Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32322d3232203d3e20323638313630.roa
File:                     34352e3137302e3134342e302f32322d3232203d3e20323638313630.roa (raw, json)
Hash identifier:          ni97X3Ni17s4mKWmhXZK+039PUUKTFmtSGIUYHm6rd4=
Subject key identifier:   10:1F:87:9F:A0:D7:FD:C8:CF:A1:53:0A:B8:F8:31:3D:7F:C0:B4:41
Certificate issuer:       /CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
Certificate serial:       5C400531B31D62275C16A22217849EFF6942DCA9
Authority key identifier: 1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32322d3232203d3e20323638313630.roa
Signing time:             Tue 06 Dec 2022 15:22:48 +0000
ROA not before:           Tue 06 Dec 2022 15:17:48 +0000
ROA not after:            Tue 05 Dec 2023 15:22:48 +0000
asID:                     268160
IP address blocks:        45.170.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:40:05:31:b3:1d:62:27:5c:16:a2:22:17:84:9e:ff:69:42:dc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
        Validity
            Not Before: Dec  6 15:17:48 2022 GMT
            Not After : Dec  5 15:22:48 2023 GMT
        Subject: CN=101F879FA0D7FDC8CFA1530AB8F8313D7FC0B441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:a2:76:8c:bc:4a:b6:e5:82:4b:2d:2e:50:
                    57:ef:41:34:36:e9:d1:43:57:40:e5:83:59:24:a3:
                    1c:08:dd:eb:b0:3d:ae:66:2f:0c:2e:e1:28:02:54:
                    60:8f:2c:42:a1:b5:c1:93:68:a2:3a:45:85:08:6e:
                    a4:7b:8c:8b:96:ac:d1:10:c6:cf:42:51:35:2b:dc:
                    fb:d0:95:ac:ae:3a:5b:dc:cb:6a:e6:f1:cd:69:02:
                    8f:2c:6b:fb:71:42:57:93:72:5c:95:2f:ef:2f:fc:
                    69:24:aa:bb:11:e1:fc:ca:54:c0:aa:7c:90:fd:d0:
                    03:f7:96:9d:c3:36:9c:df:78:6f:c0:7a:ff:f4:e2:
                    b9:dd:93:5f:a1:a7:bb:4e:f2:ce:be:0b:7a:15:cc:
                    a6:54:60:b6:c3:77:df:a5:33:51:74:50:82:30:bc:
                    c9:dc:e1:45:57:a7:ec:f8:9f:23:fe:ee:a2:2e:e5:
                    e3:14:7d:a9:9d:92:c7:9d:d5:62:6c:b1:6a:81:ec:
                    86:c2:5d:68:bc:e2:6d:ba:50:4a:b8:84:31:90:cd:
                    f3:c5:11:da:28:a5:ee:4e:eb:1a:47:0a:f6:7e:a6:
                    f1:e4:0d:9b:b6:67:da:19:f2:91:56:fe:40:c2:bb:
                    18:1c:74:21:2c:8c:99:e3:2f:7e:35:eb:9e:64:ad:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1F:87:9F:A0:D7:FD:C8:CF:A1:53:0A:B8:F8:31:3D:7F:C0:B4:41
            X509v3 Authority Key Identifier:
                keyid:1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32322d3232203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:29:79:77:93:61:93:7a:10:39:42:ff:0c:62:7d:40:c1:a3:
         1a:7e:bc:1b:b4:bf:9a:df:01:39:c6:3e:85:c0:07:a5:98:7e:
         67:f2:3b:4a:c2:af:de:23:27:be:a2:0e:74:aa:3c:ec:38:a8:
         81:80:86:25:08:70:ff:5e:7e:8e:7c:57:2b:7b:e3:8c:26:a0:
         af:81:1b:f9:0a:4f:50:ab:c7:9f:51:fd:07:75:5a:74:39:0b:
         8b:d6:7c:47:48:18:54:18:5f:7e:c3:72:6a:18:3b:06:46:24:
         22:32:f8:48:0c:30:65:ec:f6:41:69:6c:66:61:d7:52:fe:ba:
         cd:fa:2a:5d:f8:56:d4:84:46:b4:d0:c5:25:6a:77:ad:a8:c6:
         84:d8:dc:a0:a7:85:c5:ba:1d:b1:1b:9b:f0:26:cd:86:6c:88:
         a8:1d:d4:a3:f6:3b:bc:6a:b3:27:b0:c1:33:13:32:c0:cf:62:
         37:e7:fc:c9:c8:80:4e:65:01:84:f5:23:d5:32:18:97:d2:8a:
         df:af:35:db:b6:9f:0b:9f:f6:15:cf:88:34:da:60:e0:6b:50:
         55:b8:07:d8:d6:34:bd:8d:df:2c:b4:4b:0e:da:84:91:0a:f2:
         56:55:0a:bc:4c:2f:a1:1b:a2:80:29:a6:28:ea:31:39:73:94:
         d9:56:62:8f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXEAFMbMdYidcFqIiF4Se/2lC3KkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMxMUU4NzcwRkE2MkNCMjNGN0Q3N0UyQzI2MkQ4MEQ1
NEI2MEJGMDAeFw0yMjEyMDYxNTE3NDhaFw0yMzEyMDUxNTIyNDhaMDMxMTAvBgNV
BAMTKDEwMUY4NzlGQTBEN0ZEQzhDRkExNTMwQUI4RjgzMTNEN0ZDMEI0NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjI6J2jLxKtuWCSy0uUFfvQTQ2
6dFDV0Dlg1kkoxwI3euwPa5mLwwu4SgCVGCPLEKhtcGTaKI6RYUIbqR7jIuWrNEQ
xs9CUTUr3PvQlayuOlvcy2rm8c1pAo8sa/txQleTclyVL+8v/GkkqrsR4fzKVMCq
fJD90AP3lp3DNpzfeG/Aev/04rndk1+hp7tO8s6+C3oVzKZUYLbDd9+lM1F0UIIw
vMnc4UVXp+z4nyP+7qIu5eMUfamdksed1WJssWqB7IbCXWi84m26UEq4hDGQzfPF
Edoope5O6xpHCvZ+pvHkDZu2Z9oZ8pFW/kDCuxgcdCEsjJnjL341655krVZZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEB+Hn6DX/cjPoVMKuPgxPX/AtEEwHwYDVR0j
BBgwFoAUHBHodw+mLLI/fXfiwmLYDVS2C/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JXb290YzNxYVYxb0s3SDZyY1E0RFgzMktCVFB3ZnFvTnluUTRVYmdy
VHkvMC8xQzExRTg3NzBGQTYyQ0IyM0Y3RDc3RTJDMjYyRDgwRDU0QjYwQkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDMTFFODc3MEZBNjJDQjIz
RjdENzdFMkMyNjJEODBENTRCNjBCRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiV29vdGMzcWFWMW9LN0g2cmNRNERYMzJLQlRQd2Zxb055blE0VWJnclR5LzAv
MzQzNTJlMzEzNzMwMmUzMTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMTM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqpAwDQYJKoZIhvcNAQELBQADggEBAHcpeXeT
YZN6EDlC/wxifUDBoxp+vBu0v5rfATnGPoXAB6WYfmfyO0rCr94jJ76iDnSqPOw4
qIGAhiUIcP9efo58Vyt744wmoK+BG/kKT1Crx59R/Qd1WnQ5C4vWfEdIGFQYX37D
cmoYOwZGJCIy+EgMMGXs9kFpbGZh11L+us36Kl34VtSERrTQxSVqd62oxoTY3KCn
hcW6HbEbm/AmzYZsiKgd1KP2O7xqsyewwTMTMsDPYjfn/MnIgE5lAYT1I9UyGJfS
it+vNdu2nwuf9hXPiDTaYOBrUFW4B9jWNL2N3yy0Sw7ahJEK8lZVCrxML6EbooAp
pijqMTlzlNlWYo8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:34 2023 by rpki-client on console-ams.rpki-client.org