Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3130382e302f32342d3234203d3e20323632343831.roa
File:                     34352e3233372e3130382e302f32342d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          sQ/sp322rwr7xPxA33ePUQC9ts0R7S3MOY3z7eR7m5I=
Subject key identifier:   F5:14:14:F7:4E:18:BD:00:5C:B0:2C:E5:F5:B8:7E:65:98:4F:B8:9A
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       3060037B885B3AAB807B4A9AFB223A1E7A47B01D
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3130382e302f32342d3234203d3e20323632343831.roa
Signing time:             Tue 12 Oct 2021 12:36:00 +0000
ROA not before:           Tue 12 Oct 2021 12:31:00 +0000
ROA not after:            Tue 11 Oct 2022 12:36:00 +0000
asID:                     262481
IP address blocks:        45.237.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:60:03:7b:88:5b:3a:ab:80:7b:4a:9a:fb:22:3a:1e:7a:47:b0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Oct 12 12:31:00 2021 GMT
            Not After : Oct 11 12:36:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:76:d1:74:ab:47:b7:84:9f:64:69:6a:5e:
                    e4:a2:de:4e:1b:7a:21:56:42:a8:36:e8:1c:21:d8:
                    e6:b1:f7:db:92:a3:39:a3:5c:5c:c6:48:9f:77:b8:
                    5f:df:9a:b4:db:ed:79:ba:d2:b8:cd:ff:d0:39:21:
                    e9:ec:53:09:56:b0:c5:1e:c4:63:09:46:fc:09:82:
                    a2:02:f6:40:6e:7d:31:28:be:68:e2:e8:10:60:b6:
                    31:a3:98:ba:60:11:17:fc:95:f1:1a:f7:db:c3:50:
                    10:3f:09:09:ab:93:f9:d7:6e:ef:ae:42:ed:0a:20:
                    78:24:0c:bb:21:88:4b:73:5c:4c:f4:75:8b:e7:7f:
                    41:f0:2f:63:75:16:b5:85:dc:5c:d5:9d:f3:31:23:
                    0e:5c:9e:1b:2c:ee:0a:5f:2c:02:97:5e:ac:60:b5:
                    47:b0:ee:1d:9e:6b:eb:71:ed:24:88:e9:99:70:92:
                    82:b6:76:89:0f:67:9d:9c:c5:3c:0b:e7:76:1a:ce:
                    f8:df:85:91:79:fc:b2:66:7e:98:54:87:3f:af:04:
                    1a:84:b6:6e:b6:20:35:f9:57:e4:37:7f:b4:5f:d8:
                    4b:9b:75:66:a5:61:5c:7b:b3:e9:e3:85:9c:a7:62:
                    43:e4:e7:77:42:9c:8f:33:cc:e4:40:00:61:c3:05:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:14:14:F7:4E:18:BD:00:5C:B0:2C:E5:F5:B8:7E:65:98:4F:B8:9A
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3130382e302f32342d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:a1:96:b1:99:0b:5d:30:59:c4:52:d9:6e:a1:22:0a:12:42:
         ae:0e:46:7a:cd:0c:0f:bf:31:70:56:a3:d9:d7:72:39:27:5f:
         e8:3c:ca:c9:4a:31:99:24:e4:4a:bd:41:0a:22:ff:6b:e1:3d:
         c4:cf:16:d5:93:d7:99:6f:ba:28:6d:a4:bb:d9:37:fa:c1:81:
         78:82:36:e1:fb:37:2b:83:a4:3c:4e:ea:d0:d3:aa:ab:c0:5d:
         8b:9b:ab:56:3a:fd:4a:30:79:50:16:9d:89:a5:37:fd:ff:46:
         ce:0e:31:be:bf:6c:f2:35:8c:75:dc:91:cf:30:08:f4:65:19:
