Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/34352e3138382e3138312e302f32342d3234203d3e20323639353239.roa
File:                     34352e3138382e3138312e302f32342d3234203d3e20323639353239.roa (raw, json)
Hash identifier:          pgpTCXrlQV0diDZ7Qht2kYihxE7XqAlK8A3LsfPoS/w=
Subject key identifier:   88:98:52:54:5E:F6:48:72:59:2A:FA:A5:EC:D2:86:59:E7:F2:0D:5B
Certificate issuer:       /CN=392ADD410C0A0859567B01AB47F99C7A6B0FA27E
Certificate serial:       0113AAF302649C28557DBA12506A4EAC3BD4A18A
Authority key identifier: 39:2A:DD:41:0C:0A:08:59:56:7B:01:AB:47:F9:9C:7A:6B:0F:A2:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/34352e3138382e3138312e302f32342d3234203d3e20323639353239.roa
Signing time:             Thu 04 Apr 2024 11:13:05 +0000
ROA not before:           Thu 04 Apr 2024 11:08:05 +0000
ROA not after:            Thu 03 Apr 2025 11:13:05 +0000
asID:                     269529
IP address blocks:        45.188.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:13:aa:f3:02:64:9c:28:55:7d:ba:12:50:6a:4e:ac:3b:d4:a1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392ADD410C0A0859567B01AB47F99C7A6B0FA27E
        Validity
            Not Before: Apr  4 11:08:05 2024 GMT
            Not After : Apr  3 11:13:05 2025 GMT
        Subject: CN=889852545EF64872592AFAA5ECD28659E7F20D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:2c:0d:83:d2:1d:2c:91:c0:36:5e:18:e8:
                    d2:20:f8:52:43:56:fa:ac:03:d6:77:bf:6f:df:aa:
                    07:5e:db:00:9e:11:57:d1:2d:ee:48:d8:55:7c:17:
                    ca:ef:43:dc:9c:7a:dc:c8:e6:7b:da:d1:77:ca:ab:
                    70:de:f8:b8:10:7e:b5:95:04:bc:47:e8:c0:19:53:
                    41:52:86:90:35:21:5c:ba:e3:50:d5:1b:3c:45:bd:
                    28:a8:7d:20:84:f1:fc:98:ca:37:1e:fc:54:50:ba:
                    2c:c5:a1:d1:ed:1c:94:05:69:fb:48:57:87:5d:f7:
                    26:2d:e6:b4:e7:8c:ba:81:0d:0f:86:ed:36:a4:6a:
                    fc:19:6a:78:18:0d:bf:cd:3c:d5:31:51:84:1e:b1:
                    5b:ad:88:82:56:8c:ce:52:cd:a9:5d:c5:ad:3f:9e:
                    66:54:a6:2c:65:0e:a0:b3:b5:18:f4:a5:de:09:41:
                    0b:2f:b4:ff:c5:b1:d3:e9:37:dc:14:d9:a2:a9:e8:
                    f8:ce:7c:a7:80:c6:ae:14:da:0d:b1:ee:aa:ab:6e:
                    80:c3:29:8c:15:d2:a7:ed:98:39:ba:f8:22:f0:37:
                    42:ff:99:64:b2:55:d3:cc:12:63:51:d5:25:99:1e:
                    50:11:44:13:53:3a:68:28:57:b8:17:f3:44:d1:cc:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:98:52:54:5E:F6:48:72:59:2A:FA:A5:EC:D2:86:59:E7:F2:0D:5B
            X509v3 Authority Key Identifier:
                keyid:39:2A:DD:41:0C:0A:08:59:56:7B:01:AB:47:F9:9C:7A:6B:0F:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/34352e3138382e3138312e302f32342d3234203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:44:b2:15:01:53:c4:9b:27:32:0a:66:b2:40:7a:8d:69:
         8d:62:d4:9e:79:fe:c7:e2:87:d1:03:8b:0d:35:ad:5f:5d:ad:
         49:63:94:37:b6:25:cb:91:23:58:d6:22:1d:fb:62:e1:a9:5d:
         34:f7:d3:60:ce:16:71:c4:0c:21:e8:12:7f:33:7b:54:63:a7:
         3c:12:71:38:a8:95:9f:17:41:97:56:91:08:c9:c6:ab:7f:17:
         66:02:ef:7b:4c:03:dc:e2:de:0c:d2:bb:25:60:2f:29:90:3f:
         f5:ce:97:9f:95:c0:b3:bc:f0:3a:ea:a8:b2:51:dc:df:60:be:
         3e:b5:43:35:5b:b4:f8:2e:1a:c3:be:41:59:04:04:05:b7:bf:
         21:4b:42:b9:c6:77:4f:62:d3:70:a2:f9:b6:d4:79:64:68:ae:
         33:78:fa:20:6f:a9:32:cf:37:0a:52:48:d0:3b:09:54:44:a9:
         ec:d1:0e:5d:1c:75:8c:2a:d0:98:51:7f:60:ce:9f:2e:90:96:
         db:3d:46:66:9c:13:00:34:5a:ae:85:26:a4:e0:eb:f2:cf:60:
         ee:1b:7a:a4:80:af:d0:a2:74:dd:da:0c:ce:8c:c0:f7:7f:37:
         dd:c2:34:34:cc:e0:56:97:3b:f8:1d:4e:bf:8a:02:fe:df:7e:
         f9:66:96:27
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAROq8wJknChVfboSUGpOrDvUoYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyQURENDEwQzBBMDg1OTU2N0IwMUFCNDdGOTlDN0E2
QjBGQTI3RTAeFw0yNDA0MDQxMTA4MDVaFw0yNTA0MDMxMTEzMDVaMDMxMTAvBgNV
BAMTKDg4OTg1MjU0NUVGNjQ4NzI1OTJBRkFBNUVDRDI4NjU5RTdGMjBENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuCwNg9IdLJHANl4Y6NIg+FJD
VvqsA9Z3v2/fqgde2wCeEVfRLe5I2FV8F8rvQ9ycetzI5nva0XfKq3De+LgQfrWV
BLxH6MAZU0FShpA1IVy641DVGzxFvSiofSCE8fyYyjce/FRQuizFodHtHJQFaftI
V4dd9yYt5rTnjLqBDQ+G7TakavwZangYDb/NPNUxUYQesVutiIJWjM5Szaldxa0/
nmZUpixlDqCztRj0pd4JQQsvtP/FsdPpN9wU2aKp6PjOfKeAxq4U2g2x7qqrboDD
KYwV0qftmDm6+CLwN0L/mWSyVdPMEmNR1SWZHlARRBNTOmgoV7gX80TRzND3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiJhSVF72SHJZKvql7NKGWefyDVswHwYDVR0j
BBgwFoAUOSrdQQwKCFlWewGrR/mcemsPon4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NBUzh0emZaMVRCbUFxUzR1ejNQUGhRMWFOSmM0dW1yeGtaa3kxQVRn
alEvMS8zOTJBREQ0MTBDMEEwODU5NTY3QjAxQUI0N0Y5OUM3QTZCMEZBMjdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MkFERDQxMEMwQTA4NTk1
NjdCMDFBQjQ3Rjk5QzdBNkIwRkEyN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTQVM4dHpmWjFUQm1BcVM0dXozUFBoUTFhTkpjNHVtcnhrWmt5MUFUZ2pRLzEv
MzQzNTJlMzEzODM4MmUzMTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvLUwDQYJKoZIhvcNAQELBQADggEBAFOkRLIV
AVPEmycyCmayQHqNaY1i1J55/sfih9EDiw01rV9drUljlDe2JcuRI1jWIh37YuGp
XTT302DOFnHEDCHoEn8ze1RjpzwScTiolZ8XQZdWkQjJxqt/F2YC73tMA9zi3gzS
uyVgLymQP/XOl5+VwLO88DrqqLJR3N9gvj61QzVbtPguGsO+QVkEBAW3vyFLQrnG
d09i03Ci+bbUeWRorjN4+iBvqTLPNwpSSNA7CVREqezRDl0cdYwq0JhRf2DOny6Q
lts9RmacEwA0Wq6FJqTg6/LPYO4beqSAr9CidN3aDM6MwPd/N93CNDTM4FaXO/gd
Tr+KAv7ffvlmlic=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org