Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
File:                     34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier:          HFVKoHoYb+zs2ajEyZrJNYX+AIkbaOegFHYbgUrsnxU=
Subject key identifier:   A8:4D:9F:FA:05:B7:2A:9A:29:59:6A:57:CD:08:A3:F7:32:CC:FA:D2
Certificate issuer:       /CN=1A1E771886DB4FAE27F017DADDDAE982732C274F
Certificate serial:       7CBF33A626EFB537DC4CD30835C503110E94CF0B
Authority key identifier: 1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
Signing time:             Thu 07 Dec 2023 20:00:00 +0000
ROA not before:           Thu 07 Dec 2023 19:55:00 +0000
ROA not after:            Thu 05 Dec 2024 20:00:00 +0000
asID:                     268312
IP address blocks:        45.238.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bf:33:a6:26:ef:b5:37:dc:4c:d3:08:35:c5:03:11:0e:94:cf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A1E771886DB4FAE27F017DADDDAE982732C274F
        Validity
            Not Before: Dec  7 19:55:00 2023 GMT
            Not After : Dec  5 20:00:00 2024 GMT
        Subject: CN=A84D9FFA05B72A9A29596A57CD08A3F732CCFAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:a2:24:34:d1:7e:c8:ad:dd:ab:27:1b:29:
                    1d:5b:12:b0:64:9b:f9:da:5a:43:f3:58:26:4f:6a:
                    6c:c0:81:d5:b6:59:c7:15:30:9a:da:81:4d:fa:34:
                    ea:8e:a4:9d:f8:9f:37:27:03:e3:86:24:62:5b:e9:
                    c3:ba:d2:a1:1b:99:9c:64:b6:bb:cb:c8:c2:06:1c:
                    1e:c8:9c:72:ae:59:b0:d0:62:30:8d:91:f2:32:c8:
                    24:8f:5c:63:44:5a:f0:33:90:31:9b:ef:a6:fe:c8:
                    44:7d:cb:17:92:f8:c6:a6:55:b3:6b:cb:ec:67:bc:
                    e2:df:bf:e1:e5:df:32:98:e5:73:5e:9f:49:90:0e:
                    41:c8:8f:95:a5:00:ce:56:96:e9:a8:d5:d4:a5:2a:
                    d2:e8:eb:ee:a0:80:6e:45:dd:0c:30:31:9d:28:e4:
                    a1:63:f5:06:fb:e1:6e:2a:a2:d6:e2:c0:91:ca:48:
                    53:e8:ad:63:7a:96:1c:09:9b:e7:45:f5:a6:26:1e:
                    65:dd:00:8c:d9:eb:1b:a3:34:11:45:b4:6b:5e:f0:
                    bb:a7:99:ad:b2:62:e7:cf:b7:a6:cc:fc:7b:a4:76:
                    7b:3e:cf:9e:c7:df:2f:c5:b6:90:e0:7f:93:a9:d9:
                    de:1b:89:ca:19:81:2f:71:98:d9:1e:d2:76:f5:e1:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:9F:FA:05:B7:2A:9A:29:59:6A:57:CD:08:A3:F7:32:CC:FA:D2
            X509v3 Authority Key Identifier:
                keyid:1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:b2:4e:f1:58:9a:b1:97:dd:88:d8:ce:a0:94:37:e9:a8:f3:
         f5:d0:ab:80:12:fd:fe:20:99:7e:e0:64:6d:8a:72:81:5b:28:
         09:f8:ba:f2:cf:97:90:09:a8:0d:7a:7f:f7:b9:5e:81:93:f8:
         9f:19:23:83:91:c7:e9:e1:ba:e7:ad:e3:b2:9d:c2:1e:25:c1:
         a9:c4:b5:9e:fe:4f:68:2d:bf:7c:e6:46:0b:13:73:b9:ee:9c:
         0b:0c:33:5c:e0:69:61:11:dc:1c:12:42:ae:00:2b:c3:c5:34:
         5b:96:dd:48:b8:4e:41:e0:45:0d:3b:53:2a:27:8f:81:ff:61:
         a8:82:32:9d:45:64:e8:eb:dd:f7:c9:a3:df:c2:17:87:bd:22:
         fc:d3:bd:52:fb:36:94:ff:45:fc:df:fd:f7:70:77:4a:c8:18:
         bb:6f:0f:30:85:ea:ff:5c:9d:d2:c1:8d:86:eb:77:52:97:82:
         71:b3:10:17:63:94:08:22:50:cb:28:8e:fb:05:8c:82:c1:4e:
         c1:53:d4:4e:86:e0:57:1a:a9:a8:da:eb:8a:74:ca:b9:6a:d5:
         b5:83:92:db:aa:3a:0b:ed:50:13:e3:9a:3b:c1:49:52:39:d3:
         de:af:0e:35:4f:ad:d8:ee:5a:ae:56:31:d7:8c:97:dd:2a:19:
         c6:9c:39:0b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfL8zpibvtTfcTNMINcUDEQ6UzwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUExRTc3MTg4NkRCNEZBRTI3RjAxN0RBREREQUU5ODI3
MzJDMjc0RjAeFw0yMzEyMDcxOTU1MDBaFw0yNDEyMDUyMDAwMDBaMDMxMTAvBgNV
BAMTKEE4NEQ5RkZBMDVCNzJBOUEyOTU5NkE1N0NEMDhBM0Y3MzJDQ0ZBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdeaIkNNF+yK3dqycbKR1bErBk
m/naWkPzWCZPamzAgdW2WccVMJragU36NOqOpJ34nzcnA+OGJGJb6cO60qEbmZxk
trvLyMIGHB7InHKuWbDQYjCNkfIyyCSPXGNEWvAzkDGb76b+yER9yxeS+MamVbNr
y+xnvOLfv+Hl3zKY5XNen0mQDkHIj5WlAM5Wlumo1dSlKtLo6+6ggG5F3QwwMZ0o
5KFj9Qb74W4qotbiwJHKSFPorWN6lhwJm+dF9aYmHmXdAIzZ6xujNBFFtGte8Lun
ma2yYufPt6bM/Hukdns+z57H3y/FtpDgf5Op2d4bicoZgS9xmNke0nb14ZQRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqE2f+gW3KpopWWpXzQij9zLM+tIwHwYDVR0j
BBgwFoAUGh53GIbbT64n8Bfa3drpgnMsJ08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1
alAvMC8xQTFFNzcxODg2REI0RkFFMjdGMDE3REFERERBRTk4MjczMkMyNzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBMUU3NzE4ODZEQjRGQUUy
N0YwMTdEQUREREFFOTgyNzMyQzI3NEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSajI0OXhlc211TDdpWDZBZENlakpjeGY2NVNtUHFzRjJDQUg4UlZUNWpQLzAv
MzQzNTJlMzIzMzM4MmUzNDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLe4uMA0GCSqGSIb3DQEBCwUAA4IBAQBdsk7xWJqx
l92I2M6glDfpqPP10KuAEv3+IJl+4GRtinKBWygJ+Lryz5eQCagNen/3uV6Bk/if
GSODkcfp4brnreOyncIeJcGpxLWe/k9oLb985kYLE3O57pwLDDNc4GlhEdwcEkKu
ACvDxTRblt1IuE5B4EUNO1MqJ4+B/2GogjKdRWTo6933yaPfwheHvSL8071S+zaU
/0X83/33cHdKyBi7bw8wher/XJ3SwY2G63dSl4JxsxAXY5QIIlDLKI77BYyCwU7B
U9ROhuBXGqmo2uuKdMq5atW1g5LbqjoL7VAT45o7wUlSOdPerw41T63Y7lquVjHX
jJfdKhnGnDkL
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org