Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/34352e3137302e3233382e302f32332d3233203d3e20323638313832.roa
File:                     34352e3137302e3233382e302f32332d3233203d3e20323638313832.roa (raw, json)
Hash identifier:          /h0W95uYj16MyY7+hEBo+JrI0lWqi3px2UUvMrq+8ZY=
Subject key identifier:   28:99:94:72:B3:7C:A7:0C:C1:AA:29:03:74:F2:20:72:E0:B2:07:F4
Certificate issuer:       /CN=E6AEEF2DE6CFAF4084226081AA1831400F328939
Certificate serial:       32D51AB9C835B06346B7D951075A1D056F05D3A2
Authority key identifier: E6:AE:EF:2D:E6:CF:AF:40:84:22:60:81:AA:18:31:40:0F:32:89:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6AEEF2DE6CFAF4084226081AA1831400F328939.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/34352e3137302e3233382e302f32332d3233203d3e20323638313832.roa
Signing time:             Mon 11 Jul 2022 13:00:00 +0000
ROA not before:           Mon 11 Jul 2022 12:55:00 +0000
ROA not after:            Mon 10 Jul 2023 13:00:00 +0000
asID:                     268182
IP address blocks:        45.170.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d5:1a:b9:c8:35:b0:63:46:b7:d9:51:07:5a:1d:05:6f:05:d3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6AEEF2DE6CFAF4084226081AA1831400F328939
        Validity
            Not Before: Jul 11 12:55:00 2022 GMT
            Not After : Jul 10 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:73:13:86:fb:06:2a:21:6d:73:cb:10:0d:
                    cf:bc:20:bc:23:06:9d:fa:fb:04:6e:10:bd:0d:0f:
                    e9:50:e8:b7:75:25:0b:41:16:a9:bc:47:f3:54:c4:
                    99:b1:bf:41:75:71:60:35:17:f2:d7:92:da:20:b8:
                    f6:80:5c:ed:6b:f4:6e:5f:89:b8:f4:9a:07:81:18:
                    76:d5:21:54:93:c5:a2:19:b6:bb:c8:5c:27:5e:52:
                    0f:4b:f6:19:62:01:8d:cc:d3:08:d1:cd:a2:fc:e7:
                    f5:30:a0:f1:16:b4:ad:9b:e1:4c:73:de:1c:44:03:
                    52:c8:9c:13:2a:70:1d:7c:1d:16:1e:4e:b5:92:db:
                    80:0e:0d:61:48:3b:27:fa:0e:14:15:28:cd:66:2b:
                    a6:da:c6:9d:53:e5:68:eb:56:d9:5a:3c:4f:3c:57:
                    44:ee:76:2b:76:3b:22:7a:1d:1e:12:ac:bf:9f:a6:
                    e5:61:fc:17:53:be:c8:5d:0d:c8:93:58:d4:2d:d4:
                    36:4e:01:5f:25:0e:63:d4:48:23:5e:7c:91:f5:50:
                    2f:24:72:22:c1:67:ae:64:b0:ca:21:e3:12:35:94:
                    9a:da:86:81:a2:dc:94:5e:7b:64:81:6c:04:19:95:
                    d9:04:57:de:6f:72:0d:aa:d9:31:5c:69:1c:02:4e:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:99:94:72:B3:7C:A7:0C:C1:AA:29:03:74:F2:20:72:E0:B2:07:F4
            X509v3 Authority Key Identifier:
                keyid:E6:AE:EF:2D:E6:CF:AF:40:84:22:60:81:AA:18:31:40:0F:32:89:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/E6AEEF2DE6CFAF4084226081AA1831400F328939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6AEEF2DE6CFAF4084226081AA1831400F328939.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/34352e3137302e3233382e302f32332d3233203d3e20323638313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:cf:20:56:47:c4:65:19:f6:38:ae:74:f5:55:7c:7b:1a:86:
         62:f8:15:69:38:1d:8b:d1:be:32:a8:1d:45:3e:df:be:f9:9c:
         8d:19:c5:6b:21:ea:7e:70:ee:63:03:68:1f:9c:cb:5c:82:e2:
         d6:69:bd:e4:7b:f9:7a:56:51:64:80:81:75:5c:63:be:77:a8:
         c2:77:99:35:91:66:e4:de:e5:7c:47:dd:93:b7:ca:ae:d9:0d:
         53:85:cc:b5:e1:8c:77:4c:4a:48:9e:7c:7c:69:42:98:7e:44:
         ac:f8:6a:c6:6f:0e:c3:ce:62:8a:87:be:33:7c:8e:0d:c1:20:
         fd:e0:3e:6e:14:62:6e:ab:00:f5:dc:0d:32:27:42:1c:64:22:
         29:e9:11:c6:db:81:15:01:03:7c:69:1a:ba:78:37:01:79:0b:
         d4:6c:f2:6b:46:7a:52:84:ec:f4:9d:d6:16:fa:99:2f:e0:e4:
         bf:87:bc:3a:38:b5:8e:77:3d:bb:b6:fd:91:8b:69:2d:fb:f9:
         0e:d7:00:3e:d9:09:ac:72:94:76:b7:cb:b9:12:70:0c:40:25:
         8c:9d:88:c6:70:cc:18:e8:e1:d2:4b:38:49:5d:ee:58:6f:9b:
         79:00:e0:5c:0f:48:c5:09:bb:f4:86:09:9b:d1:cd:10:ac:17:
         6c:52:47:89
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUMtUaucg1sGNGt9lRB1odBW8F06IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZBRUVGMkRFNkNGQUY0MDg0MjI2MDgxQUExODMxNDAw
RjMyODkzOTAeFw0yMjA3MTExMjU1MDBaFw0yMzA3MTAxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc3RTczMTM4NkZCMDYyQTIx
NkQ3M0NCMTAwRENGQkMyMEJDMjMwNjlERkFGQjA0NkUxMEJEMEQwRkU5NTBFOEI3
NzUyNTBCNDExNkE5QkM0N0YzNTRDNDk5QjFCRjQxNzU3MTYwMzUxN0YyRDc5MkRB
MjBCOEY2ODA1Q0VENkJGNDZFNUY4OUI4RjQ5QTA3ODExODc2RDUyMTU0OTNDNUEy
MTlCNkJCQzg1QzI3NUU1MjBGNEJGNjE5NjIwMThEQ0NEMzA4RDFDREEyRkNFN0Y1
MzBBMEYxMTZCNEFEOUJFMTRDNzNERTFDNDQwMzUyQzg5QzEzMkE3MDFEN0MxRDE2
MUU0RUI1OTJEQjgwMEUwRDYxNDgzQjI3RkEwRTE0MTUyOENENjYyQkE2REFDNjlE
NTNFNTY4RUI1NkQ5NUEzQzRGM0M1NzQ0RUU3NjJCNzYzQjIyN0ExRDFFMTJBQ0JG
OUZBNkU1NjFGQzE3NTNCRUM4NUQwREM4OTM1OEQ0MkRENDM2NEUwMTVGMjUwRTYz
RDQ0ODIzNUU3QzkxRjU1MDJGMjQ3MjIyQzE2N0FFNjRCMENBMjFFMzEyMzU5NDlB
REE4NjgxQTJEQzk0NUU3QjY0ODE2QzA0MTk5NUQ5MDQ1N0RFNkY3MjBEQUFEOTMx
NUM2OTFDMDI0RTkxNzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp35zE4b7BiohbXPLEA3PvCC8Iwad+vsEbhC9DQ/pUOi3dSULQRap
vEfzVMSZsb9BdXFgNRfy15LaILj2gFzta/RuX4m49JoHgRh21SFUk8WiGba7yFwn
XlIPS/YZYgGNzNMI0c2i/Of1MKDxFrStm+FMc94cRANSyJwTKnAdfB0WHk61ktuA
Dg1hSDsn+g4UFSjNZium2sadU+Vo61bZWjxPPFdE7nYrdjsieh0eEqy/n6blYfwX
U77IXQ3Ik1jULdQ2TgFfJQ5j1EgjXnyR9VAvJHIiwWeuZLDKIeMSNZSa2oaBotyU
XntkgWwEGZXZBFfeb3INqtkxXGkcAk6RcwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCiZlHKzfKcMwaopA3TyIHLgsgf0MB8GA1UdIwQYMBaAFOau7y3mz69AhCJggaoY
MUAPMok5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzN4M0ZvM243WjFHb2lG
Y0YyWjJuVW1reUJEQmlLS3pHZ0dTb3VYZ2ViaFNOLzAvRTZBRUVGMkRFNkNGQUY0
MDg0MjI2MDgxQUExODMxNDAwRjMyODkzOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FNkFFRUYyREU2Q0ZBRjQwODQyMjYwODFBQTE4MzE0MDBGMzI4
OTM5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zeDNGbzNuN1oxR29pRmNGMloy
blVta3lCREJpS0t6R2dHU291WGdlYmhTTi8wLzM0MzUyZTMxMzczMDJlMzIzMzM4
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4MzEzODMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LaruMA0GCSqGSIb3DQEBCwUAA4IBAQA2zyBWR8RlGfY4rnT1VXx7GoZi+BVpOB2L
0b4yqB1FPt+++ZyNGcVrIep+cO5jA2gfnMtcguLWab3ke/l6VlFkgIF1XGO+d6jC
d5k1kWbk3uV8R92Tt8qu2Q1Thcy14Yx3TEpInnx8aUKYfkSs+GrGbw7DzmKKh74z
fI4NwSD94D5uFGJuqwD13A0yJ0IcZCIp6RHG24EVAQN8aRq6eDcBeQvUbPJrRnpS
hOz0ndYW+pkv4OS/h7w6OLWOdz27tv2Ri2kt+/kO1wA+2QmscpR2t8u5EnAMQCWM
nYjGcMwY6OHSSzhJXe5Yb5t5AOBcD0jFCbv0hgmb0c0QrBdsUkeJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org