Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32362e302f32332d3233203d3e20323637333031.roa
File:                     34352e3233322e32362e302f32332d3233203d3e20323637333031.roa (raw, json)
Hash identifier:          c8SLVAL3U12jWf6puKiTd0x+S40sl1B4OTXu1dcLd7U=
Subject key identifier:   BB:77:F1:6F:CF:62:05:A5:E3:31:6A:D3:AF:7C:53:8B:D5:2C:20:E7
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       6B7247FAE11852EC47344602930B31B238B72941
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32362e302f32332d3233203d3e20323637333031.roa
Signing time:             Mon 15 May 2023 21:02:22 +0000
ROA not before:           Mon 15 May 2023 20:57:22 +0000
ROA not after:            Mon 13 May 2024 21:02:22 +0000
asID:                     267301
IP address blocks:        45.232.26.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:72:47:fa:e1:18:52:ec:47:34:46:02:93:0b:31:b2:38:b7:29:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 15 20:57:22 2023 GMT
            Not After : May 13 21:02:22 2024 GMT
        Subject: CN=BB77F16FCF6205A5E3316AD3AF7C538BD52C20E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:94:05:01:67:76:f9:80:37:3d:f4:32:34:
                    ac:33:40:0b:c7:dc:31:de:82:0c:24:e7:fe:4d:57:
                    f7:e6:17:3e:db:cd:9e:50:c5:1a:63:fc:a0:57:00:
                    7e:a5:c2:fd:8a:db:0b:1a:d1:01:b8:38:8b:69:e7:
                    95:86:21:51:14:a2:6e:3b:f8:5e:31:f4:bd:61:85:
                    74:89:c1:58:2c:b0:5f:d0:7c:77:cc:b5:7c:fd:5f:
                    4f:c1:97:f3:ac:c1:83:b5:d9:e5:15:96:95:e0:fb:
                    ea:5b:34:ff:71:23:5e:0a:23:34:c9:cc:d0:96:d3:
                    a2:33:23:e3:e1:d7:85:44:cd:b1:bd:1c:3b:b3:ce:
                    59:cd:3d:1b:ed:f1:a4:3c:e7:be:f5:95:27:9e:9c:
                    cc:a3:80:66:50:43:3f:c7:bb:4b:d4:91:11:dc:b3:
                    c6:b4:92:97:21:81:e7:95:99:ae:1e:c9:9c:38:75:
                    c0:f1:a9:39:2b:09:45:3d:60:a5:7c:ef:cd:30:53:
                    fa:23:1a:47:ba:72:9f:cd:57:1b:10:c8:bd:c0:e9:
                    08:c7:99:c7:62:5a:a0:cd:6a:3c:a7:fd:c1:dc:0b:
                    83:dc:6a:6d:8a:16:a6:9a:fe:db:b5:f0:fc:f5:04:
                    54:33:99:e0:0a:03:6e:76:81:77:57:50:b6:cf:82:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:F1:6F:CF:62:05:A5:E3:31:6A:D3:AF:7C:53:8B:D5:2C:20:E7
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32362e302f32332d3233203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:ac:1d:d4:dc:1c:7b:f9:67:37:65:01:f1:77:35:3f:16:
         41:4d:21:21:28:5c:5e:c0:01:96:4f:e7:57:cc:80:cc:38:cf:
         58:87:42:1f:eb:b5:fb:3a:94:bd:2b:bc:5f:e7:81:fc:36:6d:
         9b:37:c6:56:17:7f:e6:3d:57:fb:77:18:9f:41:6d:a5:81:71:
         a8:e8:50:39:bc:db:4c:d8:a1:0f:f1:8f:5f:4a:44:c6:76:f7:
         53:c9:db:e9:a8:a8:30:77:f5:e5:6d:68:8b:41:d9:7b:8b:64:
         c3:d0:a6:5b:9e:1c:c5:2b:66:37:dd:cc:c5:4c:25:64:aa:52:
         50:bc:e8:91:bd:fa:70:e0:5c:d3:d4:90:1b:ce:37:9a:e1:41:
         5f:77:37:ac:6c:03:57:d2:c2:6a:fe:9a:d0:53:cc:eb:bf:dc:
         f7:a0:3f:15:4b:54:87:cd:45:96:7b:dc:36:b1:f7:21:63:91:
         03:01:42:8f:1d:82:6d:03:1b:7d:51:a4:5c:d3:6a:b3:61:44:
         fb:cb:4a:fd:a3:0d:a3:fa:83:73:da:e6:53:66:f5:f8:85:ff:
         d4:7e:d8:ee:ff:c2:6b:73:92:e1:09:4d:89:b9:55:90:34:28:
         48:ba:d5:be:2e:20:f9:6f:0b:20:5c:a7:c5:f8:dc:a2:8d:28:
         7c:47:f4:48
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa3JH+uEYUuxHNEYCkwsxsji3KUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0MTAxQTMzRDk2MEUyRTQ2OEVGRThEMkUyRTcwMUU4
QTA3MzI2MTAeFw0yMzA1MTUyMDU3MjJaFw0yNDA1MTMyMTAyMjJaMDMxMTAvBgNV
BAMTKEJCNzdGMTZGQ0Y2MjA1QTVFMzMxNkFEM0FGN0M1MzhCRDUyQzIwRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RpQFAWd2+YA3PfQyNKwzQAvH
3DHeggwk5/5NV/fmFz7bzZ5QxRpj/KBXAH6lwv2K2wsa0QG4OItp55WGIVEUom47
+F4x9L1hhXSJwVgssF/QfHfMtXz9X0/Bl/OswYO12eUVlpXg++pbNP9xI14KIzTJ
zNCW06IzI+Ph14VEzbG9HDuzzlnNPRvt8aQ85771lSeenMyjgGZQQz/Hu0vUkRHc
s8a0kpchgeeVma4eyZw4dcDxqTkrCUU9YKV8780wU/ojGke6cp/NVxsQyL3A6QjH
mcdiWqDNajyn/cHcC4Pcam2KFqaa/tu18Pz1BFQzmeAKA252gXdXULbPgtBbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUu3fxb89iBaXjMWrTr3xTi9UsIOcwHwYDVR0j
BBgwFoAUGUEBoz2WDi5Gjv6NLi5wHooHMmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRhZnFGWDl6RDljRHV5dHRETFNydjUyTXZTeXBEUU44eEpMVHdoSlRV
cm8vMC8xOTQxMDFBMzNEOTYwRTJFNDY4RUZFOEQyRTJFNzAxRThBMDczMjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE5NDEwMUEzM0Q5NjBFMkU0
NjhFRkU4RDJFMkU3MDFFOEEwNzMyNjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkYWZxRlg5ekQ5Y0R1eXR0RExTcnY1Mk12U3lwRFFOOHhKTFR3aEpUVXJvLzAv
MzQzNTJlMzIzMzMyMmUzMjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLegaMA0GCSqGSIb3DQEBCwUAA4IBAQBKPawd1Nwc
e/lnN2UB8Xc1PxZBTSEhKFxewAGWT+dXzIDMOM9Yh0If67X7OpS9K7xf54H8Nm2b
N8ZWF3/mPVf7dxifQW2lgXGo6FA5vNtM2KEP8Y9fSkTGdvdTydvpqKgwd/XlbWiL
Qdl7i2TD0KZbnhzFK2Y33czFTCVkqlJQvOiRvfpw4FzT1JAbzjea4UFfdzesbANX
0sJq/prQU8zrv9z3oD8VS1SHzUWWe9w2sfchY5EDAUKPHYJtAxt9UaRc02qzYUT7
y0r9ow2j+oNz2uZTZvX4hf/Uftju/8Jrc5LhCU2JuVWQNChIutW+LiD5bwsgXKfF
+NyijSh8R/RI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org