Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/34352e342e33322e302f32322d3234203d3e20323636303434.roa
File:                     34352e342e33322e302f32322d3234203d3e20323636303434.roa (raw, json)
Hash identifier:          AjEocTwjNHcPH88YVSxHMhfFSMvp3ypJS2/dYCkscRk=
Subject key identifier:   7A:11:45:81:BF:90:DA:28:AF:90:70:84:9A:0F:A3:39:F3:E5:ED:D2
Certificate issuer:       /CN=2E468C04D7FFBBAF073C698E3CB30022A69D610E
Certificate serial:       4CAD7CCED5C4B34D7BD0D3F83A2D8E0126B8E278
Authority key identifier: 2E:46:8C:04:D7:FF:BB:AF:07:3C:69:8E:3C:B3:00:22:A6:9D:61:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E468C04D7FFBBAF073C698E3CB30022A69D610E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/34352e342e33322e302f32322d3234203d3e20323636303434.roa
Signing time:             Wed 29 Nov 2023 19:16:41 +0000
ROA not before:           Wed 29 Nov 2023 19:11:41 +0000
ROA not after:            Wed 27 Nov 2024 19:16:41 +0000
asID:                     266044
IP address blocks:        45.4.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ad:7c:ce:d5:c4:b3:4d:7b:d0:d3:f8:3a:2d:8e:01:26:b8:e2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E468C04D7FFBBAF073C698E3CB30022A69D610E
        Validity
            Not Before: Nov 29 19:11:41 2023 GMT
            Not After : Nov 27 19:16:41 2024 GMT
        Subject: CN=7A114581BF90DA28AF9070849A0FA339F3E5EDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:fe:12:d7:15:9c:28:9a:d3:8b:ff:de:a3:
                    bb:41:a9:ec:01:92:e6:b8:3b:90:e5:a4:f6:fe:86:
                    c2:2e:69:02:15:1f:92:4f:1d:50:46:32:2f:f9:20:
                    36:08:52:b5:e3:00:0b:4a:b7:c7:7f:1d:50:77:75:
                    d6:b2:fe:93:b0:28:98:c4:e7:8a:ef:16:c2:53:70:
                    52:d0:51:0d:30:3a:17:37:28:75:40:80:58:be:c4:
                    49:aa:97:0e:76:d8:3b:d7:41:f9:e2:4e:07:80:a5:
                    9b:ae:86:f2:22:5f:eb:6c:8d:70:1e:08:5e:00:33:
                    0f:11:9d:53:fe:17:d0:de:fa:00:c4:5e:47:38:96:
                    48:71:73:7f:8b:0d:3c:bb:29:8a:b5:1e:10:ed:b9:
                    c4:e4:da:a5:c1:49:e8:80:c0:7f:32:64:13:28:0d:
                    42:a8:4c:91:06:ca:5a:b7:70:1c:1d:2b:b3:2b:42:
                    a7:50:7d:8a:d2:73:26:c1:47:90:a1:5a:2e:5a:92:
                    6d:32:63:94:c3:65:64:0e:84:15:bf:17:82:1a:e8:
                    4f:27:24:06:c6:64:67:97:97:d6:90:bb:68:0f:ac:
                    24:7d:03:d1:a4:49:25:f8:32:4b:21:b0:71:03:e1:
                    35:7b:5e:58:74:c0:bd:c5:60:c3:cd:a0:db:25:0f:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:11:45:81:BF:90:DA:28:AF:90:70:84:9A:0F:A3:39:F3:E5:ED:D2
            X509v3 Authority Key Identifier:
