Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231332e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231332e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          IwasRg6QkT8gqsGN5JJtK+4deaczeA3BKIZTM3YwEnM=
Subject key identifier:   12:D3:6F:18:C9:A0:29:4D:39:2F:9A:92:5F:0E:9B:87:F4:3F:D9:FD
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       22C133D8A25138FCE5C51CDE943ABD7AD5C86F7A
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231332e302f32342d3234203d3e203631363134.roa
Signing time:             Tue 20 Jun 2023 17:36:01 +0000
ROA not before:           Tue 20 Jun 2023 17:31:01 +0000
ROA not after:            Tue 18 Jun 2024 17:36:01 +0000
asID:                     61614
IP address blocks:        45.232.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c1:33:d8:a2:51:38:fc:e5:c5:1c:de:94:3a:bd:7a:d5:c8:6f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun 20 17:31:01 2023 GMT
            Not After : Jun 18 17:36:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:88:01:ae:71:e6:09:7b:a1:ec:28:68:b0:fe:
                    60:12:6b:f9:38:86:90:8c:4d:a8:a1:61:e4:66:f4:
                    e5:a5:47:6a:6d:07:25:b4:6a:a9:bb:3e:61:0c:fc:
                    c5:4c:2c:98:fd:47:3a:f6:0c:b8:ea:ae:80:74:73:
                    fc:42:c2:ba:74:8f:3c:d3:b2:4c:83:48:f9:0d:4c:
                    4a:a4:f4:31:0a:46:a3:65:77:9e:0f:32:09:6b:50:
                    16:d8:19:30:60:03:56:b7:64:c2:30:6b:af:f0:19:
                    69:cb:ec:59:e5:12:02:5f:00:1f:7a:27:ca:15:cd:
                    3c:69:8e:0f:d3:61:7b:97:f0:d5:88:65:91:ee:d4:
                    42:fb:c5:3a:51:7a:ba:c3:ad:f9:57:3e:50:d8:ed:
                    84:c5:66:c9:49:b3:fb:0d:0f:f8:e5:40:b2:9d:50:
                    0b:f9:ef:6b:e6:34:c0:3c:00:58:89:ac:c9:b6:9c:
                    81:d0:73:66:76:3e:73:e6:0b:ac:5b:7e:53:84:ab:
                    2c:be:5d:32:64:b5:63:cc:a5:6a:e9:56:5f:34:82:
                    bc:2d:06:d9:d3:84:5d:c3:56:b6:31:bb:26:eb:91:
                    1b:08:5b:63:c1:8c:4d:68:54:21:23:dd:c0:e0:9e:
                    9a:ee:71:aa:9f:2c:f1:0c:a8:83:9e:4a:1c:32:d8:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D3:6F:18:C9:A0:29:4D:39:2F:9A:92:5F:0E:9B:87:F4:3F:D9:FD
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231332e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:82:eb:79:a6:7a:cc:f5:c4:4c:cc:11:7f:07:6d:7f:b1:
         73:8d:76:1b:9b:0f:02:d7:3b:75:a2:d9:7a:4f:fb:82:6d:19:
         6c:23:6b:95:1c:e6:41:d6:80:77:b6:65:c7:f7:25:52:7d:27:
         40:28:fa:63:8b:59:eb:77:f2:e1:d8:d7:94:31:97:80:a8:72:
         14:c9:c8:3e:b1:6c:ce:73:01:09:46:e0:42:58:71:78:2b:ab:
         2b:c5:74:99:76:e2:87:9b:2f:f1:4f:de:c7:52:ee:30:c5:bc:
         86:0e:d8:45:39:f3:f1:ad:f1:f2:78:7e:06:39:53:1a:f3:be:
         cc:d9:43:ea:f0:87:1c:b9:3d:af:6a:16:a1:20:89:f1:92:c0:
         ca:db:eb:3c:8d:97:cf:6d:63:14:34:5d:54:0b:c1:d8:c9:34:
         c6:93:09:b9:5b:89:ce:15:cf:03:28:b3:7d:74:c4:09:6f:05:
         6e:a7:3e:d2:48:9c:aa:d7:60:f0:e3:79:35:75:b8:a1:9d:e2:
         f3:f7:d8:13:80:40:c0:4d:08:dd:a7:e4:82:e0:0d:c6:e0:16:
         0d:ed:da:6b:d9:c9:70:81:65:ee:e0:f8:a1:f5:a0:43:43:75:
         3d:1f:33:65:43:37:6a:53:4f:4a:ff:93:6b:f3:7f:a4:96:2d:
         03:7c:12:1a
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUIsEz2KJROPzlxRzelDq9etXIb3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY2N0U1REM3NEU3NkQyQzZDNUUxQTAyRTkxQTQ5QzMx
NDlGNzYzNzAeFw0yMzA2MjAxNzMxMDFaFw0yNDA2MTgxNzM2MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUQ4ODAxQUU3MUU2MDk3QkEx
RUMyODY4QjBGRTYwMTI2QkY5Mzg4NjkwOEM0REE4QTE2MUU0NjZGNEU1QTU0NzZB
NkQwNzI1QjQ2QUE5QkIzRTYxMENGQ0M1NEMyQzk4RkQ0NzNBRjYwQ0I4RUFBRTgw
NzQ3M0ZDNDJDMkJBNzQ4RjNDRDNCMjRDODM0OEY5MEQ0QzRBQTRGNDMxMEE0NkEz
NjU3NzlFMEYzMjA5NkI1MDE2RDgxOTMwNjAwMzU2Qjc2NEMyMzA2QkFGRjAxOTY5
Q0JFQzU5RTUxMjAyNUYwMDFGN0EyN0NBMTVDRDNDNjk4RTBGRDM2MTdCOTdGMEQ1
ODg2NTkxRUVENDQyRkJDNTNBNTE3QUJBQzNBREY5NTczRTUwRDhFRDg0QzU2NkM5
NDlCM0ZCMEQwRkY4RTU0MEIyOUQ1MDBCRjlFRjZCRTYzNEMwM0MwMDU4ODlBQ0M5
QjY5QzgxRDA3MzY2NzYzRTczRTYwQkFDNUI3RTUzODRBQjJDQkU1RDMyNjRCNTYz
Q0NBNTZBRTk1NjVGMzQ4MkJDMkQwNkQ5RDM4NDVEQzM1NkI2MzFCQjI2RUI5MTFC
MDg1QjYzQzE4QzRENjg1NDIxMjNEREMwRTA5RTlBRUU3MUFBOUYyQ0YxMENBODgz
OUU0QTFDMzJEODhDQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7YgBrnHmCXuh7ChosP5gEmv5OIaQjE2ooWHkZvTlpUdqbQcltGqp
uz5hDPzFTCyY/Uc69gy46q6AdHP8QsK6dI8807JMg0j5DUxKpPQxCkajZXeeDzIJ
a1AW2BkwYANWt2TCMGuv8Blpy+xZ5RICXwAfeifKFc08aY4P02F7l/DViGWR7tRC
+8U6UXq6w635Vz5Q2O2ExWbJSbP7DQ/45UCynVAL+e9r5jTAPABYiazJtpyB0HNm
dj5z5gusW35ThKssvl0yZLVjzKVq6VZfNIK8LQbZ04Rdw1a2Mbsm65EbCFtjwYxN
aFQhI93A4J6a7nGqnyzxDKiDnkocMtiMwQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FBLTbxjJoClNOS+akl8Om4f0P9n9MB8GA1UdIwQYMBaAFL9n5dx0520sbF4aAuka
ScMUn3Y3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuaDlhZDJjNnZTamFQ
NWpUd1RIUXpDRXZLdm9XY3gxSnozaWtIU1NnYXlGLzAvQkY2N0U1REM3NEU3NkQy
QzZDNUUxQTAyRTkxQTQ5QzMxNDlGNzYzNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CRjY3RTVEQzc0RTc2RDJDNkM1RTFBMDJFOTFBNDlDMzE0OUY3
NjM3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybmg5YWQyYzZ2U2phUDVqVHdU
SFF6Q0V2S3ZvV2N4MUp6M2lrSFNTZ2F5Ri8wLzM0MzUyZTMyMzMzMjJlMzIzMTMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM2MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3o
1TANBgkqhkiG9w0BAQsFAAOCAQEAUj2C63mmesz1xEzMEX8HbX+xc412G5sPAtc7
daLZek/7gm0ZbCNrlRzmQdaAd7Zlx/clUn0nQCj6Y4tZ63fy4djXlDGXgKhyFMnI
PrFsznMBCUbgQlhxeCurK8V0mXbih5sv8U/ex1LuMMW8hg7YRTnz8a3x8nh+BjlT
GvO+zNlD6vCHHLk9r2oWoSCJ8ZLAytvrPI2Xz21jFDRdVAvB2Mk0xpMJuVuJzhXP
AyizfXTECW8Fbqc+0kicqtdg8ON5NXW4oZ3i8/fYE4BAwE0I3afkguANxuAWDe3a
a9nJcIFl7uD4ofWgQ0N1PR8zZUM3alNPSv+Ta/N/pJYtA3wSGg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org