Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
File:                     34352e36352e3133302e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier:          pMaNI7ac5KTlp+Xom+/FPhN+Bg62pD+Xm8ipQLgm6po=
Subject key identifier:   2C:C5:E5:68:95:46:94:65:B7:0F:DD:34:B8:67:CA:A9:26:51:26:A5
Certificate issuer:       /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial:       63A6BCB6FDFC6035EC965DD2BA3A8DDB1927F552
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
Signing time:             Tue 09 Jan 2024 11:37:00 +0000
ROA not before:           Tue 09 Jan 2024 11:32:00 +0000
ROA not after:            Tue 07 Jan 2025 11:37:00 +0000
asID:                     266528
IP address blocks:        45.65.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a6:bc:b6:fd:fc:60:35:ec:96:5d:d2:ba:3a:8d:db:19:27:f5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
        Validity
            Not Before: Jan  9 11:32:00 2024 GMT
            Not After : Jan  7 11:37:00 2025 GMT
        Subject: CN=2CC5E56895469465B70FDD34B867CAA9265126A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:3a:7f:e4:f5:2c:e6:9a:ee:87:24:84:88:
                    7a:db:40:8d:59:93:7d:d1:62:d9:06:af:2c:fa:fd:
                    73:bf:96:4e:34:bb:64:ef:20:2b:c3:29:aa:5b:9f:
                    35:95:8c:05:29:59:b8:e6:03:5d:d4:63:86:d2:7e:
                    a4:66:27:58:45:e9:e1:fb:58:a0:dd:13:b3:43:cf:
                    83:41:37:d8:d1:15:78:63:72:b0:46:50:9c:fc:e9:
                    dd:8e:02:3f:9f:45:71:8e:f4:fc:f9:b2:90:92:b1:
                    d2:e3:8c:cf:30:ea:b4:43:25:36:0e:4c:ef:d8:31:
                    13:fa:2e:95:29:16:b0:b3:8a:1d:15:ab:c5:92:97:
                    c5:d6:58:68:9e:f1:91:39:08:01:bc:da:13:9b:cb:
                    ed:47:df:97:c2:c4:99:93:e3:51:3b:10:60:92:46:
                    97:e7:43:98:33:53:b6:d2:cc:81:54:86:d6:3e:e2:
                    0e:8f:f5:f3:c5:07:6f:f7:b3:49:73:2e:be:74:a2:
                    37:ae:c0:1d:66:85:b3:e3:7b:bd:5a:14:f1:1f:fd:
                    e4:74:88:23:30:9d:7d:a0:a4:d6:02:dc:be:c2:17:
                    b5:95:10:37:b5:37:dc:58:d4:6c:c6:60:71:46:71:
                    f3:61:68:a7:42:56:0e:a8:ce:e9:05:d1:6f:5c:aa:
                    f7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C5:E5:68:95:46:94:65:B7:0F:DD:34:B8:67:CA:A9:26:51:26:A5
            X509v3 Authority Key Identifier:
                keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:d4:58:22:85:09:32:91:f0:7d:19:3d:a8:3b:64:fc:43:
         13:29:ee:45:19:17:d8:93:1d:9a:d1:f8:ac:ae:4c:03:88:57:
         92:a1:3e:83:77:21:e1:80:d9:83:cc:68:12:e9:1b:b8:4e:7f:
         69:a4:d1:1d:83:51:84:51:17:35:7c:19:0a:58:f7:ca:e7:21:
         7e:21:1e:51:f0:51:2a:9a:66:93:1a:46:70:9b:c5:dc:f6:cf:
         ea:f0:f9:69:cc:a9:11:ac:f4:d4:22:fc:9d:b7:49:4c:5a:a0:
         30:27:37:48:f0:b1:55:0b:e2:49:65:1f:8c:6f:0a:ff:c1:b7:
         df:06:e1:6e:40:1d:9f:ae:f3:84:de:e1:7b:a3:8c:e7:f9:f2:
         01:28:c9:a7:80:53:4b:db:10:66:20:18:e2:58:20:b6:3c:9b:
         ea:55:a4:8e:b8:ab:57:7c:1b:af:a6:e9:bf:d8:10:35:4f:cc:
         7b:bb:b7:e3:b2:3e:e3:0a:42:27:ce:8d:13:7a:68:a7:91:3e:
         63:1c:76:05:42:97:aa:9c:41:58:93:3c:7d:f8:94:bf:e4:b4:
         db:69:1c:5b:84:4e:92:a3:da:af:1c:d5:57:4b:1c:f3:94:65:
         60:9e:87:7b:49:c7:26:f6:69:e6:f0:7d:83:ac:60:2d:1e:83:
         a6:1e:75:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY6a8tv38YDXsll3SujqN2xkn9VIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5NzIwRTM3MTk5MjNCMkQ4QjA2RUY4RjBCM0M1OTI0
N0Q2OUFGMTAeFw0yNDAxMDkxMTMyMDBaFw0yNTAxMDcxMTM3MDBaMDMxMTAvBgNV
BAMTKDJDQzVFNTY4OTU0Njk0NjVCNzBGREQzNEI4NjdDQUE5MjY1MTI2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8Dp/5PUs5pruhySEiHrbQI1Z
k33RYtkGryz6/XO/lk40u2TvICvDKapbnzWVjAUpWbjmA13UY4bSfqRmJ1hF6eH7
WKDdE7NDz4NBN9jRFXhjcrBGUJz86d2OAj+fRXGO9Pz5spCSsdLjjM8w6rRDJTYO
TO/YMRP6LpUpFrCzih0Vq8WSl8XWWGie8ZE5CAG82hOby+1H35fCxJmT41E7EGCS
RpfnQ5gzU7bSzIFUhtY+4g6P9fPFB2/3s0lzLr50ojeuwB1mhbPje71aFPEf/eR0
iCMwnX2gpNYC3L7CF7WVEDe1N9xY1GzGYHFGcfNhaKdCVg6ozukF0W9cqvc1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULMXlaJVGlGW3D900uGfKqSZRJqUwHwYDVR0j
BBgwFoAUyJcg43GZI7LYsG748LPFkkfWmvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnJONWVYVDJNVUY1RnZNbWhCY25DRGpIdlBtYkZia21rV3hNQVNvN3Uy
dzIvMC9DODk3MjBFMzcxOTkyM0IyRDhCMDZFRjhGMEIzQzU5MjQ3RDY5QUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4OTcyMEUzNzE5OTIzQjJE
OEIwNkVGOEYwQjNDNTkyNDdENjlBRjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JyTjVlWFQyTVVGNUZ2TW1oQmNuQ0RqSHZQbWJGYmtta1d4TUFTbzd1MncyLzAv
MzQzNTJlMzYzNTJlMzEzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzUzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUGCMA0GCSqGSIb3DQEBCwUAA4IBAQCEjdRYIoUJ
MpHwfRk9qDtk/EMTKe5FGRfYkx2a0fisrkwDiFeSoT6DdyHhgNmDzGgS6Ru4Tn9p
pNEdg1GEURc1fBkKWPfK5yF+IR5R8FEqmmaTGkZwm8Xc9s/q8PlpzKkRrPTUIvyd
t0lMWqAwJzdI8LFVC+JJZR+Mbwr/wbffBuFuQB2frvOE3uF7o4zn+fIBKMmngFNL
2xBmIBjiWCC2PJvqVaSOuKtXfBuvpum/2BA1T8x7u7fjsj7jCkInzo0TeminkT5j
HHYFQpeqnEFYkzx9+JS/5LTbaRxbhE6So9qvHNVXSxzzlGVgnod7Sccm9mnm8H2D
rGAtHoOmHnWr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org