Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32322d3234203d3e20323637363735.roa
File:                     34352e3232342e3233362e302f32322d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          icpujiuCkKLOHCfDinRV68lp0XdpNf0JffGBBBdAKcg=
Subject key identifier:   F2:B0:2E:41:96:36:ED:63:53:A3:CD:DE:08:27:79:80:DF:53:E7:13
Certificate issuer:       /CN=12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A
Certificate serial:       40D9CF50A456996789168588E62E4BC4C09C1A57
Authority key identifier: 12:EB:79:B2:68:95:FE:A6:8C:EF:3B:F4:D6:45:4B:52:AC:2E:2E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32322d3234203d3e20323637363735.roa
Signing time:             Wed 19 Jul 2023 07:26:20 +0000
ROA not before:           Wed 19 Jul 2023 07:21:20 +0000
ROA not after:            Wed 17 Jul 2024 07:26:20 +0000
asID:                     267675
IP address blocks:        45.224.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d9:cf:50:a4:56:99:67:89:16:85:88:e6:2e:4b:c4:c0:9c:1a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A
        Validity
            Not Before: Jul 19 07:21:20 2023 GMT
            Not After : Jul 17 07:26:20 2024 GMT
        Subject: CN=F2B02E419636ED6353A3CDDE08277980DF53E713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:4c:71:3c:01:6b:1e:70:44:e8:31:1e:db:
                    9f:34:9a:9f:73:fe:18:b3:2a:e5:3b:ab:39:e4:72:
                    1e:eb:04:5a:df:9a:2d:e7:ca:0f:7c:a5:ac:c8:40:
                    5f:77:aa:ea:1f:fd:ac:ed:e5:a1:48:d9:57:45:8a:
                    6b:e0:03:2f:c2:b7:6a:1d:a2:e0:a5:6f:75:4d:d3:
                    ba:cb:27:89:38:fe:16:2d:79:68:cf:47:d0:d0:af:
                    3d:7e:49:ee:ab:f3:7a:2b:26:04:36:99:38:9a:d4:
                    09:59:73:55:de:fe:d3:e2:0e:a1:e0:a5:03:97:44:
                    af:ee:37:f3:d8:e3:a3:5c:76:58:f1:c1:40:50:78:
                    57:7b:fd:f2:07:fc:11:b4:a3:dc:d5:8f:f0:e3:e7:
                    0a:ce:b2:fc:0c:bf:fb:b4:2e:79:c8:e6:0c:f1:51:
                    70:80:fa:bb:8d:6a:2e:8e:bf:ce:15:95:7e:65:cb:
                    88:12:a7:7d:f7:22:ba:5e:a0:67:4a:a6:c5:66:ae:
                    c7:77:90:ef:3d:0e:d8:79:82:c6:af:10:53:a3:f8:
                    f8:30:75:5d:47:a2:b1:5b:93:6d:ec:62:a7:38:58:
                    a8:68:42:68:de:59:52:87:3b:88:32:b5:7e:84:9a:
                    5b:db:d5:ae:ca:24:7a:19:2d:d7:98:08:8d:bd:a7:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B0:2E:41:96:36:ED:63:53:A3:CD:DE:08:27:79:80:DF:53:E7:13
            X509v3 Authority Key Identifier:
                keyid:12:EB:79:B2:68:95:FE:A6:8C:EF:3B:F4:D6:45:4B:52:AC:2E:2E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32322d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:e1:04:eb:28:71:e6:78:0e:4f:bf:d9:9b:68:d7:ea:d4:f8:
         dd:c5:17:ba:7c:2f:63:d5:64:1b:85:c3:11:1b:04:2b:43:54:
         43:2c:96:0d:45:95:86:a7:c6:37:5d:77:f8:86:0e:36:6b:1d:
         27:41:36:a3:dd:22:f9:a2:f3:ca:78:3a:9b:41:44:0c:57:8b:
         db:8f:ab:38:39:97:7e:5f:c5:29:34:67:8f:2c:41:02:53:a7:
         bc:93:d8:85:fb:f0:5f:c3:fb:13:b6:21:0e:ad:13:d7:ea:88:
         1d:26:e6:9e:99:08:66:e5:9a:92:18:13:0d:93:0b:d4:73:be:
         38:b2:d5:e9:ba:15:22:47:4b:bd:5f:80:b8:3e:c0:17:aa:3d:
         21:62:c7:00:9c:a6:40:64:0d:00:d9:89:eb:33:61:e5:f5:fd:
         4c:b4:71:89:9a:2f:4d:a8:ec:47:b7:35:b1:cf:98:4f:74:5f:
         58:e0:00:00:ec:b9:f5:9e:ef:c3:32:85:ad:9b:af:8f:94:d2:
         cb:a9:fe:d3:56:92:ce:af:8c:6b:4a:fd:a2:d6:3e:77:0f:30:
         1c:bc:22:0c:03:1f:3f:45:45:d5:e8:77:6b:98:1a:5b:da:40:
         5a:34:79:b2:e9:f0:a4:98:d8:f7:0b:dc:7e:32:4e:4e:23:c5:
         e9:d1:8f:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQNnPUKRWmWeJFoWI5i5LxMCcGlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJFQjc5QjI2ODk1RkVBNjhDRUYzQkY0RDY0NTRCNTJB
QzJFMkUwQTAeFw0yMzA3MTkwNzIxMjBaFw0yNDA3MTcwNzI2MjBaMDMxMTAvBgNV
BAMTKEYyQjAyRTQxOTYzNkVENjM1M0EzQ0RERTA4Mjc3OTgwREY1M0U3MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFp0xxPAFrHnBE6DEe2580mp9z
/hizKuU7qznkch7rBFrfmi3nyg98pazIQF93quof/azt5aFI2VdFimvgAy/Ct2od
ouClb3VN07rLJ4k4/hYteWjPR9DQrz1+Se6r83orJgQ2mTia1AlZc1Xe/tPiDqHg
pQOXRK/uN/PY46NcdljxwUBQeFd7/fIH/BG0o9zVj/Dj5wrOsvwMv/u0LnnI5gzx
UXCA+ruNai6Ov84VlX5ly4gSp333IrpeoGdKpsVmrsd3kO89Dth5gsavEFOj+Pgw
dV1HorFbk23sYqc4WKhoQmjeWVKHO4gytX6Emlvb1a7KJHoZLdeYCI29p0KnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8rAuQZY27WNTo83eCCd5gN9T5xMwHwYDVR0j
BBgwFoAUEut5smiV/qaM7zv01kVLUqwuLgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpaTmMxa1gxaUZNMjFraUQ4NmR3bjRGU3gxZFdFNFB5MW1US2VOM1Q0
Y2EvMC8xMkVCNzlCMjY4OTVGRUE2OENFRjNCRjRENjQ1NEI1MkFDMkUyRTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyRUI3OUIyNjg5NUZFQTY4
Q0VGM0JGNEQ2NDU0QjUyQUMyRTJFMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaWk5jMWtYMWlGTTIxa2lEODZkd240RlN4MWRXRTRQeTFtVEtlTjNUNGNhLzAv
MzQzNTJlMzIzMjM0MmUzMjMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4OwwDQYJKoZIhvcNAQELBQADggEBACbhBOso
ceZ4Dk+/2Zto1+rU+N3FF7p8L2PVZBuFwxEbBCtDVEMslg1FlYanxjddd/iGDjZr
HSdBNqPdIvmi88p4OptBRAxXi9uPqzg5l35fxSk0Z48sQQJTp7yT2IX78F/D+xO2
IQ6tE9fqiB0m5p6ZCGblmpIYEw2TC9Rzvjiy1em6FSJHS71fgLg+wBeqPSFixwCc
pkBkDQDZieszYeX1/Uy0cYmaL02o7Ee3NbHPmE90X1jgAADsufWe78Myha2br4+U
0sup/tNWks6vjGtK/aLWPncPMBy8IgwDHz9FRdXod2uYGlvaQFo0ebLp8KSY2PcL
3H4yTk4jxenRj+I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org