7f:72:37:33:36:51:3f:5e:e3:cc:
                    80:7d:c3:14:2f:d0:61:b9:6d:fe:fb:6a:38:7a:37:
                    ae:3e:1e:85:88:7e:6a:48:20:62:91:44:7b:8a:4d:
                    3e:6d:7b:7e:7a:9d:0e:36:73:d2:e2:79:6e:58:c8:
                    41:a7:38:38:ae:5b:f7:79:dd:25:1e:61:04:9f:7f:
                    54:b1:db:25:c9:30:05:b5:35:1b:f0:05:81:88:0f:
                    08:71:e4:e9:39:82:63:10:e9:72:3b:b1:98:56:4a:
                    71:ce:d1:7d:20:a0:e4:4d:e1:4b:af:84:79:2b:2a:
                    d0:0f:8d:b7:9c:e9:3e:9c:d1:cd:69:88:a6:96:19:
                    e9:56:88:3e:ca:5c:7d:e1:e6:73:8f:b0:27:56:70:
                    e0:5d:4f:27:b0:0d:6e:a6:d2:fc:2b:0e:df:f1:de:
                    20:71:5b:6b:2d:dc:d7:27:c2:db:f4:b4:3e:3f:95:
                    8d:bb:f8:9d:14:2c:ca:d0:ac:f5:bc:47:84:c7:5f:
                    64:0a:cd:c6:d1:d2:fe:e7:f1:1c:db:5f:ce:1b:b0:
                    3b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4F:84:3E:12:23:9D:91:59:33:25:7E:15:38:03:3B:FB:FF:F7:E4
            X509v3 Authority Key Identifier:
                keyid:C5:CD:32:6F:CF:04:99:DD:7B:0D:2A:EE:54:5E:54:B8:09:20:95:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/0/C5CD326FCF0499DD7B0D2AEE545E54B8092095F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5CD326FCF0499DD7B0D2AEE545E54B8092095F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/0/34352e3138322e36382e302f32322d3234203d3e20323639323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:2c:76:ad:a7:98:d3:f2:a0:98:52:2a:be:99:ed:1b:f5:
         c2:6e:94:17:fa:1c:81:8a:a7:bb:23:b7:81:c3:01:b8:89:5f:
         a4:17:22:eb:fe:df:97:53:33:9b:03:4f:92:24:62:40:7c:99:
         31:7c:2e:34:8d:ef:bb:7a:a3:9a:70:7e:33:d0:21:5e:7a:4e:
         93:1b:b2:e3:52:18:e2:ea:e4:61:19:8c:ae:2a:fe:17:49:c4:
         46:62:1b:1c:21:29:f3:72:8a:b2:e2:c3:0e:5f:2f:c1:9c:51:
         4f:2f:10:c4:8a:90:f9:a6:1b:10:eb:7f:3b:89:b8:35:aa:bf:
         a0:10:07:fe:5d:7d:92:ad:ad:49:70:c8:c4:fd:0d:28:4b:9b:
         1a:7e:8d:4b:b4:c9:c9:8a:7f:91:5e:d9:1a:81:ad:36:57:40:
         7c:a2:b0:d3:31:7a:f2:95:8f:df:6d:32:f5:51:3f:41:21:35:
         26:8c:6c:e2:72:9c:1b:ad:18:84:26:73:a0:5e:d5:a5:74:36:
         57:47:7e:96:ee:3b:e5:dc:85:a1:af:8b:64:d6:d8:26:be:a5:
         b1:15:07:1a:67:20:2a:21:9b:7a:a3:d3:a1:d4:2e:db:66:33:
         02:d4:00:d4:d3:c1:df:9e:d1:51:62:1b:e2:73:69:05:9b:f3:
         10:ad:33:ae
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPIPuvurjogl1GT0iEtuSlxfh2ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVDRDMyNkZDRjA0OTlERDdCMEQyQUVFNTQ1RTU0Qjgw
OTIwOTVGNTAeFw0yMzEyMjkxNDU1MDBaFw0yNDEyMjcxNTAwMDBaMDMxMTAvBgNV
BAMTKDUxNEY4NDNFMTIyMzlEOTE1OTMzMjU3RTE1MzgwMzNCRkJGRkY3RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkrWhI5x/KJtK6o6tshJ7ob7Ba
dnjE66Djr++yz07PHZOVi526NDryWBCGYTxTnQUef3I3MzZRP17jzIB9wxQv0GG5
bf77ajh6N64+HoWIfmpIIGKRRHuKTT5te356nQ42c9LieW5YyEGnODiuW/d53SUe
YQSff1Sx2yXJMAW1NRvwBYGIDwhx5Ok5gmMQ6XI7sZhWSnHO0X0goORN4UuvhHkr
KtAPjbec6T6c0c1piKaWGelWiD7KXH3h5nOPsCdWcOBdTyewDW6m0vwrDt/x3iBx
W2st3Ncnwtv0tD4/lY27+J0ULMrQrPW8R4THX2QKzcbR0v7n8RzbX84bsDsVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUU+EPhIjnZFZMyV+FTgDO/v/9+QwHwYDVR0j
BBgwFoAUxc0yb88Emd17DSruVF5UuAkglfUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnFwQVR1ck0yWXB5bUZBeFlMMW1IWnhzMU1paG1YUjJ1dldWYkVteTFn
YjcvMC9DNUNEMzI2RkNGMDQ5OUREN0IwRDJBRUU1NDVFNTRCODA5MjA5NUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1Q0QzMjZGQ0YwNDk5REQ3
QjBEMkFFRTU0NUU1NEI4MDkyMDk1RjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JxcEFUdXJNMllweW1GQXhZTDFtSFp4czFNaWhtWFIydXZXVmJFbXkxZ2I3LzAv
MzQzNTJlMzEzODMyMmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbZEMA0GCSqGSIb3DQEBCwUAA4IBAQCQzSx2raeY
0/KgmFIqvpntG/XCbpQX+hyBiqe7I7eBwwG4iV+kFyLr/t+XUzObA0+SJGJAfJkx
fC40je+7eqOacH4z0CFeek6TG7LjUhji6uRhGYyuKv4XScRGYhscISnzcoqy4sMO
Xy/BnFFPLxDEipD5phsQ6387ibg1qr+gEAf+XX2Sra1JcMjE/Q0oS5safo1LtMnJ
in+RXtkaga02V0B8orDTMXrylY/fbTL1UT9BITUmjGzicpwbrRiEJnOgXtWldDZX
R36W7jvl3IWhr4tk1tgmvqWxFQcaZyAqIZt6o9Oh1C7bZjMC1ADU08HfntFRYhvi
c2kFm/MQrTOu
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org