Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230392e302f32342d3234203d3e20323639303437.roa
File:                     34352e3137382e3230392e302f32342d3234203d3e20323639303437.roa (raw, json)
Hash identifier:          heX+HSsiPyDgS738lsUUpErqB0tJyrCNC5YXPd9mXyA=
Subject key identifier:   82:37:A8:6C:21:6B:17:05:72:8D:5C:3A:AA:99:3B:12:F8:53:01:74
Certificate issuer:       /CN=468DA4BD4B56C002A350399568E4DF9A59150F9E
Certificate serial:       5CC0678D638658D4B3C2B7029733990A7E778B7C
Authority key identifier: 46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230392e302f32342d3234203d3e20323639303437.roa
Signing time:             Fri 07 Jul 2023 13:02:00 +0000
ROA not before:           Fri 07 Jul 2023 12:57:00 +0000
ROA not after:            Fri 05 Jul 2024 13:02:00 +0000
asID:                     269047
IP address blocks:        45.178.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c0:67:8d:63:86:58:d4:b3:c2:b7:02:97:33:99:0a:7e:77:8b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468DA4BD4B56C002A350399568E4DF9A59150F9E
        Validity
            Not Before: Jul  7 12:57:00 2023 GMT
            Not After : Jul  5 13:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:81:c3:59:cf:fc:65:a0:c1:72:8d:e7:aa:
                    53:28:87:5c:2a:85:b9:30:73:b9:0d:a7:51:ca:0b:
                    3a:cb:79:0e:85:db:f7:74:2f:41:4e:1c:6c:da:c7:
                    ca:10:83:d7:22:91:53:90:a3:2f:85:13:7f:ed:bc:
                    fa:53:24:0e:dd:6f:6c:7d:ab:f2:fe:da:65:e2:5b:
                    69:f3:94:ca:47:5e:7e:da:f7:d9:54:88:8e:c1:e7:
                    93:45:f3:ed:8b:c0:43:25:85:0d:83:8e:ba:5f:67:
                    53:00:f9:2b:22:d0:07:e7:29:31:96:1b:51:ad:9a:
                    34:01:25:fb:e3:2d:bd:a9:94:4f:21:b6:be:23:a3:
                    f6:17:0d:36:d5:8a:40:9a:93:88:7b:5c:10:61:39:
                    19:7e:d9:cb:ea:e6:9f:b8:21:f4:46:18:cb:fe:77:
                    9a:1e:58:20:9e:1d:5c:57:b9:1d:80:98:f0:66:98:
                    8c:ef:ce:68:1c:cf:70:45:2d:dd:f4:e9:6e:60:0c:
                    aa:25:f1:b9:a1:f8:d3:69:22:4c:79:d8:0e:00:ab:
                    08:47:a2:f9:de:bf:98:01:40:38:21:4d:24:8f:ac:
                    8a:e6:67:7f:da:3d:a2:6a:7c:d0:f8:f2:e2:8b:8c:
                    19:8f:09:bd:89:6c:b2:0b:58:c3:36:b0:49:fd:3a:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:37:A8:6C:21:6B:17:05:72:8D:5C:3A:AA:99:3B:12:F8:53:01:74
            X509v3 Authority Key Identifier:
                keyid:46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230392e302f32342d3234203d3e20323639303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:09:4a:08:cf:88:76:5b:86:d1:71:bf:50:90:a9:ab:26:bd:
         80:b5:f1:0e:b4:94:f8:04:d9:63:27:8f:ee:d1:61:ca:dd:e7:
         6b:35:ce:81:be:3f:9c:69:9e:35:58:ae:79:aa:f6:8d:6d:85:
         ce:37:ab:58:b3:8b:59:8a:04:6a:5f:cf:1c:65:c3:7b:7e:e7:
         ae:30:a0:1c:ee:bd:5b:34:d9:b6:d1:2b:64:f5:76:ca:17:b0:
         4b:23:95:e5:b4:40:8f:92:83:13:ea:c5:24:3b:a5:f6:19:af:
