Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32332d3233203d3e20323639303536.roa
File:                     34352e3137382e3230342e302f32332d3233203d3e20323639303536.roa (raw, json)
Hash identifier:          +7QRFmSrFc3EeGlFOOfDpr/tVKo8RQL2tJIep4VwaSM=
Subject key identifier:   72:99:25:82:FA:C0:80:71:5D:80:EE:FB:E2:1E:44:74:9A:44:B7:56
Certificate issuer:       /CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
Certificate serial:       3C35A2DE7CE9EF3B02932CA833F96AC67C22279D
Authority key identifier: 44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32332d3233203d3e20323639303536.roa
Signing time:             Thu 10 Nov 2022 18:40:22 +0000
ROA not before:           Thu 10 Nov 2022 18:35:22 +0000
ROA not after:            Thu 09 Nov 2023 18:40:22 +0000
asID:                     269056
IP address blocks:        45.178.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:35:a2:de:7c:e9:ef:3b:02:93:2c:a8:33:f9:6a:c6:7c:22:27:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
        Validity
            Not Before: Nov 10 18:35:22 2022 GMT
            Not After : Nov  9 18:40:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:72:b8:d8:0d:6a:27:82:b9:f8:3f:34:b3:
                    02:b5:f8:63:d2:06:0d:52:fc:1b:fb:64:be:84:6c:
                    dd:8f:6c:bc:41:f3:71:44:8c:78:82:65:ca:fc:70:
                    fe:ed:5b:d4:a2:7e:5a:30:ac:34:53:04:01:06:2e:
                    f0:78:04:9c:08:b9:27:07:d1:1f:cf:1e:74:e0:13:
                    1e:44:25:e7:11:13:20:ee:af:b9:dc:78:3f:0e:d5:
                    c3:86:17:21:91:2f:cd:bd:ae:68:53:a8:d2:9d:f3:
                    ce:07:34:b0:39:25:01:31:9b:9e:c3:4a:bb:43:e0:
                    57:a8:6b:b4:f3:91:be:b9:f4:63:70:29:7e:1b:71:
                    a4:02:e0:5a:bc:fd:3a:e7:f8:71:ea:9b:cf:26:78:
                    a5:ad:af:26:5e:ac:c3:fc:6f:5b:c0:44:8f:05:5d:
                    50:1c:ba:3e:ec:dd:87:a6:ac:43:8f:86:26:dd:3d:
                    fc:10:bf:c8:9a:f5:4e:65:f9:51:3d:d0:e9:a4:7f:
                    ee:d2:e4:ab:a0:12:b8:24:79:8e:3b:a2:c7:db:af:
                    15:54:34:da:f0:ef:95:33:25:f0:93:8f:49:dd:04:
                    25:a3:da:14:4d:f4:1e:76:0b:be:87:fc:16:3f:a0:
                    f1:9a:50:5a:04:b8:00:0f:ae:c0:5d:60:92:cf:ee:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:99:25:82:FA:C0:80:71:5D:80:EE:FB:E2:1E:44:74:9A:44:B7:56
            X509v3 Authority Key Identifier:
                keyid:44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32332d3233203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:68:ab:0f:b6:66:46:d0:98:d4:8a:3c:ba:74:e1:7a:82:
         e2:8a:8d:dd:cc:31:b7:7b:13:8e:a7:40:52:d9:e7:1c:5f:49:
         4b:5c:ad:56:3a:4f:be:7f:a9:a9:08:32:ba:73:2a:b5:f1:0d:
         9f:9c:aa:bc:8d:94:27:ab:1d:06:ba:36:6b:a6:d1:4d:8c:c3:
         a3:fe:9b:68:ad:41:66:9a:5f:b6:0f:02:ca:c4:ca:50:8f:d0:
         96:e9:d0:94:ec:39:21:c1:9f:03:59:f3:29:20:34:60:b4:ed:
         99:10:eb:ef:3f:01:87:96:c8:ea:42:90:7f:c1:b5:03:01:7d:
         f2:6b:99:c7:29:31:1b:90:6d:64:04:5c:46:96:ae:c6:4a:f8:
         f5:ac:b6:41:5f:03:c4:2b:3f:71:b0:bc:5b:ba:b9:fa:8b:b5:
         1c:15:4b:c9:b1:c7:b6:f6:59:ed:a2:6f:fa:87:b0:fc:33:d1:
         88:ed:8f:b8:31:6f:b0:36:01:78:d7:da:e6:57:3b:71:93:f8:
         25:2f:4c:4e:35:e7:78:2f:51:71:86:a7:0a:97:56:10:77:34:
         a6:05:ba:44:83:5f:15:62:cf:e2:f7:cc:12:26:26:57:21:ac:
         ae:1e:e4:e9:bd:28:38:72:96:35:89:c8:d7:e6:04:11:95:fd:
         f1:ac:25:9b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUPDWi3nzp7zsCkyyoM/lqxnwiJ50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ1RTBENzFCODQzMDBCRDMzQjk2RTk1MDg3OUFBN0E2
Q0VCQTcxNDAeFw0yMjExMTAxODM1MjJaFw0yMzExMDkxODQwMjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzEwRTcyQjhEODBENkEyNzgy
QjlGODNGMzRCMzAyQjVGODYzRDIwNjBENTJGQzFCRkI2NEJFODQ2Q0REOEY2Q0JD
NDFGMzcxNDQ4Qzc4ODI2NUNBRkM3MEZFRUQ1QkQ0QTI3RTVBMzBBQzM0NTMwNDAx
MDYyRUYwNzgwNDlDMDhCOTI3MDdEMTFGQ0YxRTc0RTAxMzFFNDQyNUU3MTExMzIw
RUVBRkI5REM3ODNGMEVENUMzODYxNzIxOTEyRkNEQkRBRTY4NTNBOEQyOURGM0NF
MDczNEIwMzkyNTAxMzE5QjlFQzM0QUJCNDNFMDU3QTg2QkI0RjM5MUJFQjlGNDYz
NzAyOTdFMUI3MUE0MDJFMDVBQkNGRDNBRTdGODcxRUE5QkNGMjY3OEE1QURBRjI2
NUVBQ0MzRkM2RjVCQzA0NDhGMDU1RDUwMUNCQTNFRUNERDg3QTZBQzQzOEY4NjI2
REQzREZDMTBCRkM4OUFGNTRFNjVGOTUxM0REMEU5QTQ3RkVFRDJFNEFCQTAxMkI4
MjQ3OThFM0JBMkM3REJBRjE1NTQzNERBRjBFRjk1MzMyNUYwOTM4RjQ5REQwNDI1
QTNEQTE0NERGNDFFNzYwQkJFODdGQzE2M0ZBMEYxOUE1MDVBMDRCODAwMEZBRUMw
NUQ2MDkyQ0ZFRTEyMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwQ5yuNgNaieCufg/NLMCtfhj0gYNUvwb+2S+hGzdj2y8QfNxRIx4
gmXK/HD+7VvUon5aMKw0UwQBBi7weAScCLknB9Efzx504BMeRCXnERMg7q+53Hg/
DtXDhhchkS/Nva5oU6jSnfPOBzSwOSUBMZuew0q7Q+BXqGu085G+ufRjcCl+G3Gk
AuBavP065/hx6pvPJnilra8mXqzD/G9bwESPBV1QHLo+7N2HpqxDj4Ym3T38EL/I
mvVOZflRPdDppH/u0uSroBK4JHmOO6LH268VVDTa8O+VMyXwk49J3QQlo9oUTfQe
dgu+h/wWP6DxmlBaBLgAD67AXWCSz+4SHwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHKZJYL6wIBxXYDu++IeRHSaRLdWMB8GA1UdIwQYMBaAFEReDXG4QwC9M7lulQh5
qnps66cUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVWQlo4WVZwNWVtVlpC
MnFFaE1zVlpCSjhqamhpUzhOQnFCdnVrZmU4TENhLzAvNDQ1RTBENzFCODQzMDBC
RDMzQjk2RTk1MDg3OUFBN0E2Q0VCQTcxNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NDVFMEQ3MUI4NDMwMEJEMzNCOTZFOTUwODc5QUE3QTZDRUJB
NzE0LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81VkJaOFlWcDVlbVZaQjJxRWhN
c1ZaQko4ampoaVM4TkJxQnZ1a2ZlOExDYS8wLzM0MzUyZTMxMzczODJlMzIzMDM0
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5MzAzNTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LbLMMA0GCSqGSIb3DQEBCwUAA4IBAQA26mirD7ZmRtCY1Io8unTheoLiio3dzDG3
exOOp0BS2eccX0lLXK1WOk++f6mpCDK6cyq18Q2fnKq8jZQnqx0GujZrptFNjMOj
/ptorUFmml+2DwLKxMpQj9CW6dCU7DkhwZ8DWfMpIDRgtO2ZEOvvPwGHlsjqQpB/
wbUDAX3ya5nHKTEbkG1kBFxGlq7GSvj1rLZBXwPEKz9xsLxburn6i7UcFUvJsce2
9lntom/6h7D8M9GI7Y+4MW+wNgF419rmVztxk/glL0xONed4L1FxhqcKl1YQdzSm
BbpEg18VYs/i98wSJiZXIayuHuTpvSg4cpY1icjX5gQRlf3xrCWb
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:40 2024 by rpki-client on console-fra.rpki-client.org