Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32322d3232203d3e20323638343038.roa
File:                     34352e3136302e3132342e302f32322d3232203d3e20323638343038.roa (raw, json)
Hash identifier:          XNmLFk+3qWRkerf0GZKGCG/EmVzMCL04qbHrLdrQE68=
Subject key identifier:   F3:CB:83:EA:3A:5B:98:16:04:9D:1B:0E:1D:CC:88:27:3A:84:92:65
Certificate issuer:       /CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
Certificate serial:       6730B56654EC30365D6B338460C26FE224A66A8B
Authority key identifier: BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32322d3232203d3e20323638343038.roa
Signing time:             Mon 08 Jan 2024 15:07:54 +0000
ROA not before:           Mon 08 Jan 2024 15:02:54 +0000
ROA not after:            Mon 06 Jan 2025 15:07:54 +0000
asID:                     268408
IP address blocks:        45.160.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:30:b5:66:54:ec:30:36:5d:6b:33:84:60:c2:6f:e2:24:a6:6a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
        Validity
            Not Before: Jan  8 15:02:54 2024 GMT
            Not After : Jan  6 15:07:54 2025 GMT
        Subject: CN=F3CB83EA3A5B9816049D1B0E1DCC88273A849265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e9:a9:e3:80:60:9b:35:38:22:2d:f3:d6:52:
                    97:64:5e:49:48:f0:a9:f0:88:28:c8:11:45:bf:d7:
                    ed:22:f7:c1:4e:2d:8f:06:2a:3c:b0:6a:90:58:4f:
                    97:1b:b6:78:b1:2d:f0:f3:92:c5:8a:05:f3:9b:a1:
                    99:5f:c1:1e:11:c0:8b:34:f2:da:56:7c:3b:9f:b6:
                    1d:f4:03:68:f1:ce:45:1d:9a:99:4e:d5:5d:3e:62:
                    15:e8:56:bd:75:39:9a:99:67:35:4e:aa:b4:8f:f5:
                    f9:b5:83:7e:7d:d3:0a:8c:09:b4:93:66:d1:4f:e4:
                    a0:68:ef:41:c6:f4:18:6f:7b:ae:f3:71:7a:cc:c1:
                    1d:c4:68:80:82:fe:c6:6d:0a:eb:5d:0f:f8:24:07:
                    77:b7:86:3e:81:f1:92:5e:82:71:04:b4:09:6e:da:
                    0f:33:82:b3:fc:81:03:15:69:26:c5:1a:25:56:65:
                    6e:c5:98:c6:c5:ea:5a:6a:ee:b0:95:fd:5b:18:9c:
                    7d:f9:8c:c7:0e:39:ed:1b:f1:d6:b4:69:32:ea:de:
                    56:b3:67:b0:80:ec:c7:d2:68:9e:6e:02:71:79:29:
                    74:de:4b:10:94:64:ff:67:37:76:a8:62:b0:dd:c1:
                    5e:b3:ea:72:64:e6:d1:53:98:5c:d9:20:23:2c:35:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CB:83:EA:3A:5B:98:16:04:9D:1B:0E:1D:CC:88:27:3A:84:92:65
            X509v3 Authority Key Identifier:
                keyid:BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32322d3232203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:29:ad:97:92:34:23:a1:a4:d7:fc:e6:bf:99:1a:ef:f5:3b:
         3a:4a:dd:88:ac:42:51:59:bd:47:9a:f3:87:d8:1a:41:9d:b1:
         39:fa:5a:97:19:1a:47:73:04:ca:75:20:c6:87:f9:3c:39:78:
         13:2d:93:aa:da:22:2f:b9:6f:d5:97:18:08:ef:8a:79:f9:f6:
         27:bb:c4:bc:fa:5a:c4:5f:7c:2e:f4:f5:f7:32:5f:0b:e4:fa:
         d4:7a:27:46:48:a0:7f:6a:10:34:7e:32:7d:8b:23:7c:c5:fc:
         9f:6b:a6:91:6a:a4:ce:bc:53:2c:5f:95:da:05:30:0a:e2:b0:
         7b:0e:1c:4f:ae:47:9b:cd:a6:c9:83:5f:55:63:76:67:25:a0:
         70:9e:c1:06:bb:9e:e1:97:63:40:3e:16:75:dc:fb:13:53:27:
         ef:8d:23:23:b8:60:0f:ed:e8:24:a0:3b:9c:89:db:43:03:41:
         0a:02:05:e2:d5:15:a1:83:51:c3:87:bd:49:98:da:f3:dc:43:
         7a:bf:6c:7e:8a:5f:d9:4e:0a:d8:6a:d8:41:9d:68:3d:74:7a:
         e8:f9:63:53:90:ac:5c:4c:4f:62:60:19:38:cb:2a:b6:3c:fc:
         79:2f:c0:c7:72:37:9b:98:9b:dd:ec:8a:69:98:69:18:32:08:
         0b:9e:85:36
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZzC1ZlTsMDZdazOEYMJv4iSmaoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzNDU5N0I3QUJGNzZFRjIwRDIxNEQ0M0YyNUUyNTc5
RjU2MEU3ODAeFw0yNDAxMDgxNTAyNTRaFw0yNTAxMDYxNTA3NTRaMDMxMTAvBgNV
BAMTKEYzQ0I4M0VBM0E1Qjk4MTYwNDlEMUIwRTFEQ0M4ODI3M0E4NDkyNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq6anjgGCbNTgiLfPWUpdkXklI
8KnwiCjIEUW/1+0i98FOLY8GKjywapBYT5cbtnixLfDzksWKBfOboZlfwR4RwIs0
8tpWfDufth30A2jxzkUdmplO1V0+YhXoVr11OZqZZzVOqrSP9fm1g3590wqMCbST
ZtFP5KBo70HG9Bhve67zcXrMwR3EaICC/sZtCutdD/gkB3e3hj6B8ZJegnEEtAlu
2g8zgrP8gQMVaSbFGiVWZW7FmMbF6lpq7rCV/VsYnH35jMcOOe0b8da0aTLq3laz
Z7CA7MfSaJ5uAnF5KXTeSxCUZP9nN3aoYrDdwV6z6nJk5tFTmFzZICMsNTSXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU88uD6jpbmBYEnRsOHcyIJzqEkmUwHwYDVR0j
BBgwFoAUvjRZe3q/du8g0hTUPyXiV59WDngwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNld2t2NkJWSlVGelhIOWsyNVg1alczaWFYRHRaQVF4Z1V0dUd5RGlQ
UWsvMC9CRTM0NTk3QjdBQkY3NkVGMjBEMjE0RDQzRjI1RTI1NzlGNTYwRTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFMzQ1OTdCN0FCRjc2RUYy
MEQyMTRENDNGMjVFMjU3OUY1NjBFNzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZXdrdjZCVkpVRnpYSDlrMjVYNWpXM2lhWER0WkFReGdVdHVHeURpUFFrLzAv
MzQzNTJlMzEzNjMwMmUzMTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNDMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItoHwwDQYJKoZIhvcNAQELBQADggEBACIprZeS
NCOhpNf85r+ZGu/1OzpK3YisQlFZvUea84fYGkGdsTn6WpcZGkdzBMp1IMaH+Tw5
eBMtk6raIi+5b9WXGAjvinn59ie7xLz6WsRffC709fcyXwvk+tR6J0ZIoH9qEDR+
Mn2LI3zF/J9rppFqpM68UyxfldoFMArisHsOHE+uR5vNpsmDX1VjdmcloHCewQa7
nuGXY0A+FnXc+xNTJ++NIyO4YA/t6CSgO5yJ20MDQQoCBeLVFaGDUcOHvUmY2vPc
Q3q/bH6KX9lOCthq2EGdaD10euj5Y1OQrFxMT2JgGTjLKrY8/HkvwMdyN5uYm93s
immYaRgyCAuehTY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org