         94:56:8b:81:47:71:88:bf:9e:d5:1e:07:e9:21:c3:2e:fc:a5:
         fd:8a:cc:0e:40:17:f7:14:01:7a:d8:13:33:d4:5c:37:b7:99:
         29:e2:ba:fb:e7:8b:a0:89:b3:e4:de:58:78:92:45:31:6c:89:
         17:57:0c:2e:bc:c5:45:af:4a:40:15:97:3a:c0:e1:d7:8a:d4:
         26:36:5f:b3:ba:3c:77:3f:67:a8:b4:33:25:58:67:be:43:0a:
         f0:96:a2:ab:a1:49:fa:f2:6f:c1:91:01:9c:25:59:29:e1:cc:
         9f:08:aa:ab:96:f6:5d:4d:87:98:73:cc:44:53:7e:36:d5:f3:
         7b:6f:f6:29:e1:e6:96:8d:7c:a6:85:91:01:bd:0d:31:3c:29:
         3c:ff:2c:a8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUXMBnjWOGWNSzwrcClzOZCn53i3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY4REE0QkQ0QjU2QzAwMkEzNTAzOTk1NjhFNERGOUE1
OTE1MEY5RTAeFw0yMzA3MDcxMjU3MDBaFw0yNDA3MDUxMzAyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjRCQzgxQzM1OUNGRkM2NUEw
QzE3MjhERTdBQTUzMjg4NzVDMkE4NUI5MzA3M0I5MERBNzUxQ0EwQjNBQ0I3OTBF
ODVEQkY3NzQyRjQxNEUxQzZDREFDN0NBMTA4M0Q3MjI5MTUzOTBBMzJGODUxMzdG
RURCQ0ZBNTMyNDBFREQ2RjZDN0RBQkYyRkVEQTY1RTI1QjY5RjM5NENBNDc1RTdF
REFGN0Q5NTQ4ODhFQzFFNzkzNDVGM0VEOEJDMDQzMjU4NTBEODM4RUJBNUY2NzUz
MDBGOTJCMjJEMDA3RTcyOTMxOTYxQjUxQUQ5QTM0MDEyNUZCRTMyREJEQTk5NDRG
MjFCNkJFMjNBM0Y2MTcwRDM2RDU4QTQwOUE5Mzg4N0I1QzEwNjEzOTE5N0VEOUNC
RUFFNjlGQjgyMUY0NDYxOENCRkU3NzlBMUU1ODIwOUUxRDVDNTdCOTFEODA5OEYw
NjY5ODhDRUZDRTY4MUNDRjcwNDUyRERERjRFOTZFNjAwQ0FBMjVGMUI5QTFGOEQz
NjkyMjRDNzlEODBFMDBBQjA4NDdBMkY5REVCRjk4MDE0MDM4MjE0RDI0OEZBQzhB
RTY2NzdGREEzREEyNkE3Q0QwRjhGMkUyOEI4QzE5OEYwOUJEODk2Q0IyMEI1OEMz
MzZCMDQ5RkQzQTY2RDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtLyBw1nP/GWgwXKN56pTKIdcKoW5MHO5DadRygs6y3kOhdv3dC9B
Thxs2sfKEIPXIpFTkKMvhRN/7bz6UyQO3W9sfavy/tpl4ltp85TKR15+2vfZVIiO
weeTRfPti8BDJYUNg466X2dTAPkrItAH5ykxlhtRrZo0ASX74y29qZRPIba+I6P2
Fw021YpAmpOIe1wQYTkZftnL6uafuCH0RhjL/neaHlggnh1cV7kdgJjwZpiM785o
HM9wRS3d9OluYAyqJfG5ofjTaSJMedgOAKsIR6L53r+YAUA4IU0kj6yK5md/2j2i
anzQ+PLii4wZjwm9iWyyC1jDNrBJ/Tpm0QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FII3qGwhaxcFco1cOqqZOxL4UwF0MB8GA1UdIwQYMBaAFEaNpL1LVsACo1A5lWjk
35pZFQ+eMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuNDRWSlNheUcyQ2Zn
MXRjcTFXRGVjSmI5YlZWeml2d0JwRTVHUGtONmVqLzAvNDY4REE0QkQ0QjU2QzAw
MkEzNTAzOTk1NjhFNERGOUE1OTE1MEY5RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NjhEQTRCRDRCNTZDMDAyQTM1MDM5OTU2OEU0REY5QTU5MTUw
RjlFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybjQ0VkpTYXlHMkNmZzF0Y3Ex
V0RlY0piOWJWVnppdndCcEU1R1BrTjZlai8wLzM0MzUyZTMxMzczODJlMzIzMDM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzAzNDM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LbLRMA0GCSqGSIb3DQEBCwUAA4IBAQCCCUoIz4h2W4bRcb9QkKmrJr2AtfEOtJT4
BNljJ4/u0WHK3edrNc6Bvj+caZ41WK55qvaNbYXON6tYs4tZigRqX88cZcN7fueu
MKAc7r1bNNm20Stk9XbKF7BLI5XltECPkoMT6sUkO6X2Ga+UVouBR3GIv57VHgfp
IcMu/KX9iswOQBf3FAF62BMz1Fw3t5kp4rr754ugibPk3lh4kkUxbIkXVwwuvMVF
r0pAFZc6wOHXitQmNl+zujx3P2eotDMlWGe+QwrwlqKroUn68m/BkQGcJVkp4cyf
CKqrlvZdTYeYc8xEU3421fN7b/Yp4eaWjXymhZEBvQ0xPCk8/yyo
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org