Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33362e302f32332d3233203d3e20323639313631.roa
File:                     34352e3138312e33362e302f32332d3233203d3e20323639313631.roa (raw, json)
Hash identifier:          vlGErunBK3bf0fhOmF7o69M7TxSYXftrZq3zCCeNx5I=
Subject key identifier:   53:A1:1B:0E:BC:AE:41:83:C8:E8:73:C0:96:AC:4E:5E:0A:71:98:D0
Certificate issuer:       /CN=391DEBC26509E9D194B7EE34BAA518754DF93098
Certificate serial:       443F879F813189E2AC6B3B4C6F58A5A5A34A3537
Authority key identifier: 39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391DEBC26509E9D194B7EE34BAA518754DF93098.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33362e302f32332d3233203d3e20323639313631.roa
Signing time:             Thu 29 Jun 2023 17:18:50 +0000
ROA not before:           Thu 29 Jun 2023 17:13:50 +0000
ROA not after:            Thu 27 Jun 2024 17:18:50 +0000
asID:                     269161
IP address blocks:        45.181.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3f:87:9f:81:31:89:e2:ac:6b:3b:4c:6f:58:a5:a5:a3:4a:35:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391DEBC26509E9D194B7EE34BAA518754DF93098
        Validity
            Not Before: Jun 29 17:13:50 2023 GMT
            Not After : Jun 27 17:18:50 2024 GMT
        Subject: CN=53A11B0EBCAE4183C8E873C096AC4E5E0A7198D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:5a:8f:97:c8:43:1c:34:27:c5:e1:74:c5:
                    c0:1d:b5:72:bb:79:4f:b2:fc:20:7a:f3:fe:67:72:
                    2f:4e:4a:63:ca:72:fb:6f:20:61:dc:cf:24:1a:aa:
                    e7:a5:23:40:f2:0c:e0:c9:50:bf:dd:b5:ac:9a:db:
                    61:5f:72:4c:c9:b7:7f:26:b2:84:5e:33:65:b4:1b:
                    f3:45:6d:1b:d5:f2:05:28:24:e1:32:f1:d6:0f:6a:
                    5a:c6:d8:b0:fc:8f:c3:4e:90:af:fb:7c:aa:3b:12:
                    31:b5:7f:00:79:64:4e:05:ff:12:ab:d4:31:ed:36:
                    f8:85:94:97:13:22:32:12:e0:a9:0c:3a:b5:93:3c:
                    c9:6b:52:fc:cb:fb:f6:67:26:cf:3f:4e:69:fb:dc:
                    48:81:11:e3:21:bb:d3:d9:ec:aa:41:c5:2a:6f:e0:
                    3b:d2:c5:32:33:9b:11:65:3d:3a:39:fa:af:c7:a7:
                    1e:6f:d1:57:e7:27:d0:de:88:9d:9b:f7:eb:2b:3d:
                    0f:3c:7d:4f:37:a0:2f:d3:0f:59:1b:e9:ec:26:f3:
                    78:90:1b:fd:4e:bc:01:cd:7c:c0:15:69:89:25:ba:
                    98:02:18:09:c5:c6:43:b7:03:67:6a:38:56:99:dc:
                    ce:b9:98:e3:01:7d:4e:67:09:87:e7:b6:02:34:de:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A1:1B:0E:BC:AE:41:83:C8:E8:73:C0:96:AC:4E:5E:0A:71:98:D0
            X509v3 Authority Key Identifier:
