Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3131312e302f32342d3234203d3e20323632343831.roa
File:                     34352e3233372e3131312e302f32342d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          x2U9SoX3X2ytzTkkMf231etZZQOpOfcXAo87wSuZnx0=
Subject key identifier:   E2:C1:FD:9B:7B:B0:35:F0:AD:24:52:E9:14:AF:36:64:72:55:8B:44
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       21F23A1FC804E397A96341A1080E791CE53CD895
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3131312e302f32342d3234203d3e20323632343831.roa
Signing time:             Tue 12 Oct 2021 12:36:00 +0000
ROA not before:           Tue 12 Oct 2021 12:31:00 +0000
ROA not after:            Tue 11 Oct 2022 12:36:00 +0000
asID:                     262481
IP address blocks:        45.237.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f2:3a:1f:c8:04:e3:97:a9:63:41:a1:08:0e:79:1c:e5:3c:d8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Oct 12 12:31:00 2021 GMT
            Not After : Oct 11 12:36:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:cf:2e:40:c2:ba:55:3c:e9:1f:f7:10:a6:
                    bc:70:88:e2:12:a9:36:c5:e4:02:a0:07:5c:9a:81:
                    7a:33:b8:34:ce:b9:d3:81:0b:83:6e:61:12:72:08:
                    3a:1b:74:dd:f2:9a:32:0f:48:f0:81:c5:05:43:d9:
                    99:57:e3:c0:02:84:a9:c0:7a:ec:6c:b5:62:66:b2:
                    b0:56:7b:f6:6e:a2:43:9d:ef:73:91:c2:c9:4e:0a:
                    ab:88:c8:32:c4:b2:82:31:a9:7c:17:e6:2d:fb:58:
                    75:0c:62:69:8f:fb:f6:34:bd:5b:d6:c8:8d:c8:20:
                    6a:7e:18:e8:06:2e:c9:43:45:7c:f5:05:84:9a:98:
                    b8:33:a0:0d:71:24:df:39:95:c1:92:29:1c:40:a0:
                    47:c3:df:fe:3c:cb:ca:7b:63:04:06:e1:17:b8:61:
                    5a:a6:ac:ae:e0:a4:e1:ca:71:9e:b8:7c:e3:06:3c:
                    31:2f:d5:85:db:25:f6:38:92:ed:c3:57:53:c0:b6:
                    a1:b7:e9:17:3e:a9:f0:d8:87:07:02:b2:5b:75:df:
                    d8:75:3e:ae:8f:83:75:21:9c:3b:26:a9:18:90:e9:
                    92:a0:a4:d7:7e:f1:a1:da:76:40:5f:cd:72:b6:20:
                    d2:80:fc:49:ac:39:01:77:0d:a9:0c:0c:7e:18:d4:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C1:FD:9B:7B:B0:35:F0:AD:24:52:E9:14:AF:36:64:72:55:8B:44
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3131312e302f32342d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ce:3a:26:d8:82:c1:99:66:d1:f3:11:4a:46:88:20:1c:d4:
         cf:ce:67:cb:dc:9c:ee:26:33:b3:86:ae:ff:7b:a3:60:10:bb:
         1c:48:18:b9:9b:31:44:0f:bf:5d:b4:97:ca:4d:7c:7f:26:69:
         70:8c:78:bf:2c:0c:b2:2e:62:65:f5:17:5f:a8:dc:3a:ee:f3:
         49:1c:51:14:7b:d5:49:75:f1:dc:ea:20:5b:ad:4b:99:fb:86:
         df:70:59:59:cc:00:50:80:54:bf:cb:57:6b:4e:ec:49:1a:b1:
         2c:53:d5:43:c5:a8:6b:b7:94:77:35:87:07:07:b3:77:42:36:
         36:bd:8a:d5:0a:80:00:4e:14:86:92:63:fe:e0:13:22:48:6e:
         42:3a:71:fa:90:b1:f1:67:3e:15:f9:fe:08:d1:98:ff:d0:ab:
         0e:11:61:d6:ed:79:fb:93:38:de:2b:ab:a1:24:9c:e6:18:c4:
         82:c9:e2:a8:6d:ee:42:a5:de:8b:6c:56:35:8b:f1:86:c2:db:
         86:8c:9d:76:f4:57:5a:6a:db:df:cf:ad:f1:d7:7a:bd:2b:bc:
         3b:3c:09:fe:a5:72:30:1e:c8:94:6e:d9:8d:4d:f8:fe:fc:80:
         db:58:25:e0:66:e4:f3:d3:af:ae:4c:a2:f7:8e:34:8f:4e:e9:
         d9:28:77:54
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUIfI6H8gE45epY0GhCA55HOU82JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFBQTY1QTUyNzFEMzFCMTQ4NjAyNDM3QUM2Mzg1RkU5
NkI0QUM2MDAeFw0yMTEwMTIxMjMxMDBaFw0yMjEwMTExMjM2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDIwN0NGMkU0MEMyQkE1NTND
RTkxRkY3MTBBNkJDNzA4OEUyMTJBOTM2QzVFNDAyQTAwNzVDOUE4MTdBMzNCODM0
Q0VCOUQzODEwQjgzNkU2MTEyNzIwODNBMUI3NERERjI5QTMyMEY0OEYwODFDNTA1
NDNEOTk5NTdFM0MwMDI4NEE5QzA3QUVDNkNCNTYyNjZCMkIwNTY3QkY2NkVBMjQz
OURFRjczOTFDMkM5NEUwQUFCODhDODMyQzRCMjgyMzFBOTdDMTdFNjJERkI1ODc1
MEM2MjY5OEZGQkY2MzRCRDVCRDZDODhEQzgyMDZBN0UxOEU4MDYyRUM5NDM0NTdD
RjUwNTg0OUE5OEI4MzNBMDBENzEyNERGMzk5NUMxOTIyOTFDNDBBMDQ3QzNERkZF
M0NDQkNBN0I2MzA0MDZFMTE3Qjg2MTVBQTZBQ0FFRTBBNEUxQ0E3MTlFQjg3Q0Uz
MDYzQzMxMkZENTg1REIyNUY2Mzg5MkVEQzM1NzUzQzBCNkExQjdFOTE3M0VBOUYw
RDg4NzA3MDJCMjVCNzVERkQ4NzUzRUFFOEY4Mzc1MjE5QzNCMjZBOTE4OTBFOTky
QTBBNEQ3N0VGMUExREE3NjQwNUZDRDcyQjYyMEQyODBGQzQ5QUMzOTAxNzcwREE5
MEMwQzdFMThENDJDMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0gfPLkDCulU86R/3EKa8cIjiEqk2xeQCoAdcmoF6M7g0zrnTgQuD
bmEScgg6G3Td8poyD0jwgcUFQ9mZV+PAAoSpwHrsbLViZrKwVnv2bqJDne9zkcLJ
TgqriMgyxLKCMal8F+Yt+1h1DGJpj/v2NL1b1siNyCBqfhjoBi7JQ0V89QWEmpi4
M6ANcSTfOZXBkikcQKBHw9/+PMvKe2MEBuEXuGFapqyu4KThynGeuHzjBjwxL9WF
2yX2OJLtw1dTwLaht+kXPqnw2IcHArJbdd/YdT6uj4N1IZw7JqkYkOmSoKTXfvGh
2nZAX81ytiDSgPxJrDkBdw2pDAx+GNQsAwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOLB/Zt7sDXwrSRS6RSvNmRyVYtEMB8GA1UdIwQYMBaAFOGqZaUnHTGxSGAkN6xj
hf6WtKxgMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdTYkNYajlpN3RRMUZj
WEdtNjVvRlRHMWt1ZUpqUkR3ZEtOczlrUHE4eU1OLzAvRTFBQTY1QTUyNzFEMzFC
MTQ4NjAyNDM3QUM2Mzg1RkU5NkI0QUM2MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMUFBNjVBNTI3MUQzMUIxNDg2MDI0MzdBQzYzODVGRTk2QjRB
QzYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83U2JDWGo5aTd0UTFGY1hHbTY1
b0ZURzFrdWVKalJEd2RLTnM5a1BxOHlNTi8wLzM0MzUyZTMyMzMzNzJlMzEzMTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Le1vMA0GCSqGSIb3DQEBCwUAA4IBAQAAzjom2ILBmWbR8xFKRoggHNTPzmfL3Jzu
JjOzhq7/e6NgELscSBi5mzFED79dtJfKTXx/JmlwjHi/LAyyLmJl9RdfqNw67vNJ
HFEUe9VJdfHc6iBbrUuZ+4bfcFlZzABQgFS/y1drTuxJGrEsU9VDxahrt5R3NYcH
B7N3QjY2vYrVCoAAThSGkmP+4BMiSG5COnH6kLHxZz4V+f4I0Zj/0KsOEWHW7Xn7
kzjeK6uhJJzmGMSCyeKobe5Cpd6LbFY1i/GGwtuGjJ129Fdaatvfz63x13q9K7w7
PAn+pXIwHsiUbtmNTfj+/IDbWCXgZuTz06+uTKL3jjSPTunZKHdU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org