Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/34352e3136352e3130302e302f32322d3234203d3e20323638363735.roa
File:                     34352e3136352e3130302e302f32322d3234203d3e20323638363735.roa (raw, json)
Hash identifier:          EKOIZavSF7GPEGme0BA/YpkXeij8RyIonDzpH17zY4E=
Subject key identifier:   E7:FD:31:7E:79:49:2D:77:8C:15:EB:84:10:74:64:9C:B6:25:AC:11
Certificate issuer:       /CN=F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509
Certificate serial:       5C7CB8210A0AE84965C468CA25D798CE39418B78
Authority key identifier: F7:6E:FD:7B:AD:5D:AB:91:CE:5C:0A:F7:13:AE:CD:EB:26:84:C5:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/34352e3136352e3130302e302f32322d3234203d3e20323638363735.roa
Signing time:             Thu 03 Aug 2023 22:00:00 +0000
ROA not before:           Thu 03 Aug 2023 21:55:00 +0000
ROA not after:            Thu 01 Aug 2024 22:00:00 +0000
asID:                     268675
IP address blocks:        45.165.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7c:b8:21:0a:0a:e8:49:65:c4:68:ca:25:d7:98:ce:39:41:8b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509
        Validity
            Not Before: Aug  3 21:55:00 2023 GMT
            Not After : Aug  1 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:b5:9a:b9:d1:bd:30:fc:29:27:ea:14:d1:
                    e6:9d:d3:da:b6:1e:3a:fe:28:0b:9d:dc:d9:fb:86:
                    45:67:d8:50:fd:20:69:ad:3a:bd:6a:b6:b8:0d:66:
                    81:7b:c1:58:2d:8d:de:23:56:91:a0:6f:de:db:6c:
                    8c:74:6e:29:55:b6:84:85:45:f2:87:ae:cf:90:1b:
                    38:57:bc:79:06:5a:1b:87:fa:b1:7c:99:83:76:d8:
                    04:d8:31:98:15:63:82:dc:f4:b5:79:86:87:a2:98:
                    c5:03:cb:25:b7:6e:90:8e:55:07:11:63:06:74:b3:
                    2b:07:c1:50:70:47:2a:cf:aa:b7:df:08:fc:10:8f:
                    d8:8a:2f:e4:f8:07:0c:80:64:9b:a6:0d:9a:97:3d:
                    b3:1f:88:23:ce:db:5d:1a:51:2e:b0:01:ac:4d:f1:
                    2d:86:70:71:5e:92:fa:83:eb:1e:e3:53:69:d5:70:
                    bb:9f:a9:24:3c:82:c3:7a:6a:1e:b2:3e:58:f3:17:
                    47:e0:6a:8d:a3:40:4c:32:a6:fd:72:8c:92:cb:ed:
                    ab:11:c1:4c:b0:12:96:0d:25:67:f9:5b:a8:23:7d:
                    3f:ac:eb:ec:03:69:7a:d7:a0:45:3d:d5:f8:90:68:
                    36:d6:47:27:5e:79:30:ed:d6:a2:51:1a:dd:ac:89:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:31:7E:79:49:2D:77:8C:15:EB:84:10:74:64:9C:B6:25:AC:11
            X509v3 Authority Key Identifier:
                keyid:F7:6E:FD:7B:AD:5D:AB:91:CE:5C:0A:F7:13:AE:CD:EB:26:84:C5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/34352e3136352e3130302e302f32322d3234203d3e20323638363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:f0:9b:5b:f8:c6:56:71:6b:01:76:b0:5a:72:e9:26:07:a2:
         e7:6b:fd:6c:68:11:ff:d8:3d:71:c3:dc:33:16:55:09:61:5b:
         8d:e0:dc:91:ca:7e:1d:72:ff:8e:d0:7d:3f:3f:ee:0b:04:fd:
         81:ee:af:6a:3c:c8:d4:37:1b:7b:42:5c:86:28:9d:5e:d4:1c:
         99:a8:eb:fa:b9:fa:0b:c8:43:fb:28:66:12:fe:67:ab:fc:c4:
         75:78:8f:25:1b:e0:ff:0c:d9:7f:18:28:24:34:b6:e6:d8:23:
         0a:b5:52:0e:44:ab:22:ae:3a:b0:d6:bd:8c:7e:9e:8b:96:9e:
         7d:1f:7c:01:64:85:c7:6d:ff:f3:7b:a9:06:5f:28:34:c6:1d:
         86:6d:e4:e7:ca:07:26:6a:88:d3:aa:37:66:ef:17:8a:e0:44:
         d9:e2:30:a9:74:5b:b5:fd:6d:f8:94:1f:1e:ad:1e:b4:19:18:
         c7:96:56:12:40:89:b6:a6:ae:01:8b:08:e9:39:cc:95:bc:f6:
         f5:2f:9c:1f:28:cd:da:1c:b3:62:b5:cc:40:c1:24:d5:9e:ca:
         d7:2e:4f:e7:52:9c:52:39:34:d5:c2:a8:2f:e5:e3:0f:60:1c:
         3a:43:b9:8e:b0:2c:1c:3d:ac:e4:4d:a9:10:7c:35:96:d3:a4:
         32:cb:96:86
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUXHy4IQoK6EllxGjKJdeYzjlBi3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc2RUZEN0JBRDVEQUI5MUNFNUMwQUY3MTNBRUNERUIy
Njg0QzUwOTAeFw0yMzA4MDMyMTU1MDBaFw0yNDA4MDEyMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk5RUI1OUFCOUQxQkQzMEZD
MjkyN0VBMTREMUU2OUREM0RBQjYxRTNBRkUyODBCOUREQ0Q5RkI4NjQ1NjdEODUw
RkQyMDY5QUQzQUJENkFCNkI4MEQ2NjgxN0JDMTU4MkQ4RERFMjM1NjkxQTA2RkRF
REI2QzhDNzQ2RTI5NTVCNjg0ODU0NUYyODdBRUNGOTAxQjM4NTdCQzc5MDY1QTFC
ODdGQUIxN0M5OTgzNzZEODA0RDgzMTk4MTU2MzgyRENGNEI1Nzk4Njg3QTI5OEM1
MDNDQjI1Qjc2RTkwOEU1NTA3MTE2MzA2NzRCMzJCMDdDMTUwNzA0NzJBQ0ZBQUI3
REYwOEZDMTA4RkQ4OEEyRkU0RjgwNzBDODA2NDlCQTYwRDlBOTczREIzMUY4ODIz
Q0VEQjVEMUE1MTJFQjAwMUFDNERGMTJEODY3MDcxNUU5MkZBODNFQjFFRTM1MzY5
RDU3MEJCOUZBOTI0M0M4MkMzN0E2QTFFQjIzRTU4RjMxNzQ3RTA2QThEQTM0MDRD
MzJBNkZENzI4QzkyQ0JFREFCMTFDMTRDQjAxMjk2MEQyNTY3Rjk1QkE4MjM3RDNG
QUNFQkVDMDM2OTdBRDdBMDQ1M0RENUY4OTA2ODM2RDY0NzI3NUU3OTMwRURENkEy
NTExQUREQUM4OTM1NjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuZ61mrnRvTD8KSfqFNHmndPath46/igLndzZ+4ZFZ9hQ/SBprTq9
ara4DWaBe8FYLY3eI1aRoG/e22yMdG4pVbaEhUXyh67PkBs4V7x5Blobh/qxfJmD
dtgE2DGYFWOC3PS1eYaHopjFA8slt26QjlUHEWMGdLMrB8FQcEcqz6q33wj8EI/Y
ii/k+AcMgGSbpg2alz2zH4gjzttdGlEusAGsTfEthnBxXpL6g+se41Np1XC7n6kk
PILDemoesj5Y8xdH4GqNo0BMMqb9coySy+2rEcFMsBKWDSVn+VuoI30/rOvsA2l6
16BFPdX4kGg21kcnXnkw7daiURrdrIk1aQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOf9MX55SS13jBXrhBB0ZJy2JawRMB8GA1UdIwQYMBaAFPdu/XutXauRzlwK9xOu
zesmhMUJMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZUYnBXMkVZdEN2ejVp
dTRCbXVNRVNSSHN2TTJoNFZzZlpxczUzZTFtR3pZLzAvRjc2RUZEN0JBRDVEQUI5
MUNFNUMwQUY3MTNBRUNERUIyNjg0QzUwOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNzZFRkQ3QkFENURBQjkxQ0U1QzBBRjcxM0FFQ0RFQjI2ODRD
NTA5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82VGJwVzJFWXRDdno1aXU0Qm11
TUVTUkhzdk0yaDRWc2ZacXM1M2UxbUd6WS8wLzM0MzUyZTMxMzYzNTJlMzEzMDMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4MzYzNzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LaVkMA0GCSqGSIb3DQEBCwUAA4IBAQB58Jtb+MZWcWsBdrBacukmB6Lna/1saBH/
2D1xw9wzFlUJYVuN4NyRyn4dcv+O0H0/P+4LBP2B7q9qPMjUNxt7QlyGKJ1e1ByZ
qOv6ufoLyEP7KGYS/mer/MR1eI8lG+D/DNl/GCgkNLbm2CMKtVIORKsirjqw1r2M
fp6Llp59H3wBZIXHbf/ze6kGXyg0xh2GbeTnygcmaojTqjdm7xeK4ETZ4jCpdFu1
/W34lB8erR60GRjHllYSQIm2pq4BiwjpOcyVvPb1L5wfKM3aHLNitcxAwSTVnsrX
Lk/nUpxSOTTVwqgv5eMPYBw6Q7mOsCwcPazkTakQfDWW06Qyy5aG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org