Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e37302e302f32332d3233203d3e20323637323232.roa
File:                     34352e3232392e37302e302f32332d3233203d3e20323637323232.roa (raw, json)
Hash identifier:          OP5Eg+VvvWLTf3Xt1VXk0EFHmV2HNTqMpT3lZaL+3fw=
Subject key identifier:   E8:42:B4:36:E2:9D:0A:32:7D:FB:10:56:AC:95:9D:BC:E0:D9:49:A1
Certificate issuer:       /CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
Certificate serial:       21CA5B67411D470D3362F56E92DB8D9D17259756
Authority key identifier: 57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e37302e302f32332d3233203d3e20323637323232.roa
Signing time:             Fri 25 Aug 2023 14:53:52 +0000
ROA not before:           Fri 25 Aug 2023 14:48:52 +0000
ROA not after:            Fri 23 Aug 2024 14:53:52 +0000
asID:                     267222
IP address blocks:        45.229.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ca:5b:67:41:1d:47:0d:33:62:f5:6e:92:db:8d:9d:17:25:97:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
        Validity
            Not Before: Aug 25 14:48:52 2023 GMT
            Not After : Aug 23 14:53:52 2024 GMT
        Subject: CN=E842B436E29D0A327DFB1056AC959DBCE0D949A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:74:cc:01:0f:01:86:c7:ed:b4:4e:ac:a8:
                    ee:09:ce:3e:3b:b4:e8:02:15:31:bf:6b:c2:06:09:
                    d9:48:a3:48:52:d0:2c:ae:02:b0:91:51:ea:96:d4:
                    41:a2:ec:e4:1a:9f:d6:63:a2:a8:cc:9f:6b:39:76:
                    e7:d1:6a:e2:c7:10:0b:98:be:d2:12:de:28:e1:be:
                    58:db:e2:27:ea:a0:e9:e0:0d:b3:78:e2:8a:0c:b2:
                    18:e2:a4:d3:0f:78:46:b4:31:08:c6:57:41:13:7a:
                    d8:a1:3a:8f:96:7c:5e:05:28:ce:ef:e5:8a:be:dc:
                    82:0c:b0:14:66:57:40:e7:fa:91:d4:cb:c6:45:c5:
                    00:aa:68:67:70:4a:7c:f1:70:93:14:35:2e:10:48:
                    d3:3d:b8:85:76:43:4a:c7:15:1f:6b:4a:20:76:1d:
                    a0:af:50:9e:a7:cb:8d:7e:ad:e3:4b:2c:d9:2c:d6:
                    57:e1:03:5e:af:c4:87:e1:84:ca:68:8c:ed:fe:b4:
                    9d:d8:bd:d5:8b:ab:bb:6c:a9:c1:c2:f8:ef:47:e4:
                    3a:31:cc:24:04:24:b3:65:79:b4:65:b2:f7:73:c3:
                    b2:88:dd:10:cc:33:4c:1d:f4:00:8b:dc:6d:0a:1e:
                    34:49:8f:4f:2f:5d:21:6c:53:ee:25:c5:ca:f3:e3:
                    12:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:42:B4:36:E2:9D:0A:32:7D:FB:10:56:AC:95:9D:BC:E0:D9:49:A1
            X509v3 Authority Key Identifier:
                keyid:57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e37302e302f32332d3233203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:08:89:30:37:e9:19:67:ce:0d:68:7e:76:28:f0:ce:7f:b0:
         54:da:e8:c3:83:8e:59:e4:b5:5d:52:01:4b:27:ce:a8:a3:62:
         fa:25:5c:8e:e7:da:48:7e:6f:22:76:3c:e5:bf:5e:41:4d:a3:
         15:20:37:e3:f6:96:61:44:46:96:58:43:28:d8:06:53:11:fe:
         9e:7f:e3:bd:5b:6f:a7:16:e1:fd:25:bd:68:e1:38:c6:9c:c6:
         14:47:b3:25:09:70:95:a5:e1:32:1d:58:66:c7:0d:18:cd:f6:
         a8:ba:f5:d9:da:4f:11:80:b2:40:3d:a6:17:52:58:3f:cc:ad:
         c0:e4:37:04:ad:65:6a:24:85:81:49:57:ec:ba:82:4e:b9:74:
         e6:e4:22:8d:0d:ec:95:43:cb:3e:b6:03:bf:61:fb:20:38:d0:
         20:71:cc:26:b0:56:5b:be:22:65:62:61:05:16:1a:89:f1:4a:
         ab:10:1a:95:bf:f8:a1:45:c0:f2:bf:59:93:65:93:bd:a6:35:
         ed:26:92:00:20:e3:9e:0f:ad:6c:75:84:06:5b:87:38:7a:ed:
         b1:47:72:1e:fc:b1:ab:9e:70:76:4b:27:64:ad:4d:4b:90:11:
         6f:f8:8b:33:61:70:36:9c:99:67:05:2f:0e:8d:a1:b2:d6:b9:
         47:fd:bb:cb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIcpbZ0EdRw0zYvVuktuNnRcll1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdFMUVGNEJGMzNBNEI2QkFERjYyNjI4RjMxNjBEMDI2
NEY0MDhCOTAeFw0yMzA4MjUxNDQ4NTJaFw0yNDA4MjMxNDUzNTJaMDMxMTAvBgNV
BAMTKEU4NDJCNDM2RTI5RDBBMzI3REZCMTA1NkFDOTU5REJDRTBEOTQ5QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lHTMAQ8BhsfttE6sqO4Jzj47
tOgCFTG/a8IGCdlIo0hS0CyuArCRUeqW1EGi7OQan9ZjoqjMn2s5dufRauLHEAuY
vtIS3ijhvljb4ifqoOngDbN44ooMshjipNMPeEa0MQjGV0ETetihOo+WfF4FKM7v
5Yq+3IIMsBRmV0Dn+pHUy8ZFxQCqaGdwSnzxcJMUNS4QSNM9uIV2Q0rHFR9rSiB2
HaCvUJ6ny41+reNLLNks1lfhA16vxIfhhMpojO3+tJ3YvdWLq7tsqcHC+O9H5Dox
zCQEJLNlebRlsvdzw7KI3RDMM0wd9ACL3G0KHjRJj08vXSFsU+4lxcrz4xIDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6EK0NuKdCjJ9+xBWrJWdvODZSaEwHwYDVR0j
BBgwFoAUV+HvS/M6S2ut9iYo8xYNAmT0CLkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o
a2UvMC81N0UxRUY0QkYzM0E0QjZCQURGNjI2MjhGMzE2MEQwMjY0RjQwOEI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3RTFFRjRCRjMzQTRCNkJB
REY2MjYyOEYzMTYwRDAyNjRGNDA4QjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlM3FUUFpwRGNibW9admhteGZCd1kzc2RSdnR2NlZzS1R5NDR5eVFNaGtlLzAv
MzQzNTJlMzIzMjM5MmUzNzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeVGMA0GCSqGSIb3DQEBCwUAA4IBAQByCIkwN+kZ
Z84NaH52KPDOf7BU2ujDg45Z5LVdUgFLJ86oo2L6JVyO59pIfm8idjzlv15BTaMV
IDfj9pZhREaWWEMo2AZTEf6ef+O9W2+nFuH9Jb1o4TjGnMYUR7MlCXCVpeEyHVhm
xw0YzfaouvXZ2k8RgLJAPaYXUlg/zK3A5DcErWVqJIWBSVfsuoJOuXTm5CKNDeyV
Q8s+tgO/YfsgONAgccwmsFZbviJlYmEFFhqJ8UqrEBqVv/ihRcDyv1mTZZO9pjXt
JpIAIOOeD61sdYQGW4c4eu2xR3Ie/LGrnnB2SydkrU1LkBFv+IszYXA2nJlnBS8O
jaGy1rlH/bvL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org