Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3232203d3e20323639303437.roa
File:                     34352e3137382e3230382e302f32322d3232203d3e20323639303437.roa (raw, json)
Hash identifier:          bKGrB3USJ/YD39LZrEDmi9gBTn9YviGq1smhzN+ux2Y=
Subject key identifier:   7E:C2:8E:5D:76:4E:29:24:7A:65:C1:3E:DA:87:E4:22:4D:7D:27:48
Certificate issuer:       /CN=468DA4BD4B56C002A350399568E4DF9A59150F9E
Certificate serial:       73BA03438C92D69A5E0E3E7243CC5E78BF6F21CD
Authority key identifier: 46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3232203d3e20323639303437.roa
Signing time:             Tue 12 Mar 2024 14:12:00 +0000
ROA not before:           Tue 12 Mar 2024 14:07:00 +0000
ROA not after:            Tue 11 Mar 2025 14:12:00 +0000
asID:                     269047
IP address blocks:        45.178.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ba:03:43:8c:92:d6:9a:5e:0e:3e:72:43:cc:5e:78:bf:6f:21:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468DA4BD4B56C002A350399568E4DF9A59150F9E
        Validity
            Not Before: Mar 12 14:07:00 2024 GMT
            Not After : Mar 11 14:12:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2b:f9:f8:76:99:df:d3:d7:6d:0f:5d:5e:e2:
                    1a:0e:0b:23:5e:89:c9:ca:36:dd:4b:3e:e0:8b:26:
                    51:b7:46:c7:ff:31:67:1b:0f:11:82:d3:66:63:62:
                    13:d2:d4:ce:f7:4c:5b:ff:dc:dc:86:ec:46:19:ce:
                    dd:e1:a0:4d:0a:84:56:aa:d5:49:0d:33:87:2a:e5:
                    3d:45:fc:eb:67:86:71:b9:0a:a6:5d:25:b5:50:75:
                    26:7d:16:14:71:85:c0:9e:84:70:c7:66:d0:b7:23:
                    69:77:3d:a7:cf:74:0b:10:6e:1e:fb:27:68:0f:0e:
                    a4:13:2b:25:6d:f8:4e:62:ac:4f:7f:05:77:cb:c3:
                    5a:17:61:c2:8d:ab:6c:43:86:66:b9:49:4e:90:2d:
                    17:f3:f3:47:fd:24:53:a9:94:c7:79:e0:cb:5b:5d:
                    94:7e:87:53:7f:79:90:4c:87:a6:cb:7b:74:c0:fc:
                    2d:b6:67:d3:9e:22:2b:39:1a:eb:92:65:a3:59:6c:
                    e7:3b:ee:f1:0f:8c:2f:ef:e8:fb:5c:50:52:f0:43:
                    a6:f2:7b:4b:f4:49:0f:e7:6c:5f:3b:2d:c0:89:c8:
                    8b:2e:d4:55:f1:45:8b:16:91:94:91:33:2b:2d:66:
                    99:53:d1:a1:f0:77:68:2f:53:e3:2c:80:c1:fe:20:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C2:8E:5D:76:4E:29:24:7A:65:C1:3E:DA:87:E4:22:4D:7D:27:48
            X509v3 Authority Key Identifier:
                keyid:46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3232203d3e20323639303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:f3:16:8e:8d:d4:04:c0:b8:bc:83:d1:35:10:5d:28:14:eb:
         08:a4:50:3c:69:0b:2a:87:08:1d:01:9d:06:a2:d7:65:b0:4a:
         f6:72:65:64:ac:71:a9:31:f4:25:1f:1e:1e:17:8e:1b:c5:8a:
         01:74:a3:21:38:76:8d:14:a5:12:43:0f:2f:3e:bd:c9:ab:dd:
         5b:79:4b:ef:34:f0:76:d9:75:66:52:68:b9:88:f7:75:89:c3:
         d0:c7:75:f8:0f:76:d0:98:92:d5:ae:72:20:4c:2b:8b:8f:9c:
         77:3b:c6:14:db:9a:09:c4:75:af:8a:8f:9d:69:ef:0d:3c:9b:
         76:0c:e8:a9:e4:32:90:62:94:b2:ae:5c:fe:b8:3b:ba:37:d3:
         bb:5e:7e:8a:0a:69:8e:67:16:93:30:68:2b:e5:89:0e:95:5a:
         ae:89:10:41:bc:f0:ef:a3:1d:2e:c3:ff:c1:f1:ef:a0:1e:41:
         37:69:81:7d:ac:53:79:b4:19:55:19:7a:2d:e7:f9:71:3e:f8:
         46:24:9c:23:1f:23:50:9e:5a:f5:9e:83:25:bd:c4:f3:1f:5e:
         a2:31:2e:4c:c2:37:37:46:bc:68:0f:de:ce:52:eb:32:1d:32:
         9d:0e:72:82:d1:ac:fb:33:68:24:5e:8d:bb:cd:d2:73:41:bf:
         5f:42:b1:d4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUc7oDQ4yS1ppeDj5yQ8xeeL9vIc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY4REE0QkQ0QjU2QzAwMkEzNTAzOTk1NjhFNERGOUE1
OTE1MEY5RTAeFw0yNDAzMTIxNDA3MDBaFw0yNTAzMTExNDEyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjAyQkY5Rjg3Njk5REZEM0Q3
NkQwRjVENUVFMjFBMEUwQjIzNUU4OUM5Q0EzNkRENEIzRUUwOEIyNjUxQjc0NkM3
RkYzMTY3MUIwRjExODJEMzY2NjM2MjEzRDJENENFRjc0QzVCRkZEQ0RDODZFQzQ2
MTlDRURERTFBMDREMEE4NDU2QUFENTQ5MEQzMzg3MkFFNTNENDVGQ0VCNjc4Njcx
QjkwQUE2NUQyNUI1NTA3NTI2N0QxNjE0NzE4NUMwOUU4NDcwQzc2NkQwQjcyMzY5
NzczREE3Q0Y3NDBCMTA2RTFFRkIyNzY4MEYwRUE0MTMyQjI1NkRGODRFNjJBQzRG
N0YwNTc3Q0JDMzVBMTc2MUMyOERBQjZDNDM4NjY2Qjk0OTRFOTAyRDE3RjNGMzQ3
RkQyNDUzQTk5NEM3NzlFMENCNUI1RDk0N0U4NzUzN0Y3OTkwNEM4N0E2Q0I3Qjc0
QzBGQzJEQjY2N0QzOUUyMjJCMzkxQUVCOTI2NUEzNTk2Q0U3M0JFRUYxMEY4QzJG
RUZFOEZCNUM1MDUyRjA0M0E2RjI3QjRCRjQ0OTBGRTc2QzVGM0IyREMwODlDODhC
MkVENDU1RjE0NThCMTY5MTk0OTEzMzJCMkQ2Njk5NTNEMUExRjA3NzY4MkY1M0Uz
MkM4MEMxRkUyMENENkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8Cv5+HaZ39PXbQ9dXuIaDgsjXonJyjbdSz7giyZRt0bH/zFnGw8R
gtNmY2IT0tTO90xb/9zchuxGGc7d4aBNCoRWqtVJDTOHKuU9RfzrZ4ZxuQqmXSW1
UHUmfRYUcYXAnoRwx2bQtyNpdz2nz3QLEG4e+ydoDw6kEyslbfhOYqxPfwV3y8Na
F2HCjatsQ4ZmuUlOkC0X8/NH/SRTqZTHeeDLW12UfodTf3mQTIemy3t0wPwttmfT
niIrORrrkmWjWWznO+7xD4wv7+j7XFBS8EOm8ntL9EkP52xfOy3AiciLLtRV8UWL
FpGUkTMrLWaZU9Gh8HdoL1PjLIDB/iDNbwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FH7Cjl12TikkemXBPtqH5CJNfSdIMB8GA1UdIwQYMBaAFEaNpL1LVsACo1A5lWjk
35pZFQ+eMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuNDRWSlNheUcyQ2Zn
MXRjcTFXRGVjSmI5YlZWeml2d0JwRTVHUGtONmVqLzAvNDY4REE0QkQ0QjU2QzAw
MkEzNTAzOTk1NjhFNERGOUE1OTE1MEY5RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NjhEQTRCRDRCNTZDMDAyQTM1MDM5OTU2OEU0REY5QTU5MTUw
RjlFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybjQ0VkpTYXlHMkNmZzF0Y3Ex
V0RlY0piOWJWVnppdndCcEU1R1BrTjZlai8wLzM0MzUyZTMxMzczODJlMzIzMDM4
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5MzAzNDM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LbLQMA0GCSqGSIb3DQEBCwUAA4IBAQCo8xaOjdQEwLi8g9E1EF0oFOsIpFA8aQsq
hwgdAZ0GotdlsEr2cmVkrHGpMfQlHx4eF44bxYoBdKMhOHaNFKUSQw8vPr3Jq91b
eUvvNPB22XVmUmi5iPd1icPQx3X4D3bQmJLVrnIgTCuLj5x3O8YU25oJxHWvio+d
ae8NPJt2DOip5DKQYpSyrlz+uDu6N9O7Xn6KCmmOZxaTMGgr5YkOlVquiRBBvPDv
ox0uw//B8e+gHkE3aYF9rFN5tBlVGXot5/lxPvhGJJwjHyNQnlr1noMlvcTzH16i
MS5Mwjc3RrxoD97OUusyHTKdDnKC0az7M2gkXo27zdJzQb9fQrHU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org