Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
File:                     34352e3138382e31302e302f32332d3233203d3e20323639353636.roa (raw, json)
Hash identifier:          SsAZPGWwV9Dhmzi/J4wQ0cUIIcoaaLTd9YNaF2VaHyY=
Subject key identifier:   2B:C2:62:6A:4C:87:16:69:CA:5F:89:EC:16:31:70:24:65:F2:E3:70
Certificate issuer:       /CN=D1AFA2F091C9D049DA7C881AF2A692163AAD4643
Certificate serial:       2C36A4C04C27601258F522B00580386BA6361B59
Authority key identifier: D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
Signing time:             Fri 29 Mar 2024 08:00:00 +0000
ROA not before:           Fri 29 Mar 2024 07:55:00 +0000
ROA not after:            Fri 28 Mar 2025 08:00:00 +0000
asID:                     269566
IP address blocks:        45.188.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:36:a4:c0:4c:27:60:12:58:f5:22:b0:05:80:38:6b:a6:36:1b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1AFA2F091C9D049DA7C881AF2A692163AAD4643
        Validity
            Not Before: Mar 29 07:55:00 2024 GMT
            Not After : Mar 28 08:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:1a:fc:7a:2b:78:20:0e:98:bb:e7:4d:8c:
                    33:88:96:92:86:0b:8b:40:3b:88:7c:cc:30:6b:09:
                    ac:eb:cf:11:50:73:a4:aa:df:7d:10:57:0f:f4:8e:
                    8e:f0:d6:6d:80:85:05:c7:c9:d2:fc:d9:44:de:4f:
                    24:e0:28:57:31:e6:fa:19:ed:ce:c5:d2:ee:96:0e:
                    a4:9d:f7:a4:dc:e6:13:57:9d:a4:8b:de:03:3d:38:
                    f2:24:0e:15:19:07:58:97:5c:7a:2c:90:43:bf:2d:
                    9d:b5:17:8a:4b:21:bd:c4:e2:b2:af:e5:1b:5c:19:
                    2b:0e:5a:9c:f4:30:c5:70:c6:fd:f9:ca:66:67:7c:
                    9c:fd:02:8f:9b:c3:36:bd:3c:a2:17:d4:f8:8d:63:
                    01:19:7b:30:33:cb:76:af:ab:96:7a:b8:90:21:7c:
                    b7:d8:af:29:ba:86:45:34:11:f1:be:20:8b:a5:7c:
                    af:4f:a9:47:2c:14:fd:7c:65:53:37:8c:fe:2e:4a:
                    8e:83:78:b3:6d:2e:ae:38:8f:b0:86:e6:11:bf:80:
                    7f:e9:af:93:62:33:e8:28:2e:1b:b3:2f:7b:95:0d:
                    21:a4:e8:cc:4a:10:67:ef:fd:8d:7b:c0:1f:66:63:
                    b5:eb:5f:a9:43:01:a3:73:c4:7a:e2:cf:5e:e8:4b:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C2:62:6A:4C:87:16:69:CA:5F:89:EC:16:31:70:24:65:F2:E3:70
            X509v3 Authority Key Identifier:
                keyid:D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:25:e8:0e:e0:ae:05:84:bd:9b:55:b2:56:b9:66:79:b1:9c:
         b4:f3:00:f7:f6:e7:94:70:6e:10:cb:49:9f:3a:e4:6d:35:d5:
         23:22:e9:8d:03:2e:63:d0:ae:91:d5:da:e1:e9:0a:6d:b9:79:
         47:8a:ca:d0:1d:42:aa:ae:24:14:05:5b:15:b2:6c:f8:43:72:
         e9:b4:e2:6c:b5:bb:99:de:02:d9:7b:d6:65:31:22:54:4b:a9:
         26:b6:3e:51:c8:39:be:d2:44:21:93:20:2e:d3:a8:c8:57:ba:
         e8:2b:70:7d:34:a4:59:56:3f:90:9c:f1:18:6d:d1:7b:83:e0:
         f5:1e:de:d9:ce:7b:86:7d:de:b4:b1:9f:89:64:6c:47:3f:a0:
         3b:28:b9:1a:3f:eb:9b:60:f5:19:79:53:b4:01:5f:53:f8:1a:
         e3:6c:df:1f:d4:1f:ca:c2:10:e1:5a:93:28:bd:ae:47:03:a7:
         03:8d:66:70:b2:d6:c0:ff:cd:7e:38:7c:ca:64:07:68:a0:b5:
         2b:74:97:53:f4:18:e4:b4:db:5b:f4:75:33:b5:c7:e9:31:64:
         b7:ed:9a:a4:02:6f:25:ba:60:ae:1a:d3:03:b1:2b:36:1e:be:
         a7:7c:b5:22:9b:99:01:5d:ee:49:c4:97:23:83:b1:5c:de:41:
         be:93:b7:20
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULDakwEwnYBJY9SKwBYA4a6Y2G1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFBRkEyRjA5MUM5RDA0OURBN0M4ODFBRjJBNjkyMTYz
QUFENDY0MzAeFw0yNDAzMjkwNzU1MDBaFw0yNTAzMjgwODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY0QTFBRkM3QTJCNzgyMDBF
OThCQkU3NEQ4QzMzODg5NjkyODYwQjhCNDAzQjg4N0NDQzMwNkIwOUFDRUJDRjEx
NTA3M0E0QUFERjdEMTA1NzBGRjQ4RThFRjBENjZEODA4NTA1QzdDOUQyRkNEOTQ0
REU0RjI0RTAyODU3MzFFNkZBMTlFRENFQzVEMkVFOTYwRUE0OURGN0E0RENFNjEz
NTc5REE0OEJERTAzM0QzOEYyMjQwRTE1MTkwNzU4OTc1QzdBMkM5MDQzQkYyRDlE
QjUxNzhBNEIyMUJEQzRFMkIyQUZFNTFCNUMxOTJCMEU1QTlDRjQzMEM1NzBDNkZE
RjlDQTY2Njc3QzlDRkQwMjhGOUJDMzM2QkQzQ0EyMTdENEY4OEQ2MzAxMTk3QjMw
MzNDQjc2QUZBQjk2N0FCODkwMjE3Q0I3RDhBRjI5QkE4NjQ1MzQxMUYxQkUyMDhC
QTU3Q0FGNEZBOTQ3MkMxNEZEN0M2NTUzMzc4Q0ZFMkU0QThFODM3OEIzNkQyRUFF
Mzg4RkIwODZFNjExQkY4MDdGRTlBRjkzNjIzM0U4MjgyRTFCQjMyRjdCOTUwRDIx
QTRFOENDNEExMDY3RUZGRDhEN0JDMDFGNjY2M0I1RUI1RkE5NDMwMUEzNzNDNDdB
RTJDRjVFRTg0QjMwQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv0oa/HoreCAOmLvnTYwziJaShguLQDuIfMwwawms688RUHOkqt99
EFcP9I6O8NZtgIUFx8nS/NlE3k8k4ChXMeb6Ge3OxdLulg6knfek3OYTV52ki94D
PTjyJA4VGQdYl1x6LJBDvy2dtReKSyG9xOKyr+UbXBkrDlqc9DDFcMb9+cpmZ3yc
/QKPm8M2vTyiF9T4jWMBGXswM8t2r6uWeriQIXy32K8puoZFNBHxviCLpXyvT6lH
LBT9fGVTN4z+LkqOg3izbS6uOI+whuYRv4B/6a+TYjPoKC4bsy97lQ0hpOjMShBn
7/2Ne8AfZmO161+pQwGjc8R64s9e6EswyQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCvCYmpMhxZpyl+J7BYxcCRl8uNwMB8GA1UdIwQYMBaAFNGvovCRydBJ2nyIGvKm
khY6rUZDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VmVjdHMW9rVDF2UXRG
Yk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAvRDFBRkEyRjA5MUM5RDA0
OURBN0M4ODFBRjJBNjkyMTYzQUFENDY0My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMUFGQTJGMDkxQzlEMDQ5REE3Qzg4MUFGMkE2OTIxNjNBQUQ0
NjQzLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FZlY3RzFva1QxdlF0RmJNUXBn
YXREQzlwdGh3QU1VZDhIVXJ2dUVvdkU0Sy8wLzM0MzUyZTMxMzgzODJlMzEzMDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzOTM1MzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS28
CjANBgkqhkiG9w0BAQsFAAOCAQEAdCXoDuCuBYS9m1WyVrlmebGctPMA9/bnlHBu
EMtJnzrkbTXVIyLpjQMuY9CukdXa4ekKbbl5R4rK0B1Cqq4kFAVbFbJs+ENy6bTi
bLW7md4C2XvWZTEiVEupJrY+Ucg5vtJEIZMgLtOoyFe66CtwfTSkWVY/kJzxGG3R
e4Pg9R7e2c57hn3etLGfiWRsRz+gOyi5Gj/rm2D1GXlTtAFfU/ga42zfH9QfysIQ
4VqTKL2uRwOnA41mcLLWwP/Nfjh8ymQHaKC1K3SXU/QY5LTbW/R1M7XH6TFkt+2a
pAJvJbpgrhrTA7ErNh6+p3y1IpuZAV3uScSXI4OxXN5BvpO3IA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org