Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e32382e302f32332d3233203d3e20323639313630.roa
File:                     34352e3138312e32382e302f32332d3233203d3e20323639313630.roa (raw, json)
Hash identifier:          y8GXekCK/tZZlwNQeTISmHXSNcOR/AivmeBV3Bynpb4=
Subject key identifier:   A3:27:2F:3B:CA:CB:F7:8B:FF:C1:69:29:70:3D:CE:4B:92:E5:A7:81
Certificate issuer:       /CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
Certificate serial:       3C953CEE5122176105865BD61D5C753E468719B4
Authority key identifier: 72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e32382e302f32332d3233203d3e20323639313630.roa
Signing time:             Tue 19 Dec 2023 22:31:40 +0000
ROA not before:           Tue 19 Dec 2023 22:26:40 +0000
ROA not after:            Tue 17 Dec 2024 22:31:40 +0000
asID:                     269160
IP address blocks:        45.181.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:95:3c:ee:51:22:17:61:05:86:5b:d6:1d:5c:75:3e:46:87:19:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Validity
            Not Before: Dec 19 22:26:40 2023 GMT
            Not After : Dec 17 22:31:40 2024 GMT
        Subject: CN=A3272F3BCACBF78BFFC16929703DCE4B92E5A781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:d5:45:34:60:da:40:92:3b:d1:7f:b0:6b:
                    0a:3d:38:0d:b8:55:00:a2:95:1c:64:d0:5a:89:55:
                    b2:d9:03:90:05:72:05:86:b4:33:cb:4d:43:8c:62:
                    d2:dd:99:c3:05:da:b8:1c:f6:9c:7c:bc:97:31:bb:
                    27:a6:89:ef:72:fb:cf:a3:2f:98:a0:1d:de:fb:d3:
                    8d:e8:2e:86:6a:a3:fc:fa:a8:a0:79:52:21:cd:04:
                    b7:8c:79:08:11:82:3c:6f:5b:26:8b:ac:cb:a5:41:
                    4c:d2:33:58:07:79:b3:1f:30:89:7c:8e:d0:78:46:
                    5d:60:12:6c:cb:ac:2f:98:3a:97:14:2e:49:7e:35:
                    41:ea:89:c8:60:d2:94:7c:cb:12:ad:16:4c:c2:67:
                    e8:4d:19:e7:29:4a:bd:6a:bf:f7:ec:c1:1a:15:25:
                    99:ea:8e:b5:62:10:9b:ec:46:3d:c5:91:76:35:7b:
                    d9:4a:63:4a:db:6f:83:71:81:4e:30:77:80:89:fc:
                    ad:e4:d1:f3:0f:74:21:9f:04:75:70:df:8d:58:07:
                    b3:a0:6b:3b:4c:7c:f3:b4:1f:05:86:bf:c9:e2:0d:
                    da:3d:cb:2d:bf:2d:fe:01:d5:3c:4f:d3:3b:71:1c:
                    1f:eb:77:bb:1e:1a:1c:84:28:32:3a:ec:2e:83:e0:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:27:2F:3B:CA:CB:F7:8B:FF:C1:69:29:70:3D:CE:4B:92:E5:A7:81
            X509v3 Authority Key Identifier:
                keyid:72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e32382e302f32332d3233203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:44:3e:ef:92:7b:fd:d7:e2:ef:c7:6a:2f:f9:1e:3c:92:
         00:1b:8d:ae:e5:58:eb:36:71:84:5e:e2:cf:cb:9d:26:84:3e:
         5b:60:91:13:7b:29:9b:b8:af:6d:f9:45:d8:72:9a:c9:b2:3d:
         73:f9:29:b5:ce:80:52:d9:f0:ed:54:83:a4:5f:3d:fc:02:24:
         79:83:83:a0:9d:24:52:be:85:22:4c:d0:3b:97:b8:31:1b:5d:
         a2:e4:cd:8e:d4:84:ab:bc:14:54:4f:56:2f:e9:b9:08:74:80:
         01:f8:b4:e9:d0:16:e6:ec:24:81:d1:6d:ec:33:ba:bd:01:45:
         7e:aa:85:7e:57:54:63:06:48:30:05:9d:3d:44:ac:95:f4:2e:
         1c:41:32:eb:10:2c:d4:1a:73:06:f6:98:87:5a:ba:c4:c3:71:
         ef:58:7d:89:b8:03:cd:7d:66:56:ff:1e:6c:c2:c1:c2:7f:f6:
         20:da:e3:aa:d5:28:11:95:ab:fb:63:32:7b:1b:de:17:d2:78:
         22:80:d9:14:91:05:de:47:df:a0:f8:cf:ba:a5:4b:c4:7d:db:
         2d:7a:e3:70:5e:d5:80:4b:dc:e7:06:33:63:8a:96:f3:c7:98:
         31:ed:f8:fd:4b:22:13:81:6e:be:ce:42:71:55:fa:54:ec:60:
         71:ca:7e:c2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPJU87lEiF2EFhlvWHVx1PkaHGbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCOThEMUUwOEJDNTY2NDE2RjJBNzhGNjIxMEMyMEU4
RjhFNjcwMDAeFw0yMzEyMTkyMjI2NDBaFw0yNDEyMTcyMjMxNDBaMDMxMTAvBgNV
BAMTKEEzMjcyRjNCQ0FDQkY3OEJGRkMxNjkyOTcwM0RDRTRCOTJFNUE3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHtVFNGDaQJI70X+wawo9OA24
VQCilRxk0FqJVbLZA5AFcgWGtDPLTUOMYtLdmcMF2rgc9px8vJcxuyemie9y+8+j
L5igHd77043oLoZqo/z6qKB5UiHNBLeMeQgRgjxvWyaLrMulQUzSM1gHebMfMIl8
jtB4Rl1gEmzLrC+YOpcULkl+NUHqichg0pR8yxKtFkzCZ+hNGecpSr1qv/fswRoV
JZnqjrViEJvsRj3FkXY1e9lKY0rbb4NxgU4wd4CJ/K3k0fMPdCGfBHVw341YB7Og
aztMfPO0HwWGv8niDdo9yy2/Lf4B1TxP0ztxHB/rd7seGhyEKDI67C6D4GktAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoycvO8rL94v/wWkpcD3OS5Llp4EwHwYDVR0j
BBgwFoAUcrmNHgi8VmQW8qePYhDCDo+OZwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkJGc3FNZkZXdWNBcExLQm8yUFVmazJMSjFDNXIxYkRKaGJnZE50RXZo
OWcvMC83MkI5OEQxRTA4QkM1NjY0MTZGMkE3OEY2MjEwQzIwRThGOEU2NzAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyQjk4RDFFMDhCQzU2NjQx
NkYyQTc4RjYyMTBDMjBFOEY4RTY3MDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJCRnNxTWZGV3VjQXBMS0JvMlBVZmsyTEoxQzVyMWJESmhiZ2ROdEV2aDlnLzAv
MzQzNTJlMzEzODMxMmUzMjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbUcMA0GCSqGSIb3DQEBCwUAA4IBAQAqf0Q+75J7
/dfi78dqL/kePJIAG42u5VjrNnGEXuLPy50mhD5bYJETeymbuK9t+UXYcprJsj1z
+Sm1zoBS2fDtVIOkXz38AiR5g4OgnSRSvoUiTNA7l7gxG12i5M2O1ISrvBRUT1Yv
6bkIdIAB+LTp0Bbm7CSB0W3sM7q9AUV+qoV+V1RjBkgwBZ09RKyV9C4cQTLrECzU
GnMG9piHWrrEw3HvWH2JuAPNfWZW/x5swsHCf/Yg2uOq1SgRlav7YzJ7G94X0ngi
gNkUkQXeR9+g+M+6pUvEfdsteuNwXtWAS9znBjNjipbzx5gx7fj9SyITgW6+zkJx
VfpU7GBxyn7C
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org