                keyid:39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/391DEBC26509E9D194B7EE34BAA518754DF93098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391DEBC26509E9D194B7EE34BAA518754DF93098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33362e302f32332d3233203d3e20323639313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:cd:9d:11:6d:17:8b:78:51:2c:79:61:ef:58:8d:91:03:93:
         1a:ac:12:37:5e:02:1b:ed:04:43:c7:8b:4b:7b:e2:21:5d:a2:
         14:44:8f:86:be:27:bf:29:58:c6:52:94:87:ad:c5:f2:3a:85:
         1c:71:b7:89:da:37:d9:06:9d:19:27:9e:36:6e:37:ef:b7:bb:
         15:38:84:93:a9:bc:3d:02:57:15:a3:ac:91:35:ca:e5:cd:45:
         78:af:f2:2a:1e:25:50:b5:55:70:b8:5e:4e:c5:4c:74:68:8b:
         a2:c7:44:91:63:c6:cc:6c:77:d2:78:53:6d:1e:64:14:31:cd:
         49:9d:28:91:8e:c5:db:9e:18:5d:fa:fc:25:34:e7:09:bc:74:
         50:d6:11:5a:55:fd:54:3b:0f:1d:88:b1:3d:8b:ca:92:2b:79:
         6a:db:f9:03:59:4c:06:18:f7:6b:1e:ed:ef:5b:ac:5e:83:9d:
         d2:d6:cc:18:8e:87:2c:90:4a:72:28:c9:a6:fd:ad:55:8c:ee:
         71:0c:b9:94:02:ee:80:a3:4f:e7:be:48:66:e8:a0:40:72:12:
         ec:21:64:2f:de:94:8e:03:aa:52:3f:b8:12:a8:fa:1c:d0:ff:
         a2:4c:6f:f0:d6:cc:30:80:92:1e:06:0b:f1:bf:91:57:b9:7a:
         f0:d5:12:89
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURD+Hn4ExieKsaztMb1ilpaNKNTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkxREVCQzI2NTA5RTlEMTk0QjdFRTM0QkFBNTE4NzU0
REY5MzA5ODAeFw0yMzA2MjkxNzEzNTBaFw0yNDA2MjcxNzE4NTBaMDMxMTAvBgNV
BAMTKDUzQTExQjBFQkNBRTQxODNDOEU4NzNDMDk2QUM0RTVFMEE3MTk4RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPh1qPl8hDHDQnxeF0xcAdtXK7
eU+y/CB68/5nci9OSmPKcvtvIGHczyQaquelI0DyDODJUL/dtaya22FfckzJt38m
soReM2W0G/NFbRvV8gUoJOEy8dYPalrG2LD8j8NOkK/7fKo7EjG1fwB5ZE4F/xKr
1DHtNviFlJcTIjIS4KkMOrWTPMlrUvzL+/ZnJs8/Tmn73EiBEeMhu9PZ7KpBxSpv
4DvSxTIzmxFlPTo5+q/Hpx5v0VfnJ9DeiJ2b9+srPQ88fU83oC/TD1kb6ewm83iQ
G/1OvAHNfMAVaYklupgCGAnFxkO3A2dqOFaZ3M65mOMBfU5nCYfntgI03mT3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUU6EbDryuQYPI6HPAlqxOXgpxmNAwHwYDVR0j
BBgwFoAUOR3rwmUJ6dGUt+40uqUYdU35MJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmo4NndvZ1QzTlMyQ1l3aHhEUUxYd2RFTUM3QkFYUnF5VDdzR3NZV2hv
ZFEvMC8zOTFERUJDMjY1MDlFOUQxOTRCN0VFMzRCQUE1MTg3NTRERjkzMDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM5MURFQkMyNjUwOUU5RDE5
NEI3RUUzNEJBQTUxODc1NERGOTMwOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJqODZ3b2dUM05TMkNZd2h4RFFMWHdkRU1DN0JBWFJxeVQ3c0dzWVdob2RRLzAv
MzQzNTJlMzEzODMxMmUzMzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbUkMA0GCSqGSIb3DQEBCwUAA4IBAQBPzZ0RbReL
eFEseWHvWI2RA5MarBI3XgIb7QRDx4tLe+IhXaIURI+Gvie/KVjGUpSHrcXyOoUc
cbeJ2jfZBp0ZJ542bjfvt7sVOISTqbw9AlcVo6yRNcrlzUV4r/IqHiVQtVVwuF5O
xUx0aIuix0SRY8bMbHfSeFNtHmQUMc1JnSiRjsXbnhhd+vwlNOcJvHRQ1hFaVf1U
Ow8diLE9i8qSK3lq2/kDWUwGGPdrHu3vW6xeg53S1swYjocskEpyKMmm/a1VjO5x
DLmUAu6Ao0/nvkhm6KBAchLsIWQv3pSOA6pSP7gSqPoc0P+iTG/w1swwgJIeBgvx
v5FXuXrw1RKJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org