Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/34352e342e33322e302f32322d3234203d3e20323636303434.roa
File:                     34352e342e33322e302f32322d3234203d3e20323636303434.roa (raw, json)
Hash identifier:          5gwq1Wb2q2yITw3jKjdvBPC4xRVepGYrfQQ32NMyAv0=
Subject key identifier:   A6:A9:AE:2E:BC:33:5F:35:A1:52:F7:9E:61:5E:38:CD:76:44:0E:A4
Certificate issuer:       /CN=2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3
Certificate serial:       6446FD91B485D18F4F6890315C04E3E50D27241C
Authority key identifier: 2D:18:FF:D1:0A:63:F8:AA:B6:6C:7D:B5:69:F0:EE:28:CE:D5:26:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/34352e342e33322e302f32322d3234203d3e20323636303434.roa
Signing time:             Thu 04 Apr 2024 01:43:57 +0000
ROA not before:           Thu 04 Apr 2024 01:38:57 +0000
ROA not after:            Thu 03 Apr 2025 01:43:57 +0000
asID:                     266044
IP address blocks:        45.4.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:46:fd:91:b4:85:d1:8f:4f:68:90:31:5c:04:e3:e5:0d:27:24:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3
        Validity
            Not Before: Apr  4 01:38:57 2024 GMT
            Not After : Apr  3 01:43:57 2025 GMT
        Subject: CN=A6A9AE2EBC335F35A152F79E615E38CD76440EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:36:d3:2d:e9:4e:b2:94:9c:77:aa:af:c3:
                    23:b4:7b:41:0b:bd:9b:59:40:d4:04:34:93:5a:64:
                    c0:d5:ca:de:a7:89:36:26:6f:f5:8d:4c:66:15:46:
                    06:8c:70:6e:52:73:cf:89:90:02:08:d8:99:9a:09:
                    b5:70:dc:e3:64:01:16:b0:ae:08:e1:b6:97:fb:59:
                    3f:4c:7a:f2:ab:e0:c0:fd:8c:ab:95:a2:04:bd:11:
                    ac:5d:34:89:51:a5:0c:a3:20:02:44:5f:e3:f0:e1:
                    15:eb:3b:51:15:6c:a9:32:4f:e1:0e:65:1a:a4:99:
                    e5:61:ae:5c:dd:74:b8:b1:04:6d:bd:ac:e7:55:19:
                    b6:ba:0a:d3:28:fa:57:97:3e:8b:53:80:3a:ff:83:
                    75:82:b4:85:7f:f5:3d:7f:2b:82:96:48:3f:90:2f:
                    f9:ae:42:b0:a8:cf:79:1e:a9:1f:c1:f9:71:0c:34:
                    e1:d2:63:ab:4d:4c:43:a4:69:07:55:99:4e:0e:49:
                    9c:8f:23:af:73:5c:4c:6c:bc:76:ea:1c:1b:aa:d2:
                    98:2e:8a:22:0c:27:d6:db:0e:ef:44:db:c5:9a:a1:
                    e3:74:37:a8:bc:d9:ec:16:03:da:b8:29:d1:a0:bf:
                    32:57:bf:b1:2e:fd:b8:60:b1:93:63:22:84:c9:cd:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A9:AE:2E:BC:33:5F:35:A1:52:F7:9E:61:5E:38:CD:76:44:0E:A4
            X509v3 Authority Key Identifier:
                keyid:2D:18:FF:D1:0A:63:F8:AA:B6:6C:7D:B5:69:F0:EE:28:CE:D5:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/34352e342e33322e302f32322d3234203d3e20323636303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:80:6c:6f:52:11:5a:73:bf:81:c6:dc:c7:ce:fa:3b:6f:
         86:d7:6d:b3:22:a4:5d:73:80:76:25:ef:25:e3:be:dd:85:71:
         4d:de:3b:96:53:bd:5c:3d:55:7a:24:8f:4e:7a:4b:9a:ba:ac:
         26:f1:25:e2:14:63:af:bc:ba:ad:1d:95:c4:59:4b:46:b1:4f:
         2b:ce:78:cd:e0:20:21:1f:b1:72:4c:ac:c8:7e:e4:dc:a3:ef:
         e3:f9:e5:de:65:82:f8:88:07:4d:97:fc:a4:ab:6b:fb:16:93:
         8f:65:43:15:28:fa:b4:be:03:51:fe:f7:d3:31:9e:30:83:9d:
         27:12:69:bd:d7:69:04:11:9f:21:16:38:52:b2:bb:54:48:3a:
         f2:9b:0f:da:82:7f:5d:ed:64:59:f2:5e:85:f9:38:3e:60:c3:
         49:c7:4c:01:74:b7:a3:11:a5:85:db:22:6e:d6:fd:da:e6:59:
         64:18:61:89:4f:4d:f1:c3:6b:73:44:4f:71:d1:88:b3:04:94:
         03:43:c4:b0:48:60:75:4f:ba:e4:db:34:c7:ab:2c:f0:d8:64:
         17:2a:6f:38:e8:75:05:26:79:18:21:e8:4d:a7:a3:98:0e:4a:
         4f:9f:30:4a:7c:25:c1:7c:c1:6b:44:f1:7d:31:50:fa:88:44:
         1e:da:a6:41
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUZEb9kbSF0Y9PaJAxXATj5Q0nJBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxOEZGRDEwQTYzRjhBQUI2NkM3REI1NjlGMEVFMjhD
RUQ1MjZGMzAeFw0yNDA0MDQwMTM4NTdaFw0yNTA0MDMwMTQzNTdaMDMxMTAvBgNV
BAMTKEE2QTlBRTJFQkMzMzVGMzVBMTUyRjc5RTYxNUUzOENENzY0NDBFQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksTbTLelOspScd6qvwyO0e0EL
vZtZQNQENJNaZMDVyt6niTYmb/WNTGYVRgaMcG5Sc8+JkAII2JmaCbVw3ONkARaw
rgjhtpf7WT9MevKr4MD9jKuVogS9EaxdNIlRpQyjIAJEX+Pw4RXrO1EVbKkyT+EO
ZRqkmeVhrlzddLixBG29rOdVGba6CtMo+leXPotTgDr/g3WCtIV/9T1/K4KWSD+Q
L/muQrCoz3keqR/B+XEMNOHSY6tNTEOkaQdVmU4OSZyPI69zXExsvHbqHBuq0pgu
iiIMJ9bbDu9E28WaoeN0N6i82ewWA9q4KdGgvzJXv7Eu/bhgsZNjIoTJzXrtAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUpqmuLrwzXzWhUveeYV44zXZEDqQwHwYDVR0j
BBgwFoAULRj/0Qpj+Kq2bH21afDuKM7VJvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dEYVhtMzZEZUFOa3cyMlpyNFdUdjU2cU5yd21NaW82ZVVrQk1pZlVt
N2IvMS8yRDE4RkZEMTBBNjNGOEFBQjY2QzdEQjU2OUYwRUUyOENFRDUyNkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEMThGRkQxMEE2M0Y4QUFC
NjZDN0RCNTY5RjBFRTI4Q0VENTI2RjMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXRGFYbTM2RGVBTmt3MjJacjRXVHY1NnFOcndtTWlvNmVVa0JNaWZVbTdiLzEv
MzQzNTJlMzQyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM0
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBCAwDQYJKoZIhvcNAQELBQADggEBAGTvgGxvUhFac7+B
xtzHzvo7b4bXbbMipF1zgHYl7yXjvt2FcU3eO5ZTvVw9VXokj056S5q6rCbxJeIU
Y6+8uq0dlcRZS0axTyvOeM3gICEfsXJMrMh+5Nyj7+P55d5lgviIB02X/KSra/sW
k49lQxUo+rS+A1H+99MxnjCDnScSab3XaQQRnyEWOFKyu1RIOvKbD9qCf13tZFny
XoX5OD5gw0nHTAF0t6MRpYXbIm7W/drmWWQYYYlPTfHDa3NET3HRiLMElANDxLBI
YHVPuuTbNMerLPDYZBcqbzjodQUmeRgh6E2no5gOSk+fMEp8JcF8wWtE8X0xUPqI
RB7apkE=
-----END CERTIFICATE-----
Generated at Sat Jul 13 11:28:03 2024 by rpki-client on console-fra.rpki-client.org