         0f:d1:d7:6e:7a:97:f3:76:64:18:ca:c0:c2:3a:bf:dd:8d:7b:
         8e:5f:b7:e3:60:5b:6a:97:61:4b:f2:9f:0c:49:71:a7:2a:d8:
         85:39:42:67:66:d1:2e:a2:83:a2:54:39:af:78:4a:d7:5c:e3:
         04:04:22:b0:c1:bd:17:03:35:1f:61:d2:b1:99:24:60:f8:9f:
         d5:de:e2:3b:fc:c6:23:cc:4f:06:bc:97:a3:44:30:c5:c2:f7:
         d5:81:41:af:ad:35:43:70:07:b3:0c:c1:66:d7:83:0b:6e:3f:
         07:4b:b8:52:cf:9d:3b:cd:60:0d:20:48:f8:48:30:96:90:5b:
         94:12:1a:3d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUMGADe4hbOquAe0qa+yI6HnpHsB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFBQTY1QTUyNzFEMzFCMTQ4NjAyNDM3QUM2Mzg1RkU5
NkI0QUM2MDAeFw0yMTEwMTIxMjMxMDBaFw0yMjEwMTExMjM2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU1Nzc2RDE3NEFCNDdCNzg0
OUY2NDY5NkE1RUU0QTJERTRFMUI3QTIxNTY0MkE4MzZFODFDMjFEOEU2QjFGN0RC
OTJBMzM5QTM1QzVDQzY0ODlGNzdCODVGREY5QUI0REJFRDc5QkFEMkI4Q0RGRkQw
MzkyMUU5RUM1MzA5NTZCMEM1MUVDNDYzMDk0NkZDMDk4MkEyMDJGNjQwNkU3RDMx
MjhCRTY4RTJFODEwNjBCNjMxQTM5OEJBNjAxMTE3RkM5NUYxMUFGN0RCQzM1MDEw
M0YwOTA5QUI5M0Y5RDc2RUVGQUU0MkVEMEEyMDc4MjQwQ0JCMjE4ODRCNzM1QzRD
RjQ3NThCRTc3RjQxRjAyRjYzNzUxNkI1ODVEQzVDRDU5REYzMzEyMzBFNUM5RTFC
MkNFRTBBNUYyQzAyOTc1RUFDNjBCNTQ3QjBFRTFEOUU2QkVCNzFFRDI0ODhFOTk5
NzA5MjgyQjY3Njg5MEY2NzlEOUNDNTNDMEJFNzc2MUFDRUY4REY4NTkxNzlGQ0Iy
NjY3RTk4NTQ4NzNGQUYwNDFBODRCNjZFQjYyMDM1Rjk1N0U0Mzc3RkI0NUZEODRC
OUI3NTY2QTU2MTVDN0JCM0U5RTM4NTlDQTc2MjQzRTRFNzc3NDI5QzhGMzNDQ0U0
NDAwMDYxQzMwNTAyQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvld20XSrR7eEn2Rpal7kot5OG3ohVkKoNugcIdjmsffbkqM5o1xc
xkifd7hf35q02+15utK4zf/QOSHp7FMJVrDFHsRjCUb8CYKiAvZAbn0xKL5o4ugQ
YLYxo5i6YBEX/JXxGvfbw1AQPwkJq5P5127vrkLtCiB4JAy7IYhLc1xM9HWL539B
8C9jdRa1hdxc1Z3zMSMOXJ4bLO4KXywCl16sYLVHsO4dnmvrce0kiOmZcJKCtnaJ
D2ednMU8C+d2Gs7434WRefyyZn6YVIc/rwQahLZutiA1+VfkN3+0X9hLm3VmpWFc
e7Pp44Wcp2JD5Od3QpyPM8zkQABhwwUCtQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPUUFPdOGL0AXLAs5fW4fmWYT7iaMB8GA1UdIwQYMBaAFOGqZaUnHTGxSGAkN6xj
hf6WtKxgMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdTYkNYajlpN3RRMUZj
WEdtNjVvRlRHMWt1ZUpqUkR3ZEtOczlrUHE4eU1OLzAvRTFBQTY1QTUyNzFEMzFC
MTQ4NjAyNDM3QUM2Mzg1RkU5NkI0QUM2MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMUFBNjVBNTI3MUQzMUIxNDg2MDI0MzdBQzYzODVGRTk2QjRB
QzYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83U2JDWGo5aTd0UTFGY1hHbTY1
b0ZURzFrdWVKalJEd2RLTnM5a1BxOHlNTi8wLzM0MzUyZTMyMzMzNzJlMzEzMDM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Le1sMA0GCSqGSIb3DQEBCwUAA4IBAQDUoZaxmQtdMFnEUtluoSIKEkKuDkZ6zQwP
vzFwVqPZ13I5J1/oPMrJSjGZJORKvUEKIv9r4T3EzxbVk9eZb7oobaS72Tf6wYF4
gjbh+zcrg6Q8TurQ06qrwF2Lm6tWOv1KMHlQFp2JpTf9/0bODjG+v2zyNYx13JHP
MAj0ZRkP0dduepfzdmQYysDCOr/djXuOX7fjYFtql2FL8p8MSXGnKtiFOUJnZtEu
ooOiVDmveErXXOMEBCKwwb0XAzUfYdKxmSRg+J/V3uI7/MYjzE8GvJejRDDFwvfV
gUGvrTVDcAezDMFm14MLbj8HS7hSz507zWANIEj4SDCWkFuUEho9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org