Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3232203d3e20323639303536.roa
File:                     34352e3137382e3230342e302f32322d3232203d3e20323639303536.roa (raw, json)
Hash identifier:          kXQruKWVv79o4Rm9FwhT3D6YPLHFtkq0bBHALWX0QVo=
Subject key identifier:   08:B9:4E:AE:DD:58:11:1C:0D:27:C0:DA:FC:D3:5A:21:8A:79:40:76
Certificate issuer:       /CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
Certificate serial:       70DDC5BAAB33627C13B5677533EAA0D83F9ACA40
Authority key identifier: 44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3232203d3e20323639303536.roa
Signing time:             Thu 10 Nov 2022 18:40:22 +0000
ROA not before:           Thu 10 Nov 2022 18:35:22 +0000
ROA not after:            Thu 09 Nov 2023 18:40:22 +0000
asID:                     269056
IP address blocks:        45.178.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:dd:c5:ba:ab:33:62:7c:13:b5:67:75:33:ea:a0:d8:3f:9a:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
        Validity
            Not Before: Nov 10 18:35:22 2022 GMT
            Not After : Nov  9 18:40:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:4a:12:b0:65:a1:03:1e:8b:e3:44:fe:60:
                    2e:98:6e:c2:a7:d8:2f:23:4d:e0:68:ba:63:92:67:
                    78:53:01:30:3e:ee:e4:ab:70:a8:4d:2e:60:be:65:
                    46:72:95:a4:3e:ff:33:af:4d:70:44:f0:3f:e6:69:
                    91:3b:6c:0a:0a:11:bb:df:17:ba:8f:b1:55:d3:df:
                    8f:f7:fe:c6:28:c3:40:c4:2e:3f:19:9a:94:ba:f9:
                    51:76:f1:46:de:14:bf:de:2f:9c:e4:53:82:cc:46:
                    77:1b:0d:55:9f:1b:24:b2:74:09:d8:9c:24:14:02:
                    c2:f7:12:c3:09:32:2a:17:a0:f6:4c:6f:c8:6b:aa:
                    c8:e2:76:e8:19:8b:57:d5:9a:c9:e5:49:0c:3d:c5:
                    4a:f1:27:6a:ea:ad:11:3c:67:d5:e3:39:44:4d:e8:
                    73:55:e7:cc:c8:41:0a:37:f6:c0:69:33:68:2b:ee:
                    46:6a:c0:4a:5f:6b:c4:59:88:7f:6e:08:24:20:c1:
                    eb:ff:45:61:38:ee:93:ff:b4:fb:61:4e:ab:aa:83:
                    03:c6:8c:df:1b:b7:dc:f3:85:a9:32:00:5e:21:54:
                    b1:7a:3c:a9:9b:97:ac:5c:8e:e9:d8:69:5a:9d:c2:
                    4b:2b:25:d8:03:b7:3c:d0:9d:8e:d4:13:a6:c5:de:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B9:4E:AE:DD:58:11:1C:0D:27:C0:DA:FC:D3:5A:21:8A:79:40:76
            X509v3 Authority Key Identifier:
                keyid:44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3232203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:96:23:c0:b6:5c:06:37:33:4a:8a:5f:17:46:94:17:a7:13:
         01:2a:94:4b:95:ff:95:28:d8:05:e2:f1:20:4a:0a:da:aa:35:
         9e:37:5e:92:54:46:e3:a8:ba:a5:ee:02:be:3c:71:ec:d3:3a:
         83:d1:4c:64:9c:6f:1f:de:f7:c3:e9:c2:a7:4c:35:7d:0e:3a:
         6c:46:ef:af:4e:5b:0c:ee:72:9f:a2:23:90:c8:73:03:3a:6c:
         0c:f5:2a:02:ae:86:38:5b:16:93:be:cd:e4:97:64:77:45:7f:
         b5:c5:92:6c:63:2e:3e:25:c4:37:c4:41:8c:bb:1e:80:f1:7f:
         2c:21:cf:19:53:68:c4:ac:e7:9a:57:e7:fb:94:2b:02:ef:10:
         2b:83:1a:33:b6:d2:35:71:0f:f7:e9:85:7e:5b:7a:2d:3a:5c:
         c6:76:72:ac:8a:2c:d5:68:92:c2:b6:7e:8f:c2:e9:d5:36:be:
         cf:33:b2:fa:99:80:ef:e5:b0:c7:3f:db:55:1f:94:d6:8e:67:
         31:84:59:6a:75:78:5a:15:05:97:67:93:2c:84:b1:38:90:fc:
         ac:a0:79:df:ac:e0:26:61:f9:54:23:1f:79:3e:a1:b4:49:b5:
         ce:b9:2a:63:5d:44:8f:65:8a:07:3f:5e:a6:fa:32:2a:ef:d5:
         51:3d:f8:0e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUcN3FuqszYnwTtWd1M+qg2D+aykAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ1RTBENzFCODQzMDBCRDMzQjk2RTk1MDg3OUFBN0E2
Q0VCQTcxNDAeFw0yMjExMTAxODM1MjJaFw0yMzExMDkxODQwMjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUUyQjRBMTJCMDY1QTEwMzFF
OEJFMzQ0RkU2MDJFOTg2RUMyQTdEODJGMjM0REUwNjhCQTYzOTI2Nzc4NTMwMTMw
M0VFRUU0QUI3MEE4NEQyRTYwQkU2NTQ2NzI5NUE0M0VGRjMzQUY0RDcwNDRGMDNG
RTY2OTkxM0I2QzBBMEExMUJCREYxN0JBOEZCMTU1RDNERjhGRjdGRUM2MjhDMzQw
QzQyRTNGMTk5QTk0QkFGOTUxNzZGMTQ2REUxNEJGREUyRjlDRTQ1MzgyQ0M0Njc3
MUIwRDU1OUYxQjI0QjI3NDA5RDg5QzI0MTQwMkMyRjcxMkMzMDkzMjJBMTdBMEY2
NEM2RkM4NkJBQUM4RTI3NkU4MTk4QjU3RDU5QUM5RTU0OTBDM0RDNTRBRjEyNzZB
RUFBRDExM0M2N0Q1RTMzOTQ0NERFODczNTVFN0NDQzg0MTBBMzdGNkMwNjkzMzY4
MkJFRTQ2NkFDMDRBNUY2QkM0NTk4ODdGNkUwODI0MjBDMUVCRkY0NTYxMzhFRTkz
RkZCNEZCNjE0RUFCQUE4MzAzQzY4Q0RGMUJCN0RDRjM4NUE5MzIwMDVFMjE1NEIx
N0EzQ0E5OUI5N0FDNUM4RUU5RDg2OTVBOURDMjRCMkIyNUQ4MDNCNzNDRDA5RDhF
RDQxM0E2QzVERTNEQjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAritKErBloQMei+NE/mAumG7Cp9gvI03gaLpjkmd4UwEwPu7kq3Co
TS5gvmVGcpWkPv8zr01wRPA/5mmRO2wKChG73xe6j7FV09+P9/7GKMNAxC4/GZqU
uvlRdvFG3hS/3i+c5FOCzEZ3Gw1VnxsksnQJ2JwkFALC9xLDCTIqF6D2TG/Ia6rI
4nboGYtX1ZrJ5UkMPcVK8Sdq6q0RPGfV4zlETehzVefMyEEKN/bAaTNoK+5GasBK
X2vEWYh/bggkIMHr/0VhOO6T/7T7YU6rqoMDxozfG7fc84WpMgBeIVSxejypm5es
XI7p2GlancJLKyXYA7c80J2O1BOmxd49swIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAi5Tq7dWBEcDSfA2vzTWiGKeUB2MB8GA1UdIwQYMBaAFEReDXG4QwC9M7lulQh5
qnps66cUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVWQlo4WVZwNWVtVlpC
MnFFaE1zVlpCSjhqamhpUzhOQnFCdnVrZmU4TENhLzAvNDQ1RTBENzFCODQzMDBC
RDMzQjk2RTk1MDg3OUFBN0E2Q0VCQTcxNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NDVFMEQ3MUI4NDMwMEJEMzNCOTZFOTUwODc5QUE3QTZDRUJB
NzE0LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81VkJaOFlWcDVlbVZaQjJxRWhN
c1ZaQko4ampoaVM4TkJxQnZ1a2ZlOExDYS8wLzM0MzUyZTMxMzczODJlMzIzMDM0
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5MzAzNTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LbLMMA0GCSqGSIb3DQEBCwUAA4IBAQCsliPAtlwGNzNKil8XRpQXpxMBKpRLlf+V
KNgF4vEgSgraqjWeN16SVEbjqLql7gK+PHHs0zqD0UxknG8f3vfD6cKnTDV9Djps
Ru+vTlsM7nKfoiOQyHMDOmwM9SoCroY4WxaTvs3kl2R3RX+1xZJsYy4+JcQ3xEGM
ux6A8X8sIc8ZU2jErOeaV+f7lCsC7xArgxozttI1cQ/36YV+W3otOlzGdnKsiizV
aJLCtn6PwunVNr7PM7L6mYDv5bDHP9tVH5TWjmcxhFlqdXhaFQWXZ5MshLE4kPys
oHnfrOAmYflUIx95PqG0SbXOuSpjXUSPZYoHP16m+jIq79VRPfgO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org