Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32332d3233203d3e20323637323536.roa
File:                     34352e3233322e34382e302f32332d3233203d3e20323637323536.roa (raw, json)
Hash identifier:          7NCbV+hcay5163O9p5O6zg4oWR0xcLrpyvaPKya4Nsg=
Subject key identifier:   BE:CC:AD:34:AA:09:3F:D8:B4:7F:14:25:EC:1A:F1:C5:EB:92:4D:6A
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       687C0A8D2E8236DB233C8B84FD261DF1C75F6C4D
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32332d3233203d3e20323637323536.roa
Signing time:             Fri 08 Mar 2024 20:03:20 +0000
ROA not before:           Fri 08 Mar 2024 19:58:20 +0000
ROA not after:            Fri 07 Mar 2025 20:03:20 +0000
asID:                     267256
IP address blocks:        45.232.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7c:0a:8d:2e:82:36:db:23:3c:8b:84:fd:26:1d:f1:c7:5f:6c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Mar  8 19:58:20 2024 GMT
            Not After : Mar  7 20:03:20 2025 GMT
        Subject: CN=BECCAD34AA093FD8B47F1425EC1AF1C5EB924D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:81:ea:30:6b:50:97:01:45:7c:08:95:89:99:
                    2c:08:42:bd:52:49:c4:64:d5:16:ba:35:77:98:c7:
                    db:b3:86:dc:40:ad:14:b7:48:58:13:37:be:a0:68:
                    66:f0:3c:5f:44:85:ed:d5:3d:82:a4:3a:ab:b2:6d:
                    62:16:65:8e:88:a6:32:e6:05:14:9d:2d:14:d6:8c:
                    8b:d4:d3:8f:8f:fd:5d:b5:42:ce:72:df:87:d6:c1:
                    02:ed:af:12:0c:5f:c7:b4:ba:8a:1a:68:e5:bd:7b:
                    2d:23:dd:ad:35:61:21:15:46:f0:58:2c:83:f3:8c:
                    e5:2f:4e:5d:2a:cc:0d:04:8d:3c:75:ae:21:f8:b3:
                    a7:33:5d:45:24:33:b4:f6:17:c6:ea:52:f3:cc:3d:
                    09:32:5c:61:71:0e:bc:da:6b:78:28:48:b8:14:c4:
                    02:dd:8e:07:e2:f3:c8:e1:b4:aa:ec:89:a6:78:1e:
                    e3:e5:ae:71:a5:09:b3:7b:d8:0f:94:76:55:8c:3a:
                    78:f3:73:dc:4c:38:69:7b:28:65:45:19:1b:70:73:
                    a7:5c:38:de:8c:1d:93:86:d4:a9:72:73:7f:9c:5a:
                    41:68:d1:ec:f3:d4:36:01:fe:bb:c4:2e:b3:88:68:
                    d8:fa:6e:e9:2f:b6:70:5b:5e:37:89:ac:89:d6:dd:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CC:AD:34:AA:09:3F:D8:B4:7F:14:25:EC:1A:F1:C5:EB:92:4D:6A
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32332d3233203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:5a:d3:d5:28:ac:91:f4:66:98:52:ec:ac:f9:9f:90:27:
         b2:ed:ea:29:56:b5:0e:c5:e0:d7:c4:69:40:e8:96:c3:eb:08:
         39:19:2e:46:38:d4:9f:71:24:bd:6d:38:78:1e:e1:98:14:15:
         89:36:5c:1b:11:e0:22:fc:3d:f9:69:b2:cc:14:ad:2f:ce:54:
         89:10:b1:82:1b:af:68:31:be:c6:0e:59:99:bb:bd:ab:24:8c:
         61:60:3a:95:cd:ea:d5:04:e4:24:68:8d:2a:b7:80:08:19:cf:
         f6:92:45:81:7d:b5:c4:29:6c:a8:cc:8d:bd:35:1b:38:76:11:
         8d:21:c9:1f:8e:02:0b:4c:bc:12:44:d0:aa:f8:09:af:98:cf:
         5e:80:94:aa:76:c5:42:3b:1f:5f:ec:77:be:11:f9:ce:dc:e9:
         9f:e2:85:3c:3e:5d:43:90:76:86:75:ee:eb:a8:43:31:93:de:
         1e:79:57:17:14:56:f2:3d:75:b5:b9:92:64:69:d7:72:7e:c8:
         05:d3:97:15:fc:a5:9a:85:c0:b2:0c:54:c7:cb:c9:1d:87:dd:
         a2:cf:a1:92:e4:a0:cb:f0:dd:03:cc:0f:a1:88:08:fb:53:3b:
         ff:16:35:17:bd:c1:ea:d7:02:0b:c0:df:11:3d:a7:de:2b:3d:
         2d:53:78:6d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaHwKjS6CNtsjPIuE/SYd8cdfbE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyRTZEM0MwRDkzOTVCMTZFRTc0RjQwMjdBOThDMDg3
NkMyRTc4RDAeFw0yNDAzMDgxOTU4MjBaFw0yNTAzMDcyMDAzMjBaMDMxMTAvBgNV
BAMTKEJFQ0NBRDM0QUEwOTNGRDhCNDdGMTQyNUVDMUFGMUM1RUI5MjRENkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtgeowa1CXAUV8CJWJmSwIQr1S
ScRk1Ra6NXeYx9uzhtxArRS3SFgTN76gaGbwPF9Ehe3VPYKkOquybWIWZY6IpjLm
BRSdLRTWjIvU04+P/V21Qs5y34fWwQLtrxIMX8e0uooaaOW9ey0j3a01YSEVRvBY
LIPzjOUvTl0qzA0EjTx1riH4s6czXUUkM7T2F8bqUvPMPQkyXGFxDrzaa3goSLgU
xALdjgfi88jhtKrsiaZ4HuPlrnGlCbN72A+UdlWMOnjzc9xMOGl7KGVFGRtwc6dc
ON6MHZOG1Klyc3+cWkFo0ezz1DYB/rvELrOIaNj6bukvtnBbXjeJrInW3SXRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvsytNKoJP9i0fxQl7BrxxeuSTWowHwYDVR0j
BBgwFoAUiS5tPA2TlbFu509AJ6mMCHbC540wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC84OTJFNkQzQzBEOTM5NUIxNkVFNzRGNDAyN0E5OEMwODc2QzJFNzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg5MkU2RDNDMEQ5Mzk1QjE2
RUU3NEY0MDI3QTk4QzA4NzZDMkU3OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLegwMA0GCSqGSIb3DQEBCwUAA4IBAQCiy1rT1Sis
kfRmmFLsrPmfkCey7eopVrUOxeDXxGlA6JbD6wg5GS5GONSfcSS9bTh4HuGYFBWJ
NlwbEeAi/D35abLMFK0vzlSJELGCG69oMb7GDlmZu72rJIxhYDqVzerVBOQkaI0q
t4AIGc/2kkWBfbXEKWyozI29NRs4dhGNIckfjgILTLwSRNCq+AmvmM9egJSqdsVC
Ox9f7He+EfnO3Omf4oU8Pl1DkHaGde7rqEMxk94eeVcXFFbyPXW1uZJkaddyfsgF
05cV/KWahcCyDFTHy8kdh92iz6GS5KDL8N0DzA+hiAj7Uzv/FjUXvcHq1wILwN8R
PafeKz0tU3ht
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org