Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/3230302e3134352e302e302f31362d3138203d3e203533313636.roa
File:                     3230302e3134352e302e302f31362d3138203d3e203533313636.roa (raw, json)
Hash identifier:          Y3BC+h+/4J8viiHt/tBY8aFJPm2RgmhJFv07El4u7nU=
Subject key identifier:   CE:46:1C:7B:A7:48:77:A6:31:CE:13:F5:81:02:8C:D9:38:EF:3F:37
Certificate issuer:       /CN=49614450300ED637E45BF74DC34E5F5622997AE3
Certificate serial:       37D0C98B8F0F4859F7DCD0913EC99EFAF153751B
Authority key identifier: 49:61:44:50:30:0E:D6:37:E4:5B:F7:4D:C3:4E:5F:56:22:99:7A:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49614450300ED637E45BF74DC34E5F5622997AE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/3230302e3134352e302e302f31362d3138203d3e203533313636.roa
Signing time:             Fri 22 Dec 2023 15:00:00 +0000
ROA not before:           Fri 22 Dec 2023 14:55:00 +0000
ROA not after:            Fri 20 Dec 2024 15:00:00 +0000
asID:                     53166
IP address blocks:        200.145.0.0/16 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d0:c9:8b:8f:0f:48:59:f7:dc:d0:91:3e:c9:9e:fa:f1:53:75:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49614450300ED637E45BF74DC34E5F5622997AE3
        Validity
            Not Before: Dec 22 14:55:00 2023 GMT
            Not After : Dec 20 15:00:00 2024 GMT
        Subject: CN=CE461C7BA74877A631CE13F581028CD938EF3F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:4c:3b:0d:d1:60:c4:52:08:d2:7f:04:50:
                    a0:bd:62:dd:29:63:c6:ac:ac:58:e3:a8:38:e7:3d:
                    c7:49:cd:f6:db:f7:55:41:d2:34:8e:bf:07:87:20:
                    57:51:23:88:f6:c1:a8:58:ac:66:73:73:77:0f:9a:
                    da:5a:ac:03:28:c6:02:78:98:8e:b4:7f:4e:7b:87:
                    22:27:74:fe:a7:7d:bf:9c:2d:fc:8e:28:12:13:68:
                    17:e7:37:22:c5:af:2c:c9:fd:dc:10:de:f5:20:b1:
                    83:b6:d7:71:c3:71:d8:ae:97:1b:dd:b8:8a:f8:dd:
                    e4:09:a3:df:de:35:0a:1e:e4:38:07:f9:84:2c:26:
                    72:c5:e6:66:6c:50:f8:4c:67:9f:9e:11:12:6d:f6:
                    6e:df:ca:a4:b2:f6:e9:2c:98:35:d1:13:b6:82:fb:
                    07:e2:30:2b:3e:f4:d8:da:a6:9f:f8:c4:a2:b2:2a:
                    40:2e:b7:78:2f:33:7c:ab:40:90:76:a2:38:7f:f3:
                    ba:58:d7:88:6d:7c:ba:97:c5:a9:4a:84:1e:ad:f8:
                    29:0c:a2:5d:01:c0:9c:99:82:d7:c9:f0:38:5e:e0:
                    d2:23:de:97:3b:0c:1d:6c:62:80:ff:4f:37:40:8c:
                    b6:f8:e6:72:70:59:59:94:9b:bc:4a:25:d9:97:ba:
                    55:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:1C:7B:A7:48:77:A6:31:CE:13:F5:81:02:8C:D9:38:EF:3F:37
            X509v3 Authority Key Identifier:
                keyid:49:61:44:50:30:0E:D6:37:E4:5B:F7:4D:C3:4E:5F:56:22:99:7A:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/49614450300ED637E45BF74DC34E5F5622997AE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49614450300ED637E45BF74DC34E5F5622997AE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/3230302e3134352e302e302f31362d3138203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:4e:21:e2:96:91:dc:59:ab:69:26:d6:22:68:38:8a:a3:04:
         0c:c3:25:8b:05:ba:34:5a:60:fb:b4:c1:3e:a0:15:19:f6:39:
         18:26:fe:1a:a2:0f:99:3c:9d:d3:46:cc:da:ce:d8:8f:ee:52:
         5b:52:4a:39:85:c5:d3:93:64:a5:a0:c9:2f:1e:4d:a6:64:e0:
         1d:60:83:3c:a9:07:05:99:83:c4:6d:7b:f6:91:9a:9d:be:80:
         59:8f:7c:de:18:8f:d7:ab:d1:fc:68:0a:45:54:d4:ff:94:f1:
         8f:aa:7c:1b:41:42:b2:66:81:19:56:c2:b8:22:b1:59:28:20:
         fe:68:10:53:2d:e5:c8:e1:3a:f1:29:8e:34:d3:53:e8:2e:54:
         27:d5:e4:9f:74:0d:45:e7:6b:b9:9e:3b:ad:b1:90:a1:ac:94:
         e4:aa:5d:79:5a:40:99:b8:4d:7f:41:af:44:71:82:d4:2b:84:
         ef:73:cb:8d:4a:42:f9:fd:9c:84:78:69:d0:36:ee:60:12:08:
         0b:5b:c1:6f:4e:cd:b9:ef:81:71:0c:c6:6a:68:ed:7e:f0:77:
         c0:02:34:8a:2c:7a:ee:75:a3:c8:b8:4d:c1:f4:22:3b:b4:11:
         12:6d:14:b1:2a:b0:2d:20:e5:b9:bc:a2:6a:20:bf:e0:f1:b2:
         85:99:ed:78
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUN9DJi48PSFn33NCRPsme+vFTdRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk2MTQ0NTAzMDBFRDYzN0U0NUJGNzREQzM0RTVGNTYy
Mjk5N0FFMzAeFw0yMzEyMjIxNDU1MDBaFw0yNDEyMjAxNTAwMDBaMDMxMTAvBgNV
BAMTKENFNDYxQzdCQTc0ODc3QTYzMUNFMTNGNTgxMDI4Q0Q5MzhFRjNGMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC610w7DdFgxFII0n8EUKC9Yt0p
Y8asrFjjqDjnPcdJzfbb91VB0jSOvweHIFdRI4j2wahYrGZzc3cPmtparAMoxgJ4
mI60f057hyIndP6nfb+cLfyOKBITaBfnNyLFryzJ/dwQ3vUgsYO213HDcdiulxvd
uIr43eQJo9/eNQoe5DgH+YQsJnLF5mZsUPhMZ5+eERJt9m7fyqSy9uksmDXRE7aC
+wfiMCs+9Njapp/4xKKyKkAut3gvM3yrQJB2ojh/87pY14htfLqXxalKhB6t+CkM
ol0BwJyZgtfJ8Dhe4NIj3pc7DB1sYoD/TzdAjLb45nJwWVmUm7xKJdmXulWDAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUzkYce6dId6YxzhP1gQKM2TjvPzcwHwYDVR0j
BBgwFoAUSWFEUDAO1jfkW/dNw05fViKZeuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTR3V0Q2aVp5OWltUjJNamhvQjQ3S1NtQXZQdk1pY2k4MVlqQ1k5ZXBB
MmovMC80OTYxNDQ1MDMwMEVENjM3RTQ1QkY3NERDMzRFNUY1NjIyOTk3QUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5NjE0NDUwMzAwRUQ2MzdF
NDVCRjc0REMzNEU1RjU2MjI5OTdBRTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U0d1dENmlaeTlpbVIyTWpob0I0N0tTbUF2UHZNaWNpODFZakNZOWVwQTJqLzAv
MzIzMDMwMmUzMTM0MzUyZTMwMmUzMDJmMzEzNjJkMzEzODIwM2QzZTIwMzUzMzMx
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB
/wQPMA0wCwQCAAEwBQMDAMiRMA0GCSqGSIb3DQEBCwUAA4IBAQBxTiHilpHcWatp
JtYiaDiKowQMwyWLBbo0WmD7tME+oBUZ9jkYJv4aog+ZPJ3TRszaztiP7lJbUko5
hcXTk2SloMkvHk2mZOAdYIM8qQcFmYPEbXv2kZqdvoBZj3zeGI/Xq9H8aApFVNT/
lPGPqnwbQUKyZoEZVsK4IrFZKCD+aBBTLeXI4TrxKY4001PoLlQn1eSfdA1F52u5
njutsZChrJTkql15WkCZuE1/Qa9EcYLUK4Tvc8uNSkL5/ZyEeGnQNu5gEggLW8Fv
Ts2574FxDMZqaO1+8HfAAjSKLHrudaPIuE3B9CI7tBESbRSxKrAtIOW5vKJqIL/g
8bKFme14
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org