Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/34352e3136342e3231382e302f32332d3233203d3e20323638363533.roa
File:                     34352e3136342e3231382e302f32332d3233203d3e20323638363533.roa (raw, json)
Hash identifier:          jKRKTYK1EuT5divebrV8AByEdmmR1TFMuDPriUOvjvA=
Subject key identifier:   28:40:8A:DF:B5:7C:38:F9:10:02:89:D3:6F:19:06:EA:CA:FB:8F:A1
Certificate issuer:       /CN=8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D
Certificate serial:       3175F7A53E3F64E06F6C8F9D1E928FE565411658
Authority key identifier: 8D:CC:52:EA:C5:DD:6E:E6:5F:5D:95:40:ED:0C:69:BB:1A:6F:7C:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/34352e3136342e3231382e302f32332d3233203d3e20323638363533.roa
Signing time:             Thu 24 Mar 2022 20:06:15 +0000
ROA not before:           Thu 24 Mar 2022 20:01:15 +0000
ROA not after:            Thu 23 Mar 2023 20:06:15 +0000
asID:                     268653
IP address blocks:        45.164.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:75:f7:a5:3e:3f:64:e0:6f:6c:8f:9d:1e:92:8f:e5:65:41:16:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D
        Validity
            Not Before: Mar 24 20:01:15 2022 GMT
            Not After : Mar 23 20:06:15 2023 GMT
        Subject: CN=28408ADFB57C38F9100289D36F1906EACAFB8FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:49:f2:2a:a7:1a:c0:1f:29:f4:d5:4d:b9:
                    5c:a2:be:10:73:e4:c7:a8:e3:cf:02:ee:e1:b7:de:
                    b2:83:bf:28:47:02:a6:19:b0:94:83:67:50:3a:ae:
                    78:53:91:4e:48:7d:b0:81:a7:0a:9c:b8:c9:65:de:
                    f5:fd:1a:f4:30:b7:af:47:14:bb:6c:5d:e9:de:00:
                    d7:c0:18:6d:a4:b0:ba:72:d6:c9:ee:25:b7:29:15:
                    89:24:8f:99:7a:57:90:34:b8:cb:a6:61:6f:12:e7:
                    28:fd:9e:c3:56:f0:63:b2:22:3b:f9:82:70:55:94:
                    8b:9f:64:92:46:c1:8b:4c:5c:6c:4e:69:0f:3d:58:
                    41:55:39:8f:0b:93:16:6a:48:11:f5:3b:41:09:98:
                    25:17:ea:ff:c4:4c:cc:82:ab:04:9e:37:73:fa:f0:
                    28:07:a6:3b:c6:3e:bf:2d:f4:9a:07:6c:4e:1b:37:
                    75:eb:46:af:1c:ab:28:0c:28:1a:a3:b5:26:da:0b:
                    8e:d5:3a:b3:37:7c:2d:ca:9c:5e:28:b7:51:6f:79:
                    0c:52:1b:0a:b7:d7:37:a2:0a:60:d2:83:97:b9:ef:
                    35:48:72:21:8f:32:2d:36:c8:b4:12:2e:4e:b8:0c:
                    5f:4d:b7:06:24:d6:2b:b5:1d:95:fe:a5:77:89:09:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:8A:DF:B5:7C:38:F9:10:02:89:D3:6F:19:06:EA:CA:FB:8F:A1
            X509v3 Authority Key Identifier:
                keyid:8D:CC:52:EA:C5:DD:6E:E6:5F:5D:95:40:ED:0C:69:BB:1A:6F:7C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/34352e3136342e3231382e302f32332d3233203d3e20323638363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:40:db:46:c1:2a:bd:38:2c:31:f0:6b:78:c4:6e:5a:da:
         77:87:90:da:9c:05:4f:d2:df:67:03:fd:24:df:bc:a2:a2:75:
         16:fe:a7:47:d6:07:74:60:b5:19:3e:55:69:10:d6:b0:b1:24:
         d0:08:87:cc:3e:f5:5d:11:cf:ea:0d:a3:3b:cc:fb:62:53:8e:
         5d:03:80:7d:e1:2f:f8:d0:b1:54:4d:31:e3:c2:78:d9:c9:4c:
         79:82:e6:24:a5:bd:6f:6e:e5:c7:0d:b0:1f:a6:5c:4e:da:09:
         a5:ab:9f:10:e8:d4:2e:6a:6e:d6:0d:cf:7c:b7:a2:38:f3:3c:
         66:70:a3:f1:a4:82:9e:d6:11:a3:e4:33:71:99:8a:3f:c6:e7:
         f8:93:2a:2e:49:cf:e1:e9:09:40:c0:ba:b3:ce:c8:80:d1:c6:
         c6:5e:71:27:fc:b5:fe:ac:6f:de:4f:b8:34:97:22:86:5e:2b:
         8b:0a:84:f7:d9:86:76:aa:cb:da:0e:be:17:df:48:66:73:92:
         43:00:b5:bf:55:a9:90:29:b6:29:18:fe:fd:70:80:fd:6b:0f:
         98:62:c6:9d:bf:49:76:5f:39:6e:57:59:66:d3:d0:42:b5:3a:
         d1:0e:de:54:5f:8e:8c:26:c5:73:41:ce:5c:c5:a7:e5:d3:40:
         6a:aa:b7:65
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMXX3pT4/ZOBvbI+dHpKP5WVBFlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERDQzUyRUFDNURENkVFNjVGNUQ5NTQwRUQwQzY5QkIx
QTZGN0M2RDAeFw0yMjAzMjQyMDAxMTVaFw0yMzAzMjMyMDA2MTVaMDMxMTAvBgNV
BAMTKDI4NDA4QURGQjU3QzM4RjkxMDAyODlEMzZGMTkwNkVBQ0FGQjhGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oknyKqcawB8p9NVNuVyivhBz
5Meo488C7uG33rKDvyhHAqYZsJSDZ1A6rnhTkU5IfbCBpwqcuMll3vX9GvQwt69H
FLtsXeneANfAGG2ksLpy1snuJbcpFYkkj5l6V5A0uMumYW8S5yj9nsNW8GOyIjv5
gnBVlIufZJJGwYtMXGxOaQ89WEFVOY8LkxZqSBH1O0EJmCUX6v/ETMyCqwSeN3P6
8CgHpjvGPr8t9JoHbE4bN3XrRq8cqygMKBqjtSbaC47VOrM3fC3KnF4ot1FveQxS
Gwq31zeiCmDSg5e57zVIciGPMi02yLQSLk64DF9NtwYk1iu1HZX+pXeJCWkvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKECK37V8OPkQAonTbxkG6sr7j6EwHwYDVR0j
BBgwFoAUjcxS6sXdbuZfXZVA7QxpuxpvfG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRDSjFQUnlHOGMzcVJzZW94aVZDbjZyUk44cEJSVDFBanVzMkd4YWNS
SHkvMC84RENDNTJFQUM1REQ2RUU2NUY1RDk1NDBFRDBDNjlCQjFBNkY3QzZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhEQ0M1MkVBQzVERDZFRTY1
RjVEOTU0MEVEMEM2OUJCMUE2RjdDNkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Q0oxUFJ5RzhjM3FSc2VveGlWQ242clJOOHBCUlQxQWp1czJHeGFjUkh5LzAv
MzQzNTJlMzEzNjM0MmUzMjMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpNowDQYJKoZIhvcNAQELBQADggEBABC0QNtG
wSq9OCwx8Gt4xG5a2neHkNqcBU/S32cD/STfvKKidRb+p0fWB3RgtRk+VWkQ1rCx
JNAIh8w+9V0Rz+oNozvM+2JTjl0DgH3hL/jQsVRNMePCeNnJTHmC5iSlvW9u5ccN
sB+mXE7aCaWrnxDo1C5qbtYNz3y3ojjzPGZwo/Gkgp7WEaPkM3GZij/G5/iTKi5J
z+HpCUDAurPOyIDRxsZecSf8tf6sb95PuDSXIoZeK4sKhPfZhnaqy9oOvhffSGZz
kkMAtb9VqZAptikY/v1wgP1rD5hixp2/SXZfOW5XWWbT0EK1OtEO3lRfjowmxXNB
zlzFp+XTQGqqt2U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org