Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32342d3234203d3e20323639353538.roa
File:                     34352e3138392e32382e302f32342d3234203d3e20323639353538.roa (raw, json)
Hash identifier:          zaDC3NqBN2bV8ukKJCb3B/XDLcY63jWHtFmUidNJpP4=
Subject key identifier:   A7:F6:9A:56:9A:2D:BD:3D:19:AF:5C:0E:B4:C0:08:82:58:CE:47:22
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       51584B647186C3F367F97476728723D83038091A
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32342d3234203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:26 +0000
ROA not before:           Wed 29 Mar 2023 02:25:26 +0000
ROA not after:            Wed 27 Mar 2024 02:30:26 +0000
asID:                     269558
IP address blocks:        45.189.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:58:4b:64:71:86:c3:f3:67:f9:74:76:72:87:23:d8:30:38:09:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:26 2023 GMT
            Not After : Mar 27 02:30:26 2024 GMT
        Subject: CN=A7F69A569A2DBD3D19AF5C0EB4C0088258CE4722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:00:da:fb:84:48:24:f7:34:a1:18:b2:90:
                    d4:e2:35:60:a8:dc:fd:3a:fb:af:11:43:af:e8:82:
                    1b:8d:9e:eb:98:06:3c:ee:a0:30:00:8a:36:89:7e:
                    75:86:71:71:05:b2:8a:d8:db:c6:41:d7:71:aa:ad:
                    23:e3:43:07:77:4e:ad:a8:5f:78:13:10:69:72:08:
                    8b:69:e7:df:ab:0f:f2:e0:0d:cd:c0:2b:b3:b8:eb:
                    95:9c:8b:24:1c:7f:7b:4e:5d:dc:35:4a:5b:da:21:
                    b5:34:e5:0d:17:73:d9:ae:5b:5b:ca:d7:78:68:20:
                    0b:ee:2c:ef:4c:00:a6:a7:a9:79:f8:16:d3:5b:25:
                    ae:af:4a:c8:20:4a:db:07:6e:6a:ae:2c:3e:13:de:
                    9b:a8:00:8d:f9:a5:1a:2b:d4:54:6b:1c:7d:e6:e3:
                    34:e7:60:c3:89:41:f9:00:2a:fa:94:dc:97:93:b2:
                    fa:48:7c:d4:3f:03:34:59:1b:b1:40:5a:62:38:13:
                    f2:0b:2d:96:88:0d:9a:b0:0b:a6:4d:48:38:f3:0c:
                    69:1c:49:68:69:10:be:ab:9d:aa:8f:51:1d:ba:90:
                    44:41:2e:b3:56:f7:58:68:03:3e:d6:00:86:c5:df:
                    d0:7b:26:af:c2:2f:cc:58:64:08:96:ac:7a:07:ac:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F6:9A:56:9A:2D:BD:3D:19:AF:5C:0E:B4:C0:08:82:58:CE:47:22
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32342d3234203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:0b:5d:dd:17:d9:4c:5f:2e:76:92:69:96:82:3e:ad:a2:bb:
         c1:af:e8:eb:c0:29:a8:09:2c:95:63:b8:90:dc:20:2c:2d:11:
         c3:b1:45:00:81:27:b0:1d:b9:c8:45:bd:7e:8c:ee:93:f1:4e:
         79:3c:96:80:21:ea:8b:52:e1:b4:48:e0:83:f3:e5:cc:4f:fd:
         7e:da:20:ef:b7:06:53:37:40:5f:b9:37:24:87:c6:5a:d6:0d:
         88:fa:09:70:31:88:c7:e5:88:2b:0d:15:84:fa:0a:87:e9:5c:
         cc:88:27:22:69:5e:88:41:66:4e:a4:d9:74:59:94:19:2b:c7:
         f1:52:43:ac:b5:0f:46:29:6c:44:c7:fd:2c:c7:0c:b2:ac:93:
         c8:ed:14:a3:c3:34:61:a6:93:b0:e9:87:38:02:f9:4b:16:a7:
         b2:54:60:fb:15:e8:e2:6d:18:3f:37:a8:7f:ed:5f:2a:27:91:
         ad:67:87:63:76:9c:a5:af:db:8a:be:39:95:2b:6a:6a:4b:6a:
         b3:8c:c6:e7:00:e1:9e:0a:f5:23:b7:24:ee:f2:2c:16:3d:a3:
         34:54:09:36:aa:6a:58:3d:d3:d2:28:4e:33:eb:f0:96:d6:27:
         80:bc:a8:ac:95:b4:9d:7c:06:92:7c:b4:9c:79:fa:d5:13:b8:
         68:62:94:84
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUVhLZHGGw/Nn+XR2cocj2DA4CRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNFM0M3NzBFNjBFNzUyNkI4MzQ3NzU1OEY1RTdBRThC
RTk5QjBBQzAeFw0yMzAzMjkwMjI1MjZaFw0yNDAzMjcwMjMwMjZaMDMxMTAvBgNV
BAMTKEE3RjY5QTU2OUEyREJEM0QxOUFGNUMwRUI0QzAwODgyNThDRTQ3MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSwDa+4RIJPc0oRiykNTiNWCo
3P06+68RQ6/oghuNnuuYBjzuoDAAijaJfnWGcXEFsorY28ZB13GqrSPjQwd3Tq2o
X3gTEGlyCItp59+rD/LgDc3AK7O465WciyQcf3tOXdw1SlvaIbU05Q0Xc9muW1vK
13hoIAvuLO9MAKanqXn4FtNbJa6vSsggStsHbmquLD4T3puoAI35pRor1FRrHH3m
4zTnYMOJQfkAKvqU3JeTsvpIfNQ/AzRZG7FAWmI4E/ILLZaIDZqwC6ZNSDjzDGkc
SWhpEL6rnaqPUR26kERBLrNW91hoAz7WAIbF39B7Jq/CL8xYZAiWrHoHrM0ZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUp/aaVpotvT0Zr1wOtMAIgljORyIwHwYDVR0j
BBgwFoAUvOPHcOYOdSa4NHdVj1566L6ZsKwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3diRHRxMVJrV3c0U0xhenNBRk5xVE5BS3g4Y1VydmFrQnVDaVM1VjlR
NlkvMC9CQ0UzQzc3MEU2MEU3NTI2QjgzNDc3NTU4RjVFN0FFOEJFOTlCMEFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDRTNDNzcwRTYwRTc1MjZC
ODM0Nzc1NThGNUU3QUU4QkU5OUIwQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3YkR0cTFSa1d3NFNMYXpzQUZOcVROQUt4OGNVcnZha0J1Q2lTNVY5UTZZLzAv
MzQzNTJlMzEzODM5MmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb0cMA0GCSqGSIb3DQEBCwUAA4IBAQBUC13dF9lM
Xy52kmmWgj6torvBr+jrwCmoCSyVY7iQ3CAsLRHDsUUAgSewHbnIRb1+jO6T8U55
PJaAIeqLUuG0SOCD8+XMT/1+2iDvtwZTN0BfuTckh8Za1g2I+glwMYjH5YgrDRWE
+gqH6VzMiCciaV6IQWZOpNl0WZQZK8fxUkOstQ9GKWxEx/0sxwyyrJPI7RSjwzRh
ppOw6Yc4AvlLFqeyVGD7FejibRg/N6h/7V8qJ5GtZ4djdpylr9uKvjmVK2pqS2qz
jMbnAOGeCvUjtyTu8iwWPaM0VAk2qmpYPdPSKE4z6/CW1ieAvKislbSdfAaSfLSc
efrVE7hoYpSE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org