Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/34352e3139302e3131362e302f32322d3332203d3e20323634323238.roa
File:                     34352e3139302e3131362e302f32322d3332203d3e20323634323238.roa (raw, json)
Hash identifier:          VRnAdOdBugf7wZxGarV2fBlMAkaf6vDMRGa+O5z+D6E=
Subject key identifier:   B2:5C:03:16:01:05:48:1E:B0:04:68:9F:6A:89:87:CF:A9:96:4A:43
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       1833D285264981C30E0DFD81F3EF497C8096D225
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/34352e3139302e3131362e302f32322d3332203d3e20323634323238.roa
Signing time:             Mon 27 Mar 2023 12:18:31 +0000
ROA not before:           Mon 27 Mar 2023 12:13:31 +0000
ROA not after:            Mon 25 Mar 2024 12:18:31 +0000
asID:                     264228
IP address blocks:        45.190.116.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:33:d2:85:26:49:81:c3:0e:0d:fd:81:f3:ef:49:7c:80:96:d2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 27 12:13:31 2023 GMT
            Not After : Mar 25 12:18:31 2024 GMT
        Subject: CN=B25C03160105481EB004689F6A8987CFA9964A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:5e:59:a1:5d:dd:d4:dc:fd:82:16:94:e1:
                    29:41:f2:8b:f7:24:7e:ac:4c:a3:62:b9:21:59:b1:
                    ea:01:00:11:ef:89:a9:cf:6b:83:fc:7b:c1:a0:f8:
                    3d:26:c7:10:06:e7:8c:a6:15:2a:6d:08:6f:bc:63:
                    2d:f7:10:22:a8:c0:09:f3:3d:9b:cc:a6:29:33:bf:
                    86:03:34:5f:9c:63:3f:96:a6:87:57:68:b0:52:3b:
                    5c:b3:46:5c:3f:e3:ba:c7:94:9e:72:68:64:42:e6:
                    31:01:0c:dd:70:8f:43:48:4c:80:24:a8:f4:98:2b:
                    0d:60:f4:cc:07:87:4c:a5:4e:c0:cd:e9:ec:3a:bc:
                    65:b2:2c:42:09:0a:d1:cc:60:f4:87:ab:b8:54:ec:
                    63:6a:32:59:07:1e:13:d0:0a:ab:4b:96:16:70:4f:
                    06:7d:71:86:9b:41:1c:9d:c7:5e:e5:2c:09:a3:f3:
                    54:c6:d2:4c:3a:5f:d0:70:69:90:f3:8a:32:c5:d7:
                    fe:11:9f:c3:62:19:46:5a:c4:f7:5e:f4:75:74:f7:
                    34:6b:7e:96:7a:c0:20:8c:a1:86:fb:86:78:f1:fa:
                    90:bf:b7:87:60:f7:8a:d8:fe:97:41:75:82:3e:d0:
                    ca:0c:4a:b9:ea:d4:31:fd:82:ab:89:2d:a1:ab:15:
                    e6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5C:03:16:01:05:48:1E:B0:04:68:9F:6A:89:87:CF:A9:96:4A:43
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/34352e3139302e3131362e302f32322d3332203d3e20323634323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:47:1a:78:10:27:74:46:20:49:73:5f:94:af:32:8d:d7:
         1a:c6:80:a0:80:a3:ef:6c:04:a4:db:fb:5f:aa:c2:ee:18:f5:
         cd:c2:c8:f5:da:18:73:7d:04:7e:d1:e1:47:af:98:d0:5a:c4:
         3a:06:fc:66:bf:a5:65:1e:f2:1a:c0:44:f9:ed:90:af:9e:99:
         82:05:ca:8e:0c:09:94:a2:44:b5:57:1d:9e:df:5f:f4:81:71:
         57:5b:38:16:49:1d:90:39:40:e8:39:7e:9d:9e:22:8d:b9:f6:
         c4:d4:a2:c2:59:1e:be:da:79:d2:21:8a:4f:04:27:f1:4a:c2:
         76:40:ef:3a:6c:af:77:27:ad:33:75:21:18:ee:bd:dc:18:6e:
         20:0b:5f:93:39:62:af:c5:cf:7a:88:39:e1:9b:a0:9c:c8:74:
         70:4f:a6:e0:c5:fd:7b:fa:99:39:1c:df:ea:1e:05:3c:1d:1f:
         04:1e:c1:ae:1b:48:fc:25:57:e8:8a:fd:a4:fb:2e:33:4b:b7:
         22:c8:12:99:3d:6e:4e:52:05:4a:62:aa:1e:98:86:b4:c2:72:
         fa:91:0e:0e:6e:ea:b4:0b:73:56:19:be:98:69:bf:b6:be:71:
         58:ea:95:bf:46:5e:7e:4d:52:fb:3f:1a:bb:f5:81:94:10:7a:
         18:05:8b:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGDPShSZJgcMODf2B8+9JfICW0iUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGRUU3Q0YzOUEzMTZBOTBGQkE1OTAyNTUyMjBDQkNF
QjVCQkVBQTAeFw0yMzAzMjcxMjEzMzFaFw0yNDAzMjUxMjE4MzFaMDMxMTAvBgNV
BAMTKEIyNUMwMzE2MDEwNTQ4MUVCMDA0Njg5RjZBODk4N0NGQTk5NjRBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnP15ZoV3d1Nz9ghaU4SlB8ov3
JH6sTKNiuSFZseoBABHvianPa4P8e8Gg+D0mxxAG54ymFSptCG+8Yy33ECKowAnz
PZvMpikzv4YDNF+cYz+WpodXaLBSO1yzRlw/47rHlJ5yaGRC5jEBDN1wj0NITIAk
qPSYKw1g9MwHh0ylTsDN6ew6vGWyLEIJCtHMYPSHq7hU7GNqMlkHHhPQCqtLlhZw
TwZ9cYabQRydx17lLAmj81TG0kw6X9BwaZDzijLF1/4Rn8NiGUZaxPde9HV09zRr
fpZ6wCCMoYb7hnjx+pC/t4dg94rY/pdBdYI+0MoMSrnq1DH9gquJLaGrFeaNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUslwDFgEFSB6wBGifaomHz6mWSkMwHwYDVR0j
BBgwFoAUPP7nzzmjFqkPulkCVSIMvOtbvqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMS8zQ0ZFRTdDRjM5QTMxNkE5MEZCQTU5MDI1NTIyMENCQ0VCNUJCRUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRkVFN0NGMzlBMzE2QTkw
RkJBNTkwMjU1MjIwQ0JDRUI1QkJFQUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzEv
MzQzNTJlMzEzOTMwMmUzMTMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMjMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvnQwDQYJKoZIhvcNAQELBQADggEBAA/nRxp4
ECd0RiBJc1+UrzKN1xrGgKCAo+9sBKTb+1+qwu4Y9c3CyPXaGHN9BH7R4UevmNBa
xDoG/Ga/pWUe8hrARPntkK+emYIFyo4MCZSiRLVXHZ7fX/SBcVdbOBZJHZA5QOg5
fp2eIo259sTUosJZHr7aedIhik8EJ/FKwnZA7zpsr3cnrTN1IRjuvdwYbiALX5M5
Yq/Fz3qIOeGboJzIdHBPpuDF/Xv6mTkc3+oeBTwdHwQewa4bSPwlV+iK/aT7LjNL
tyLIEpk9bk5SBUpiqh6YhrTCcvqRDg5u6rQLc1YZvphpv7a+cVjqlb9GXn5NUvs/
Grv1gZQQehgFi8Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org