Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e362e302f32332d3234203d3e20323638333038.roa
File:                     34352e3233382e362e302f32332d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          zvmrFW4ell0Ad0skQe+txgnHRBJwO0zUnOzupcKCObc=
Subject key identifier:   E3:33:84:DD:8D:1B:3D:9F:07:C2:50:50:E7:B8:42:E6:16:60:7B:E9
Certificate issuer:       /CN=11EC55DCC6754328D555246C7EB1FC903158C2CF
Certificate serial:       75473757BBEBB51538FFC9C20A30E66E8B7242C8
Authority key identifier: 11:EC:55:DC:C6:75:43:28:D5:55:24:6C:7E:B1:FC:90:31:58:C2:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EC55DCC6754328D555246C7EB1FC903158C2CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e362e302f32332d3234203d3e20323638333038.roa
Signing time:             Mon 22 May 2023 14:50:09 +0000
ROA not before:           Mon 22 May 2023 14:45:09 +0000
ROA not after:            Mon 20 May 2024 14:50:09 +0000
asID:                     268308
IP address blocks:        45.238.6.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:47:37:57:bb:eb:b5:15:38:ff:c9:c2:0a:30:e6:6e:8b:72:42:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11EC55DCC6754328D555246C7EB1FC903158C2CF
        Validity
            Not Before: May 22 14:45:09 2023 GMT
            Not After : May 20 14:50:09 2024 GMT
        Subject: CN=E33384DD8D1B3D9F07C25050E7B842E616607BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:e3:27:96:da:94:bd:a4:d1:8c:c2:11:cc:
                    d1:51:ac:77:ba:70:40:94:ae:94:d3:e4:07:8f:af:
                    6e:59:8e:89:46:61:bd:a0:63:06:dd:a0:48:47:1c:
                    9a:bb:6f:df:2c:d1:c8:1c:2c:d4:f5:75:b0:72:51:
                    f3:97:e0:cf:59:e1:05:71:42:a5:4b:b4:0c:90:35:
                    a3:8b:71:e3:f0:f6:7d:66:25:40:8e:2f:1e:57:96:
                    46:00:64:f6:37:2b:68:60:60:69:d2:87:47:0a:e5:
                    d4:b1:54:41:5d:cb:92:5f:67:7e:2c:22:2b:45:ca:
                    de:84:05:7c:69:1d:7a:24:8a:ea:04:f9:22:7a:a1:
                    ee:39:81:0e:1b:50:cd:3d:53:4f:eb:b5:bc:ab:c6:
                    a9:83:66:f0:8d:64:5c:4b:a0:30:71:b7:65:1c:54:
                    79:d3:d3:a0:5d:71:1f:9b:75:9b:1f:da:b4:16:e9:
                    7d:72:5a:2d:67:e0:80:20:25:05:99:7a:29:19:f9:
                    95:cd:ac:53:bc:75:e7:6e:26:b3:9e:60:72:d4:c3:
                    86:ff:f7:87:8c:89:d9:f5:f1:ae:48:0b:50:42:0e:
                    d7:bb:07:bd:6b:40:22:2d:fe:5a:23:3d:f3:c7:da:
                    8d:43:36:02:ce:3a:96:ae:c7:50:9d:8b:4b:ae:1b:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:33:84:DD:8D:1B:3D:9F:07:C2:50:50:E7:B8:42:E6:16:60:7B:E9
            X509v3 Authority Key Identifier:
                keyid:11:EC:55:DC:C6:75:43:28:D5:55:24:6C:7E:B1:FC:90:31:58:C2:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/11EC55DCC6754328D555246C7EB1FC903158C2CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EC55DCC6754328D555246C7EB1FC903158C2CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e362e302f32332d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e6:43:12:64:e9:7c:71:b5:10:98:c5:d7:1c:5c:86:fa:10:6c:
         ce:04:54:06:cc:ca:8a:e1:3b:03:87:3e:b9:07:ba:6b:dc:c1:
         0a:eb:cd:50:e2:c9:6d:aa:97:27:73:c1:9c:65:db:f5:8b:13:
         f0:45:ee:d0:b2:1e:94:e4:ba:75:7c:e5:d1:09:db:79:9e:44:
         6c:87:bf:26:8c:01:7d:5b:04:e2:fe:53:d4:61:6b:2c:4a:b5:
         b4:3a:d8:c2:9d:8e:5a:81:b1:35:32:fc:ee:ca:13:9f:ea:d1:
         da:b7:e0:39:b2:7e:c3:61:2e:0f:28:e6:da:d9:32:ed:c7:68:
         c7:8c:d6:7e:56:21:0a:f8:52:fd:15:f8:7a:63:0b:58:22:99:
         bb:c0:fa:22:c5:c2:2b:ce:2d:b6:7a:e3:14:67:03:93:1c:b0:
         d4:35:59:43:f9:47:f5:6c:7c:93:f5:c1:e5:b0:94:3b:fc:3b:
         fb:5c:4b:51:03:af:a3:b4:04:8f:64:f5:bf:28:9d:76:87:52:
         8d:bb:23:b6:2c:42:21:da:51:09:8c:71:1d:6f:3d:60:17:98:
         15:a2:b3:62:47:54:c3:35:4a:86:1e:9c:d4:c2:09:1f:6b:a7:
         48:aa:12:db:77:02:68:6a:bd:b6:e3:80:53:07:98:64:c9:19:
         2a:c4:45:54
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdUc3V7vrtRU4/8nCCjDmbotyQsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFFQzU1RENDNjc1NDMyOEQ1NTUyNDZDN0VCMUZDOTAz
MTU4QzJDRjAeFw0yMzA1MjIxNDQ1MDlaFw0yNDA1MjAxNDUwMDlaMDMxMTAvBgNV
BAMTKEUzMzM4NEREOEQxQjNEOUYwN0MyNTA1MEU3Qjg0MkU2MTY2MDdCRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZuMnltqUvaTRjMIRzNFRrHe6
cECUrpTT5AePr25ZjolGYb2gYwbdoEhHHJq7b98s0cgcLNT1dbByUfOX4M9Z4QVx
QqVLtAyQNaOLcePw9n1mJUCOLx5XlkYAZPY3K2hgYGnSh0cK5dSxVEFdy5JfZ34s
IitFyt6EBXxpHXokiuoE+SJ6oe45gQ4bUM09U0/rtbyrxqmDZvCNZFxLoDBxt2Uc
VHnT06BdcR+bdZsf2rQW6X1yWi1n4IAgJQWZeikZ+ZXNrFO8deduJrOeYHLUw4b/
94eMidn18a5IC1BCDte7B71rQCIt/lojPfPH2o1DNgLOOpaux1Cdi0uuG15zAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4zOE3Y0bPZ8HwlBQ57hC5hZge+kwHwYDVR0j
BBgwFoAUEexV3MZ1QyjVVSRsfrH8kDFYws8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMC8xMUVDNTVEQ0M2NzU0MzI4RDU1NTI0NkM3RUIxRkM5MDMxNThDMkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExRUM1NURDQzY3NTQzMjhE
NTU1MjQ2QzdFQjFGQzkwMzE1OEMyQ0YuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAv
MzQzNTJlMzIzMzM4MmUzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzODMz
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS3uBjANBgkqhkiG9w0BAQsFAAOCAQEA5kMSZOl8cbUQ
mMXXHFyG+hBszgRUBszKiuE7A4c+uQe6a9zBCuvNUOLJbaqXJ3PBnGXb9YsT8EXu
0LIelOS6dXzl0QnbeZ5EbIe/JowBfVsE4v5T1GFrLEq1tDrYwp2OWoGxNTL87soT
n+rR2rfgObJ+w2EuDyjm2tky7cdox4zWflYhCvhS/RX4emMLWCKZu8D6IsXCK84t
tnrjFGcDkxyw1DVZQ/lH9Wx8k/XB5bCUO/w7+1xLUQOvo7QEj2T1vyiddodSjbsj
tixCIdpRCYxxHW89YBeYFaKzYkdUwzVKhh6c1MIJH2unSKoS23cCaGq9tuOAUweY
ZMkZKsRFVA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org