Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137362e302f32322d3234203d3e20323637333235.roa
File:                     34352e3233332e3137362e302f32322d3234203d3e20323637333235.roa (raw, json)
Hash identifier:          e8Er5G9t6kInzKLEcG4neYtOSvAr+NRWXZDVWCv28Jo=
Subject key identifier:   59:60:C1:4A:A5:AF:12:D9:BA:FD:47:5F:AC:CB:19:D4:14:EF:BC:4D
Certificate issuer:       /CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Certificate serial:       26EA94484E459CADE7218AC445464CBBB59DE91D
Authority key identifier: 4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137362e302f32322d3234203d3e20323637333235.roa
Signing time:             Fri 23 Feb 2024 12:31:09 +0000
ROA not before:           Fri 23 Feb 2024 12:26:09 +0000
ROA not after:            Fri 21 Feb 2025 12:31:09 +0000
asID:                     267325
IP address blocks:        45.233.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ea:94:48:4e:45:9c:ad:e7:21:8a:c4:45:46:4c:bb:b5:9d:e9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
        Validity
            Not Before: Feb 23 12:26:09 2024 GMT
            Not After : Feb 21 12:31:09 2025 GMT
        Subject: CN=5960C14AA5AF12D9BAFD475FACCB19D414EFBC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:d4:62:6e:83:00:7a:d3:2a:03:7d:3b:fb:
                    bf:ed:a5:9b:77:a7:b8:8f:fc:92:da:cd:32:2d:9f:
                    1b:ce:59:3c:0f:5d:af:9e:47:fb:ed:cc:3c:ec:4b:
                    5f:05:70:7f:be:df:6b:f7:50:94:c7:01:99:e6:4a:
                    dc:78:5f:0c:06:41:1a:ed:13:ee:24:5c:68:6b:0b:
                    dd:ab:69:5a:78:58:2d:c8:95:5d:f9:d3:b9:9c:a7:
                    61:52:5e:d2:63:d1:0d:55:fa:0b:c0:bf:1c:f6:75:
                    cb:90:e0:0f:73:a2:2c:b2:47:82:b9:95:3e:f9:59:
                    25:19:a7:c4:9a:59:ca:3b:8c:39:4b:81:22:cc:23:
                    83:4d:66:2f:6b:97:96:14:21:71:bf:45:a2:30:10:
                    87:24:8f:86:8c:e4:cd:84:15:c7:8c:b0:17:67:7d:
                    1b:2c:74:60:bc:4f:1e:c6:b7:d6:4d:cb:61:e2:f4:
                    6f:a9:e3:fb:f8:32:bc:6f:0f:10:47:ed:72:40:ba:
                    69:8d:90:dd:c5:07:de:68:b8:30:06:d5:55:81:33:
                    d3:56:2a:59:20:8b:cb:00:8d:16:70:37:38:16:2f:
                    d1:c2:1f:63:6b:a5:b8:ab:ae:9b:77:a2:e3:70:1d:
                    8d:5d:1f:d6:fa:89:6e:cb:5f:ab:4f:59:16:7d:68:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:60:C1:4A:A5:AF:12:D9:BA:FD:47:5F:AC:CB:19:D4:14:EF:BC:4D
            X509v3 Authority Key Identifier:
                keyid:4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137362e302f32322d3234203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:02:35:8a:17:a6:9e:bb:48:b2:c7:26:9c:a6:e5:16:94:56:
         ba:b2:64:20:69:19:1c:24:8d:47:47:9d:ee:5a:7f:8a:b2:3f:
         db:31:03:07:0d:99:e9:d4:c8:c1:b8:61:c3:f3:5d:6d:67:b8:
         6f:3b:62:b4:c0:6f:96:a2:28:e7:b2:44:a7:d6:91:ce:b6:e5:
         19:c0:eb:dd:56:02:9a:f5:05:7d:df:47:61:d6:8e:f5:b8:17:
         dd:9c:20:f7:4b:fe:d6:e0:92:d6:08:5c:8b:da:be:de:09:a5:
         23:b9:60:fe:97:5c:9b:b1:87:15:c8:04:d1:cb:42:fc:ba:cb:
         00:df:02:76:48:37:f9:24:2a:59:a3:ae:2d:a4:55:02:3f:b7:
         fe:90:64:d1:1f:ca:c7:82:10:e5:f7:65:5a:3d:1b:ad:09:8a:
         59:63:4c:77:21:95:f0:6b:d3:c5:18:c9:0e:2f:a2:d7:9d:c7:
         76:75:3f:fd:7e:ab:17:2e:9a:79:a8:78:80:31:91:a4:91:22:
         dc:41:1c:c5:fa:c0:4e:7f:ed:4d:28:8f:39:ad:59:05:d9:04:
         49:b8:41:24:ee:13:37:69:28:84:13:1c:03:ed:8e:1b:77:20:
         17:3a:d9:b6:f6:47:16:ca:16:fa:72:4c:4b:fe:f5:5b:b5:8b:
         42:69:17:21
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJuqUSE5FnK3nIYrERUZMu7Wd6R0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU4RDRDMTdEOUIzQTUxNjM1MzY2OTVGMEIyRjFGMEMw
QjI0QTdCMTAeFw0yNDAyMjMxMjI2MDlaFw0yNTAyMjExMjMxMDlaMDMxMTAvBgNV
BAMTKDU5NjBDMTRBQTVBRjEyRDlCQUZENDc1RkFDQ0IxOUQ0MTRFRkJDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Z9RiboMAetMqA307+7/tpZt3
p7iP/JLazTItnxvOWTwPXa+eR/vtzDzsS18FcH++32v3UJTHAZnmStx4XwwGQRrt
E+4kXGhrC92raVp4WC3IlV3507mcp2FSXtJj0Q1V+gvAvxz2dcuQ4A9zoiyyR4K5
lT75WSUZp8SaWco7jDlLgSLMI4NNZi9rl5YUIXG/RaIwEIckj4aM5M2EFceMsBdn
fRssdGC8Tx7Gt9ZNy2Hi9G+p4/v4MrxvDxBH7XJAummNkN3FB95ouDAG1VWBM9NW
Klkgi8sAjRZwNzgWL9HCH2Nrpbirrpt3ouNwHY1dH9b6iW7LX6tPWRZ9aCrFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWWDBSqWvEtm6/UdfrMsZ1BTvvE0wHwYDVR0j
BBgwFoAUTo1MF9mzpRY1NmlfCy8fDAskp7EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9kUHpSZWpUeUFNOWFNOG9ZR0RpdGVYRG5MRmloYVJ1ekQxZWY0UGlLd243
LzAvNEU4RDRDMTdEOUIzQTUxNjM1MzY2OTVGMEIyRjFGMEMwQjI0QTdCMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80RThENEMxN0Q5QjNBNTE2MzUz
NjY5NUYwQjJGMUYwQzBCMjRBN0IxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
UHpSZWpUeUFNOWFNOG9ZR0RpdGVYRG5MRmloYVJ1ekQxZWY0UGlLd243LzAvMzQz
NTJlMzIzMzMzMmUzMTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2Mzcz
MzMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAIt6bAwDQYJKoZIhvcNAQELBQADggEBAIcCNYoXpp67
SLLHJpym5RaUVrqyZCBpGRwkjUdHne5af4qyP9sxAwcNmenUyMG4YcPzXW1nuG87
YrTAb5aiKOeyRKfWkc625RnA691WApr1BX3fR2HWjvW4F92cIPdL/tbgktYIXIva
vt4JpSO5YP6XXJuxhxXIBNHLQvy6ywDfAnZIN/kkKlmjri2kVQI/t/6QZNEfyseC
EOX3ZVo9G60JilljTHchlfBr08UYyQ4votedx3Z1P/1+qxcumnmoeIAxkaSRItxB
HMX6wE5/7U0ojzmtWQXZBEm4QSTuEzdpKIQTHAPtjht3IBc62bb2RxbKFvpyTEv+
9Vu1i0JpFyE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org