Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
File:                     34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (raw, json)
Hash identifier:          OPrsT5RLTfCZc4uO34I/7kLb6omSAZAi+IAJ350iWQ8=
Subject key identifier:   AF:0C:A3:96:E3:F8:D1:D7:45:23:88:0B:B0:17:F5:4F:C0:4D:B7:38
Certificate issuer:       /CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
Certificate serial:       70D5599CAD9AA0E98A24D51CCE0A54E6BE342E8D
Authority key identifier: 5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
Signing time:             Thu 10 Nov 2022 13:01:28 +0000
ROA not before:           Thu 10 Nov 2022 12:56:28 +0000
ROA not after:            Thu 09 Nov 2023 13:01:28 +0000
asID:                     269015
IP address blocks:        45.178.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d5:59:9c:ad:9a:a0:e9:8a:24:d5:1c:ce:0a:54:e6:be:34:2e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
        Validity
            Not Before: Nov 10 12:56:28 2022 GMT
            Not After : Nov  9 13:01:28 2023 GMT
        Subject: CN=AF0CA396E3F8D1D74523880BB017F54FC04DB738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:5f:13:c1:60:b7:08:5b:61:5f:46:95:13:
                    90:5e:8f:f4:de:63:95:e6:d6:3a:8a:a8:ec:8e:36:
                    c0:58:25:07:8f:9e:6d:02:2c:96:15:28:61:a5:2d:
                    09:8e:20:0b:8b:0c:13:60:dd:ad:be:18:86:93:24:
                    7f:cc:5f:43:04:3a:b0:ac:81:22:79:40:62:81:6d:
                    44:c8:92:8a:4f:35:f6:12:be:d7:9c:d8:1e:59:22:
                    ed:9d:05:98:9a:49:cc:80:30:f0:bb:63:c3:9e:1a:
                    8d:ad:dc:02:18:e9:48:8b:4f:33:a8:98:74:49:bf:
                    d6:4a:c3:f8:8f:8b:10:bc:91:68:aa:12:20:2f:87:
                    0f:ec:52:32:11:77:61:29:65:24:cf:2d:98:4e:1c:
                    8e:ab:d0:e4:68:d0:8f:71:1e:30:2c:6c:84:82:9e:
                    5c:ff:58:bd:e2:46:e4:e4:f6:33:46:17:16:33:ce:
                    45:b3:9f:01:c5:1b:ab:e3:6d:01:82:fe:75:9a:76:
                    ae:fb:95:78:a4:4c:96:5b:62:9a:47:b2:af:19:ee:
                    59:c3:d7:c3:e9:62:de:ef:af:7b:38:c4:a8:2d:ed:
                    21:fe:48:30:e8:f8:8c:6f:45:55:24:b6:6e:1e:04:
                    41:8a:0f:41:1c:a3:35:4c:4c:39:16:dd:f0:e0:2e:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0C:A3:96:E3:F8:D1:D7:45:23:88:0B:B0:17:F5:4F:C0:4D:B7:38
            X509v3 Authority Key Identifier:
                keyid:5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:62:6b:93:cf:7b:de:c8:bc:94:6f:a0:3c:cf:65:b1:83:0b:
         3c:0a:a3:c8:07:27:37:48:f1:8d:8e:d2:a0:06:9e:62:29:ba:
         27:bc:a7:59:c1:6c:dd:c6:74:85:6b:37:08:90:45:08:be:19:
         64:2b:dd:54:37:3c:4b:67:1c:85:60:0a:f2:bb:74:74:74:da:
         42:91:6c:c2:d1:04:71:32:bc:6f:71:e1:5f:43:4f:09:3d:bb:
         f7:d8:f6:99:b8:dd:9a:f3:4e:7d:04:34:6f:fd:f4:8c:b2:a2:
         ff:8d:33:0e:07:5c:1f:4d:3d:e5:79:ff:db:94:7b:22:d3:01:
         2a:98:18:8b:3b:04:c6:7e:98:32:7c:91:81:bc:db:6d:11:34:
         83:0d:7c:e6:0b:94:40:ed:af:03:68:c7:2e:e2:22:a1:bf:31:
         28:b8:a0:cc:71:1b:3a:99:6c:7c:aa:4c:57:42:b7:2e:a2:de:
         b6:67:6d:ec:5f:30:6b:79:79:eb:cb:31:df:9c:db:6f:5a:62:
         23:13:f8:68:4d:e2:c5:a5:0b:3f:ba:ac:c4:b5:bb:b2:08:58:
         f9:f1:cc:96:c2:1f:39:be:04:a1:c9:02:9f:66:ee:25:58:31:
         9e:68:af:95:7c:68:b7:a2:5c:d7:5a:40:de:b4:bf:60:f0:bb:
         d5:a1:37:61
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcNVZnK2aoOmKJNUczgpU5r40Lo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURENjdFREIwQ0JBNkMyMjJGMTkzRDI0NDMwMUNFREEw
MzVEQjc2NTAeFw0yMjExMTAxMjU2MjhaFw0yMzExMDkxMzAxMjhaMDMxMTAvBgNV
BAMTKEFGMENBMzk2RTNGOEQxRDc0NTIzODgwQkIwMTdGNTRGQzA0REI3MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocV8TwWC3CFthX0aVE5Bej/Te
Y5Xm1jqKqOyONsBYJQePnm0CLJYVKGGlLQmOIAuLDBNg3a2+GIaTJH/MX0MEOrCs
gSJ5QGKBbUTIkopPNfYSvtec2B5ZIu2dBZiaScyAMPC7Y8OeGo2t3AIY6UiLTzOo
mHRJv9ZKw/iPixC8kWiqEiAvhw/sUjIRd2EpZSTPLZhOHI6r0ORo0I9xHjAsbISC
nlz/WL3iRuTk9jNGFxYzzkWznwHFG6vjbQGC/nWadq77lXikTJZbYppHsq8Z7lnD
18PpYt7vr3s4xKgt7SH+SDDo+IxvRVUktm4eBEGKD0EcozVMTDkW3fDgLvfdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrwyjluP40ddFI4gLsBf1T8BNtzgwHwYDVR0j
BBgwFoAUXdZ+2wy6bCIvGT0kQwHO2gNdt2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMC81REQ2N0VEQjBDQkE2QzIyMkYxOTNEMjQ0MzAxQ0VEQTAzNURCNzY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVERDY3RURCMENCQTZDMjIy
RjE5M0QyNDQzMDFDRURBMDM1REI3NjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzAv
MzQzNTJlMzEzNzM4MmUzMjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbIWMA0GCSqGSIb3DQEBCwUAA4IBAQBFYmuTz3ve
yLyUb6A8z2Wxgws8CqPIByc3SPGNjtKgBp5iKbonvKdZwWzdxnSFazcIkEUIvhlk
K91UNzxLZxyFYAryu3R0dNpCkWzC0QRxMrxvceFfQ08JPbv32PaZuN2a8059BDRv
/fSMsqL/jTMOB1wfTT3lef/blHsi0wEqmBiLOwTGfpgyfJGBvNttETSDDXzmC5RA
7a8DaMcu4iKhvzEouKDMcRs6mWx8qkxXQrcuot62Z23sXzBreXnryzHfnNtvWmIj
E/hoTeLFpQs/uqzEtbuyCFj58cyWwh85vgShyQKfZu4lWDGeaK+VfGi3olzXWkDe
tL9g8LvVoTdh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org