Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3138382e302f32332d3233203d3e203631353932.roa
File:                     34352e3233322e3138382e302f32332d3233203d3e203631353932.roa (raw, json)
Hash identifier:          +IvXK+RqFPshz4weja3yMPX2qR17uuvriZAtgW/WdXQ=
Subject key identifier:   A9:8F:27:C5:B5:CD:88:E3:1A:12:BC:F8:89:92:A1:F0:FF:3C:63:4B
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       5B241EA284AF33DEF3F630A70D759AEE9573962B
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3138382e302f32332d3233203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:04 +0000
ROA not before:           Thu 24 Aug 2023 18:48:04 +0000
ROA not after:            Thu 22 Aug 2024 18:53:04 +0000
asID:                     61592
IP address blocks:        45.232.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:24:1e:a2:84:af:33:de:f3:f6:30:a7:0d:75:9a:ee:95:73:96:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:04 2023 GMT
            Not After : Aug 22 18:53:04 2024 GMT
        Subject: CN=A98F27C5B5CD88E31A12BCF88992A1F0FF3C634B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:3e:7c:a3:46:8e:c0:b7:1a:d2:9a:11:b1:
                    54:b1:0d:38:19:9c:7c:b2:fe:95:cc:91:34:01:23:
                    4a:f8:57:a7:28:03:6f:be:20:34:01:b6:4e:10:38:
                    24:96:3a:3e:7e:c4:46:eb:0a:b6:6a:49:ab:0c:33:
                    16:99:f1:93:06:7a:a2:d0:5c:2f:df:0f:9f:0b:46:
                    c3:23:ae:40:76:1c:55:55:38:65:13:65:c0:0b:e9:
                    1c:0c:2d:cb:79:e8:ae:a6:fe:8c:65:fb:4d:81:d2:
                    be:e8:64:1b:f6:98:4e:11:cf:b1:b8:76:69:82:90:
                    83:47:d5:a3:2e:4d:44:69:cc:c8:18:5a:29:34:48:
                    15:cc:ae:f5:19:34:6b:be:b1:22:9d:5f:d7:78:4a:
                    16:5d:f8:3b:88:7a:e3:f3:42:0c:47:eb:73:02:c5:
                    56:f2:c0:ab:1f:e6:28:0f:11:af:39:7e:9e:93:89:
                    c2:30:0e:67:11:f5:e8:7a:cd:57:00:ab:e3:e6:0c:
                    02:8b:e6:00:9d:4f:fa:cf:a6:72:9e:fc:60:1f:66:
                    07:35:c5:3e:a6:7e:73:b9:26:4c:d9:64:a2:f1:8a:
                    a5:86:a8:2e:f8:0f:56:ad:88:6d:a0:9a:c5:d9:b6:
                    1a:ab:d0:70:77:92:ce:da:f9:5a:f9:fd:6c:d6:e5:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8F:27:C5:B5:CD:88:E3:1A:12:BC:F8:89:92:A1:F0:FF:3C:63:4B
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3138382e302f32332d3233203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:1c:c0:37:20:15:bd:f3:0f:68:9e:87:ef:47:22:da:ef:
         e1:6b:98:3e:94:89:63:17:40:8f:4a:03:4d:27:6a:39:4b:70:
         ca:4f:1e:7d:44:c4:3e:e1:d2:bd:e0:38:2f:bf:89:59:90:20:
         78:0c:0c:12:ec:f3:4a:46:d5:f3:58:be:be:22:07:ac:5c:73:
         a5:b5:67:43:67:fa:7c:53:cc:89:80:23:f4:29:de:2c:ca:19:
         17:89:66:0e:85:6d:5f:af:62:6c:6e:3b:b9:63:12:c3:fb:a6:
         ae:d7:4f:25:7e:66:b6:04:74:81:cb:c3:15:fb:d4:2b:0c:ff:
         e5:0b:8c:86:f7:ce:bc:bb:7d:f0:26:84:11:b5:a4:04:1b:87:
         ad:68:0d:28:26:8f:48:30:25:f4:61:e5:24:09:4e:6f:d4:dd:
         fe:8f:80:cb:d5:53:28:c7:01:0d:f4:2c:d0:fb:07:51:38:db:
         3a:8a:a7:ed:b0:86:80:b9:d6:7d:dc:74:ec:d7:b1:62:d5:27:
         5e:65:36:fd:ae:df:fb:8a:77:9a:3d:25:98:91:1b:57:c7:4d:
         38:48:78:af:7a:6a:b1:c6:a3:ca:ce:df:0c:10:04:b0:a2:b6:
         57:64:96:48:5a:58:07:36:05:6d:cd:18:4b:e9:16:dc:61:d1:
         2c:32:d5:18
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWyQeooSvM97z9jCnDXWa7pVzliswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDRaFw0yNDA4MjIxODUzMDRaMDMxMTAvBgNV
BAMTKEE5OEYyN0M1QjVDRDg4RTMxQTEyQkNGODg5OTJBMUYwRkYzQzYzNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hD58o0aOwLca0poRsVSxDTgZ
nHyy/pXMkTQBI0r4V6coA2++IDQBtk4QOCSWOj5+xEbrCrZqSasMMxaZ8ZMGeqLQ
XC/fD58LRsMjrkB2HFVVOGUTZcAL6RwMLct56K6m/oxl+02B0r7oZBv2mE4Rz7G4
dmmCkINH1aMuTURpzMgYWik0SBXMrvUZNGu+sSKdX9d4ShZd+DuIeuPzQgxH63MC
xVbywKsf5igPEa85fp6TicIwDmcR9eh6zVcAq+PmDAKL5gCdT/rPpnKe/GAfZgc1
xT6mfnO5JkzZZKLxiqWGqC74D1atiG2gmsXZthqr0HB3ks7a+Vr5/WzW5eFPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqY8nxbXNiOMaErz4iZKh8P88Y0swHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzQzNTJlMzIzMzMyMmUzMTM4MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLei8MA0GCSqGSIb3DQEBCwUAA4IBAQCJTBzANyAV
vfMPaJ6H70ci2u/ha5g+lIljF0CPSgNNJ2o5S3DKTx59RMQ+4dK94Dgvv4lZkCB4
DAwS7PNKRtXzWL6+IgesXHOltWdDZ/p8U8yJgCP0Kd4syhkXiWYOhW1fr2Jsbju5
YxLD+6au108lfma2BHSBy8MV+9QrDP/lC4yG9868u33wJoQRtaQEG4etaA0oJo9I
MCX0YeUkCU5v1N3+j4DL1VMoxwEN9CzQ+wdRONs6iqftsIaAudZ93HTs17Fi1Sde
ZTb9rt/7ineaPSWYkRtXx004SHivemqxxqPKzt8MEASworZXZJZIWlgHNgVtzRhL
6RbcYdEsMtUY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org