                keyid:2E:46:8C:04:D7:FF:BB:AF:07:3C:69:8E:3C:B3:00:22:A6:9D:61:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/2E468C04D7FFBBAF073C698E3CB30022A69D610E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E468C04D7FFBBAF073C698E3CB30022A69D610E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/34352e342e33322e302f32322d3234203d3e20323636303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:88:e6:98:7b:ec:7b:c2:1f:88:2d:51:a1:1a:1f:97:bb:
         55:48:f4:a9:0c:07:61:e4:55:5f:66:25:4e:56:c2:84:21:96:
         32:b1:f1:fe:df:5e:68:9b:20:d5:b8:4e:3d:9b:68:ba:0b:42:
         de:55:73:6b:b0:10:24:40:2d:b2:c2:92:87:3e:9f:b5:3e:f1:
         15:81:89:b8:33:cd:7c:94:42:38:00:05:d7:12:fb:26:e8:7b:
         ec:0a:24:14:39:63:49:b0:8d:cc:19:26:bd:58:42:e5:88:2f:
         9b:eb:ef:95:3b:fe:94:66:b9:c9:32:6e:ac:69:34:31:40:ba:
         e5:58:8d:ce:8d:c3:4c:cb:c2:c7:12:13:3b:55:3e:5e:6e:f0:
         1f:71:b8:38:cc:97:0d:b7:7f:e1:ee:be:45:de:1e:07:61:01:
         be:b3:63:29:ca:c2:fa:b0:44:06:24:60:a8:ef:1d:3c:bd:27:
         35:5d:45:42:c0:c0:d3:95:a3:79:d5:ec:d4:27:b8:f8:c2:4f:
         f1:01:2d:a3:b9:67:7b:aa:cc:fc:4c:a5:e3:b0:46:d5:1f:cb:
         69:b6:c8:d2:2e:b1:34:c8:8e:83:12:81:24:93:5d:f0:7b:c4:
         37:ad:da:e0:2c:8c:35:c6:68:8d:82:d9:fd:cf:7b:d7:ef:7c:
         86:30:f1:d0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUTK18ztXEs0170NP4Oi2OASa44ngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0NjhDMDREN0ZGQkJBRjA3M0M2OThFM0NCMzAwMjJB
NjlENjEwRTAeFw0yMzExMjkxOTExNDFaFw0yNDExMjcxOTE2NDFaMDMxMTAvBgNV
BAMTKDdBMTE0NTgxQkY5MERBMjhBRjkwNzA4NDlBMEZBMzM5RjNFNUVERDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbf4S1xWcKJrTi//eo7tBqewB
kua4O5DlpPb+hsIuaQIVH5JPHVBGMi/5IDYIUrXjAAtKt8d/HVB3dday/pOwKJjE
54rvFsJTcFLQUQ0wOhc3KHVAgFi+xEmqlw522DvXQfniTgeApZuuhvIiX+tsjXAe
CF4AMw8RnVP+F9De+gDEXkc4lkhxc3+LDTy7KYq1HhDtucTk2qXBSeiAwH8yZBMo
DUKoTJEGylq3cBwdK7MrQqdQfYrScybBR5ChWi5akm0yY5TDZWQOhBW/F4Ia6E8n
JAbGZGeXl9aQu2gPrCR9A9GkSSX4MkshsHED4TV7Xlh0wL3FYMPNoNslDzFbAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUehFFgb+Q2iivkHCEmg+jOfPl7dIwHwYDVR0j
BBgwFoAULkaMBNf/u68HPGmOPLMAIqadYQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dEYVhtMzZEZUFOa3cyMlpyNFdUdjU2cU5yd21NaW82ZVVrQk1pZlVt
N2IvMC8yRTQ2OEMwNEQ3RkZCQkFGMDczQzY5OEUzQ0IzMDAyMkE2OUQ2MTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJFNDY4QzA0RDdGRkJCQUYw
NzNDNjk4RTNDQjMwMDIyQTY5RDYxMEUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXRGFYbTM2RGVBTmt3MjJacjRXVHY1NnFOcndtTWlvNmVVa0JNaWZVbTdiLzAv
MzQzNTJlMzQyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM0
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBCAwDQYJKoZIhvcNAQELBQADggEBAIXviOaYe+x7wh+I
LVGhGh+Xu1VI9KkMB2HkVV9mJU5WwoQhljKx8f7fXmibINW4Tj2baLoLQt5Vc2uw
ECRALbLCkoc+n7U+8RWBibgzzXyUQjgABdcS+yboe+wKJBQ5Y0mwjcwZJr1YQuWI
L5vr75U7/pRmuckybqxpNDFAuuVYjc6Nw0zLwscSEztVPl5u8B9xuDjMlw23f+Hu
vkXeHgdhAb6zYynKwvqwRAYkYKjvHTy9JzVdRULAwNOVo3nV7NQnuPjCT/EBLaO5
Z3uqzPxMpeOwRtUfy2m2yNIusTTIjoMSgSSTXfB7xDet2uAsjDXGaI2C2f3Pe9fv
fIYw8dA=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org