Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3234203d3e20323638323136.roa
File:                     34352e3233352e3234382e302f32322d3234203d3e20323638323136.roa (raw, json)
Hash identifier:          30XcWIb16m78ytmgi5VeuZQi5moMC8xlZZBTMN2K6y8=
Subject key identifier:   8B:0A:B7:90:CB:C6:D0:60:40:E8:D1:2E:97:E6:BD:92:B9:DB:78:70
Certificate issuer:       /CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
Certificate serial:       32C768F9D7989C1ED4EE96AA94BC7BE68B1DD5D1
Authority key identifier: 41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3234203d3e20323638323136.roa
Signing time:             Thu 21 Mar 2024 00:06:42 +0000
ROA not before:           Thu 21 Mar 2024 00:01:42 +0000
ROA not after:            Thu 20 Mar 2025 00:06:42 +0000
asID:                     268216
IP address blocks:        45.235.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c7:68:f9:d7:98:9c:1e:d4:ee:96:aa:94:bc:7b:e6:8b:1d:d5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
        Validity
            Not Before: Mar 21 00:01:42 2024 GMT
            Not After : Mar 20 00:06:42 2025 GMT
        Subject: CN=8B0AB790CBC6D06040E8D12E97E6BD92B9DB7870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:81:28:99:41:9a:23:3c:11:69:77:fe:92:
                    d6:6a:68:a5:25:2e:e4:01:3c:a1:85:98:b6:42:4d:
                    5e:22:ef:b1:70:87:6c:da:31:37:40:77:54:5f:fa:
                    03:66:0b:4f:07:4d:3a:a6:69:2c:2e:b1:59:24:ad:
                    a2:80:c6:0a:57:57:66:38:eb:7f:ca:69:a1:23:1c:
                    81:76:e5:99:9a:bc:bc:b6:49:30:0f:ef:82:1b:a0:
                    c6:80:fe:d1:76:72:30:78:63:af:0f:07:bf:0b:c4:
                    43:e0:10:92:9d:f2:0e:fe:04:e7:5f:10:93:61:9f:
                    22:6c:f9:ad:b8:7c:47:22:41:0e:4b:cb:f2:20:2f:
                    0a:94:18:34:f8:5d:37:a4:c3:13:40:20:39:37:6f:
                    82:fb:21:05:c3:15:3f:ad:6b:be:b3:66:14:74:96:
                    29:f7:ac:18:e4:ac:cf:ce:d0:d3:34:82:f5:f9:f8:
                    34:1c:33:99:61:fc:d5:8a:60:06:b2:d0:5e:9c:2d:
                    cf:3e:64:65:91:58:9f:c2:49:91:ce:0a:80:c2:1d:
                    4c:4e:9f:e6:aa:15:99:8f:6e:8f:a1:d9:77:11:80:
                    6e:2f:d5:b5:7f:4b:90:cd:a7:73:51:a2:1c:19:13:
                    eb:a3:2c:db:f8:87:a7:57:11:ec:2e:b0:74:06:c7:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0A:B7:90:CB:C6:D0:60:40:E8:D1:2E:97:E6:BD:92:B9:DB:78:70
            X509v3 Authority Key Identifier:
                keyid:41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3234203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:94:fa:55:dc:6c:c1:0c:11:cb:5f:4e:98:6b:6b:ff:5f:93:
         b7:0e:eb:a3:ae:71:4b:5d:02:d8:da:b0:34:0f:7f:65:9e:db:
         fe:ac:cf:be:ec:bf:9f:09:ae:0a:d0:63:0b:11:e2:86:b9:34:
         c1:68:19:fb:da:10:21:59:34:23:a1:82:57:76:92:96:a0:6a:
         15:a3:bf:9b:2b:67:46:7a:d4:d7:1e:e2:49:e8:c2:bd:2b:b1:
         33:31:41:5e:73:53:b3:5a:75:6a:a8:5f:8f:73:e4:0a:e5:fe:
         6d:ea:84:9e:f2:b1:72:f1:96:46:f4:ee:c9:59:89:65:5b:fe:
         3f:07:2a:83:1b:72:20:43:83:b1:4f:36:57:ad:a3:46:e3:9d:
         e6:a0:0c:75:bc:c6:50:c7:1f:58:df:4c:88:19:5b:a1:f2:19:
         24:44:bf:00:7b:e4:fc:7a:4c:ac:73:78:70:2f:46:c8:32:e5:
         32:ee:85:70:84:4c:03:3f:48:87:83:c6:d8:39:01:7e:aa:e4:
         f9:cf:31:54:de:aa:6f:20:a9:7c:94:e9:5d:25:06:43:9f:77:
         c1:98:10:3d:42:7e:f1:aa:fc:9f:49:77:64:ea:81:5a:ce:c5:
         53:51:fc:76:41:de:2c:9b:fd:88:2b:62:2d:63:50:92:77:be:
         1b:e0:cd:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMsdo+deYnB7U7paqlLx75osd1dEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDExMkUzNzMxRTBBRTU2MDM3MjgzMUU3NUVENjQyMEU5
NUVGQ0ZFMTAeFw0yNDAzMjEwMDAxNDJaFw0yNTAzMjAwMDA2NDJaMDMxMTAvBgNV
BAMTKDhCMEFCNzkwQ0JDNkQwNjA0MEU4RDEyRTk3RTZCRDkyQjlEQjc4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPD4EomUGaIzwRaXf+ktZqaKUl
LuQBPKGFmLZCTV4i77Fwh2zaMTdAd1Rf+gNmC08HTTqmaSwusVkkraKAxgpXV2Y4
63/KaaEjHIF25ZmavLy2STAP74IboMaA/tF2cjB4Y68PB78LxEPgEJKd8g7+BOdf
EJNhnyJs+a24fEciQQ5Ly/IgLwqUGDT4XTekwxNAIDk3b4L7IQXDFT+ta76zZhR0
lin3rBjkrM/O0NM0gvX5+DQcM5lh/NWKYAay0F6cLc8+ZGWRWJ/CSZHOCoDCHUxO
n+aqFZmPbo+h2XcRgG4v1bV/S5DNp3NRohwZE+ujLNv4h6dXEewusHQGx+l7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiwq3kMvG0GBA6NEul+a9krnbeHAwHwYDVR0j
BBgwFoAUQRLjcx4K5WA3KDHnXtZCDpXvz+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFybjVSZ0NHWVgzSEExVlQ2Y3RtNjE2amg0NzZwZ2lyZ25OUzRtUnJD
aXkvMC80MTEyRTM3MzFFMEFFNTYwMzcyODMxRTc1RUQ2NDIwRTk1RUZDRkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxMTJFMzczMUUwQUU1NjAz
NzI4MzFFNzVFRDY0MjBFOTVFRkNGRTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhcm41UmdDR1lYM0hBMVZUNmN0bTYxNmpoNDc2cGdpcmduTlM0bVJyQ2l5LzAv
MzQzNTJlMzIzMzM1MmUzMjM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6/gwDQYJKoZIhvcNAQELBQADggEBABaU+lXc
bMEMEctfTphra/9fk7cO66OucUtdAtjasDQPf2We2/6sz77sv58JrgrQYwsR4oa5
NMFoGfvaECFZNCOhgld2kpagahWjv5srZ0Z61Nce4knowr0rsTMxQV5zU7NadWqo
X49z5Arl/m3qhJ7ysXLxlkb07slZiWVb/j8HKoMbciBDg7FPNleto0bjneagDHW8
xlDHH1jfTIgZW6HyGSREvwB75Px6TKxzeHAvRsgy5TLuhXCETAM/SIeDxtg5AX6q
5PnPMVTeqm8gqXyU6V0lBkOfd8GYED1CfvGq/J9Jd2TqgVrOxVNR/HZB3iyb/Ygr
Yi1jUJJ3vhvgzW4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org