Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36342e302f32322d3234203d3e20323638353933.roa
File:                     34352e3136322e36342e302f32322d3234203d3e20323638353933.roa (raw, json)
Hash identifier:          AvRzRFIxwn3kI0tBjVyenQb4kJRvzQCOd6Z9y/eX1D4=
Subject key identifier:   B4:55:6E:C3:21:19:4B:72:0C:02:03:6F:30:9E:BA:54:85:CE:4B:63
Certificate issuer:       /CN=B3A5736ACE6C497662EBAA10658C96B12B253181
Certificate serial:       59C63431A788D31796B9DE91DEAC88304FBF4D75
Authority key identifier: B3:A5:73:6A:CE:6C:49:76:62:EB:AA:10:65:8C:96:B1:2B:25:31:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3A5736ACE6C497662EBAA10658C96B12B253181.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36342e302f32322d3234203d3e20323638353933.roa
Signing time:             Tue 20 Feb 2024 19:06:43 +0000
ROA not before:           Tue 20 Feb 2024 19:01:43 +0000
ROA not after:            Tue 18 Feb 2025 19:06:43 +0000
asID:                     268593
IP address blocks:        45.162.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c6:34:31:a7:88:d3:17:96:b9:de:91:de:ac:88:30:4f:bf:4d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A5736ACE6C497662EBAA10658C96B12B253181
        Validity
            Not Before: Feb 20 19:01:43 2024 GMT
            Not After : Feb 18 19:06:43 2025 GMT
        Subject: CN=B4556EC321194B720C02036F309EBA5485CE4B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:9f:f0:8f:57:f1:11:f8:a5:09:5c:bf:aa:
                    91:2f:19:c6:b9:d0:0b:9e:82:f4:9c:8c:b1:b4:ea:
                    5e:62:c1:58:e5:99:0b:1b:fe:90:1e:86:0f:99:ca:
                    a8:3b:97:7d:0d:e3:3e:2a:b6:b7:7f:e9:80:51:67:
                    97:4f:da:0d:86:bd:4a:3f:e1:e4:65:13:21:5e:88:
                    ee:76:08:d9:88:30:90:34:36:4a:b7:6f:c5:26:e6:
                    55:1e:43:a8:91:ba:f9:7a:02:02:4a:22:f1:3a:97:
                    1b:d9:a1:19:a8:e2:19:19:dc:f9:eb:e7:f6:b5:99:
                    d6:e9:4e:d8:52:4c:3c:97:31:cc:7b:4a:c9:dd:41:
                    ef:ce:a7:31:05:04:94:eb:4d:4f:85:d0:c1:8a:c5:
                    82:11:04:f0:2a:91:6b:43:7d:05:3f:b3:f0:12:1a:
                    bc:f4:e5:b1:b1:23:1b:40:94:4d:ce:3d:ba:e4:8a:
                    57:5c:b1:27:6f:5f:de:6b:87:17:62:10:a7:d6:c5:
                    f6:29:0b:7c:f2:90:aa:5d:e1:fe:4a:c7:05:a1:2f:
                    14:a3:c1:45:07:3f:d3:40:1c:f2:16:95:36:6b:c9:
                    b7:a2:10:5d:91:a7:e8:ae:df:c3:8b:21:77:f3:61:
                    fa:b0:87:43:88:54:3e:21:fc:2c:1a:50:45:ad:e2:
                    2a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:55:6E:C3:21:19:4B:72:0C:02:03:6F:30:9E:BA:54:85:CE:4B:63
            X509v3 Authority Key Identifier:
                keyid:B3:A5:73:6A:CE:6C:49:76:62:EB:AA:10:65:8C:96:B1:2B:25:31:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/B3A5736ACE6C497662EBAA10658C96B12B253181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3A5736ACE6C497662EBAA10658C96B12B253181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36342e302f32322d3234203d3e20323638353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:30:6d:75:10:0d:9d:c1:f5:ba:3a:e4:cb:ba:d0:f5:cd:2f:
         5b:47:cc:05:05:4b:02:e4:0e:f2:87:fa:af:55:7f:8b:6d:64:
         19:cb:d7:57:48:ab:45:00:4a:ac:97:3e:f1:5c:bb:81:48:1e:
         55:6e:07:4c:b6:ce:b0:1f:4a:f1:cc:e5:4c:61:29:54:49:4c:
         38:06:24:f6:02:b3:7a:51:e3:8e:79:ee:21:45:b7:fa:46:d1:
         be:e1:9b:6c:95:4e:d6:34:1f:34:60:e5:f2:d5:5f:31:a4:47:
         41:ea:04:fd:53:8a:11:5f:a0:7c:7f:24:de:97:5c:30:f0:90:
         be:f2:7a:15:96:e8:7e:17:92:8a:30:9b:54:d4:ee:c4:fa:56:
         d0:e3:4c:ee:94:08:2f:97:91:12:6f:15:27:cb:1e:4e:4a:1d:
         05:4c:be:27:6f:38:62:e7:fc:e7:ca:83:45:0f:9b:7d:34:bd:
         f3:07:d9:d1:a0:8d:e6:1f:b7:e4:4b:e0:e8:8c:07:17:92:a0:
         59:3c:0b:45:58:ca:e8:c2:99:01:1c:76:d8:01:17:fa:f9:9e:
         eb:78:21:d8:2a:7b:ff:a3:95:6c:b4:ab:2b:09:1f:1c:fc:e7:
         d1:f8:eb:24:9a:2e:0b:c1:be:ab:bf:4a:6e:84:dd:16:54:47:
         10:2f:60:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWcY0MaeI0xeWud6R3qyIME+/TXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNBNTczNkFDRTZDNDk3NjYyRUJBQTEwNjU4Qzk2QjEy
QjI1MzE4MTAeFw0yNDAyMjAxOTAxNDNaFw0yNTAyMTgxOTA2NDNaMDMxMTAvBgNV
BAMTKEI0NTU2RUMzMjExOTRCNzIwQzAyMDM2RjMwOUVCQTU0ODVDRTRCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oJ/wj1fxEfilCVy/qpEvGca5
0AuegvScjLG06l5iwVjlmQsb/pAehg+Zyqg7l30N4z4qtrd/6YBRZ5dP2g2GvUo/
4eRlEyFeiO52CNmIMJA0Nkq3b8Um5lUeQ6iRuvl6AgJKIvE6lxvZoRmo4hkZ3Pnr
5/a1mdbpTthSTDyXMcx7SsndQe/OpzEFBJTrTU+F0MGKxYIRBPAqkWtDfQU/s/AS
Grz05bGxIxtAlE3OPbrkildcsSdvX95rhxdiEKfWxfYpC3zykKpd4f5KxwWhLxSj
wUUHP9NAHPIWlTZrybeiEF2Rp+iu38OLIXfzYfqwh0OIVD4h/CwaUEWt4iqzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtFVuwyEZS3IMAgNvMJ66VIXOS2MwHwYDVR0j
BBgwFoAUs6Vzas5sSXZi66oQZYyWsSslMYEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RQdXJqUERtOEE3RVkxWkxMckppbm0xRVBjajZLdHBOR2dvMVNGNU13
eW4vMC9CM0E1NzM2QUNFNkM0OTc2NjJFQkFBMTA2NThDOTZCMTJCMjUzMTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IzQTU3MzZBQ0U2QzQ5NzY2
MkVCQUExMDY1OEM5NkIxMkIyNTMxODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUUHVyalBEbThBN0VZMVpMTHJKaW5tMUVQY2o2S3RwTkdnbzFTRjVNd3luLzAv
MzQzNTJlMzEzNjMyMmUzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaJAMA0GCSqGSIb3DQEBCwUAA4IBAQA5MG11EA2d
wfW6OuTLutD1zS9bR8wFBUsC5A7yh/qvVX+LbWQZy9dXSKtFAEqslz7xXLuBSB5V
bgdMts6wH0rxzOVMYSlUSUw4BiT2ArN6UeOOee4hRbf6RtG+4ZtslU7WNB80YOXy
1V8xpEdB6gT9U4oRX6B8fyTel1ww8JC+8noVluh+F5KKMJtU1O7E+lbQ40zulAgv
l5ESbxUnyx5OSh0FTL4nbzhi5/znyoNFD5t9NL3zB9nRoI3mH7fkS+DojAcXkqBZ
PAtFWMrowpkBHHbYARf6+Z7reCHYKnv/o5VstKsrCR8c/OfR+Oskmi4Lwb6rv0pu
hN0WVEcQL2BT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org