Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34362e302f32342d3234203d3e20323636393538.roa
File:                     34352e3232362e34362e302f32342d3234203d3e20323636393538.roa (raw, json)
Hash identifier:          MoGDXmZoqjXtEynbe2FPjveao8QUcSQy8kv+d7CsbYM=
Subject key identifier:   4E:25:2A:78:5A:13:66:4A:66:4C:99:43:05:A7:6E:B0:A8:80:31:DA
Certificate issuer:       /CN=885C33EE8E30210425E8E25473319F24E3B686FB
Certificate serial:       4EEDA6C9BCE3AFAD287B2F91575E449FCF040C96
Authority key identifier: 88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34362e302f32342d3234203d3e20323636393538.roa
Signing time:             Thu 09 Nov 2023 21:00:00 +0000
ROA not before:           Thu 09 Nov 2023 20:55:00 +0000
ROA not after:            Thu 07 Nov 2024 21:00:00 +0000
asID:                     266958
IP address blocks:        45.226.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ed:a6:c9:bc:e3:af:ad:28:7b:2f:91:57:5e:44:9f:cf:04:0c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885C33EE8E30210425E8E25473319F24E3B686FB
        Validity
            Not Before: Nov  9 20:55:00 2023 GMT
            Not After : Nov  7 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7e:56:03:97:cf:47:ba:a1:fd:84:9d:bc:2f:
                    4a:ef:df:f0:93:31:8d:e3:8c:c5:4a:d2:2d:07:2b:
                    0b:c7:6e:3e:2d:8b:aa:13:74:ce:8d:d2:40:ce:16:
                    80:c3:0c:91:e5:76:52:61:d8:4f:82:24:74:76:66:
                    b6:89:f1:07:9c:86:91:cb:ef:de:f9:4d:91:8e:5a:
                    20:b1:df:6c:f0:f4:48:5a:68:0e:c2:8c:99:08:52:
                    5e:8f:14:36:0a:01:46:96:fe:21:88:cf:53:28:64:
                    ba:5e:c1:f4:e5:c8:91:6a:61:62:5a:0b:61:43:b0:
                    1b:44:15:bf:d2:dc:b0:24:59:e2:1d:57:90:9a:da:
                    32:8d:1f:ae:bb:c9:31:82:60:e6:ce:3b:31:f4:78:
                    3b:ff:97:b3:c8:f0:4c:ad:74:a2:ac:a3:9a:ef:78:
                    a7:31:41:db:6d:7e:bc:b1:fc:b5:0c:74:10:37:bf:
                    85:7f:70:0d:0c:87:c1:df:dc:1b:a4:1a:26:46:4d:
                    b0:bc:4d:80:cb:64:24:a3:ea:ba:2e:8d:ba:b1:ad:
                    88:63:13:9a:d4:98:f0:1d:e1:9f:f1:ec:d7:ee:5e:
                    a5:17:23:91:6e:7d:0f:70:5d:ae:6a:c6:16:d8:28:
                    76:f0:5c:02:f2:94:11:9c:aa:3e:53:8d:20:96:77:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:25:2A:78:5A:13:66:4A:66:4C:99:43:05:A7:6E:B0:A8:80:31:DA
            X509v3 Authority Key Identifier:
                keyid:88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/885C33EE8E30210425E8E25473319F24E3B686FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34362e302f32342d3234203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:8f:16:48:0e:21:63:b5:7d:b0:51:2e:7a:12:07:2c:2c:30:
         e9:f1:44:97:ba:38:ea:e6:6a:a1:14:2b:1c:8f:52:1d:e7:b9:
         18:53:c9:16:04:60:9d:bc:b1:a2:67:92:6b:c7:83:2a:c6:d8:
         1f:99:d7:9f:75:65:01:06:89:5d:8f:e2:a1:94:09:29:88:41:
         3f:7e:f2:ff:be:a7:12:5e:e6:c0:15:41:67:f2:4d:fc:b8:e5:
         14:29:e8:91:32:51:bd:f7:f7:a9:eb:e0:91:aa:91:e6:07:65:
         e2:34:b4:f7:44:18:c6:f1:18:33:f7:1b:97:5c:41:bd:57:46:
         d3:1b:71:9f:42:e6:e8:61:80:f5:4f:18:6b:da:fa:36:c5:56:
         ea:68:a8:c8:d9:5a:8e:17:52:f7:a3:0b:12:6d:bb:28:0c:ef:
         98:fb:44:25:8a:33:06:dd:f6:de:b9:b1:28:ee:aa:61:6b:17:
         fd:52:c5:52:1c:4d:22:76:aa:3f:d4:c7:a5:c2:df:c5:de:68:
         b8:80:47:f7:46:ae:31:91:2a:ca:a6:9c:74:fa:a0:91:e6:75:
         af:06:cb:ef:81:95:a4:8b:d1:1f:dd:33:51:51:15:59:43:40:
         e1:74:41:e2:22:21:30:e4:99:5d:77:2f:ef:59:7c:5d:ea:1d:
         fa:1d:6e:cb
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUTu2mybzjr60oey+RV15En88EDJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg1QzMzRUU4RTMwMjEwNDI1RThFMjU0NzMzMTlGMjRF
M0I2ODZGQjAeFw0yMzExMDkyMDU1MDBaFw0yNDExMDcyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTY3RTU2MDM5N0NGNDdCQUEx
RkQ4NDlEQkMyRjRBRUZERkYwOTMzMThERTM4Q0M1NEFEMjJEMDcyQjBCQzc2RTNF
MkQ4QkFBMTM3NENFOEREMjQwQ0UxNjgwQzMwQzkxRTU3NjUyNjFEODRGODIyNDc0
NzY2NkI2ODlGMTA3OUM4NjkxQ0JFRkRFRjk0RDkxOEU1QTIwQjFERjZDRjBGNDQ4
NUE2ODBFQzI4Qzk5MDg1MjVFOEYxNDM2MEEwMTQ2OTZGRTIxODhDRjUzMjg2NEJB
NUVDMUY0RTVDODkxNkE2MTYyNUEwQjYxNDNCMDFCNDQxNUJGRDJEQ0IwMjQ1OUUy
MUQ1NzkwOUFEQTMyOEQxRkFFQkJDOTMxODI2MEU2Q0UzQjMxRjQ3ODNCRkY5N0Iz
QzhGMDRDQUQ3NEEyQUNBMzlBRUY3OEE3MzE0MURCNkQ3RUJDQjFGQ0I1MEM3NDEw
MzdCRjg1N0Y3MDBEMEM4N0MxREZEQzFCQTQxQTI2NDY0REIwQkM0RDgwQ0I2NDI0
QTNFQUJBMkU4REJBQjFBRDg4NjMxMzlBRDQ5OEYwMURFMTlGRjFFQ0Q3RUU1RUE1
MTcyMzkxNkU3RDBGNzA1REFFNkFDNjE2RDgyODc2RjA1QzAyRjI5NDExOUNBQTNF
NTM4RDIwOTY3NzQ5OTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5n5WA5fPR7qh/YSdvC9K79/wkzGN44zFStItBysLx24+LYuqE3TO
jdJAzhaAwwyR5XZSYdhPgiR0dma2ifEHnIaRy+/e+U2Rjlogsd9s8PRIWmgOwoyZ
CFJejxQ2CgFGlv4hiM9TKGS6XsH05ciRamFiWgthQ7AbRBW/0tywJFniHVeQmtoy
jR+uu8kxgmDmzjsx9Hg7/5ezyPBMrXSirKOa73inMUHbbX68sfy1DHQQN7+Ff3AN
DIfB39wbpBomRk2wvE2Ay2Qko+q6Lo26sa2IYxOa1JjwHeGf8ezX7l6lFyORbn0P
cF2uasYW2Ch28FwC8pQRnKo+U40glndJkwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FE4lKnhaE2ZKZkyZQwWnbrCogDHaMB8GA1UdIwQYMBaAFIhcM+6OMCEEJejiVHMx
nyTjtob7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhUY1VLczRDekRxbTQ3
SGFzVVhvcUd5SnFqMjJpd0I1U0tGNWh3WHhwdXViLzAvODg1QzMzRUU4RTMwMjEw
NDI1RThFMjU0NzMzMTlGMjRFM0I2ODZGQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84ODVDMzNFRThFMzAyMTA0MjVFOEUyNTQ3MzMxOUYyNEUzQjY4
NkZCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84VGNVS3M0Q3pEcW00N0hhc1VY
b3FHeUpxajIyaXdCNVNLRjVod1h4cHV1Yi8wLzM0MzUyZTMyMzIzNjJlMzQzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM5MzUzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3i
LjANBgkqhkiG9w0BAQsFAAOCAQEAfY8WSA4hY7V9sFEuehIHLCww6fFEl7o46uZq
oRQrHI9SHee5GFPJFgRgnbyxomeSa8eDKsbYH5nXn3VlAQaJXY/ioZQJKYhBP37y
/76nEl7mwBVBZ/JN/LjlFCnokTJRvff3qevgkaqR5gdl4jS090QYxvEYM/cbl1xB
vVdG0xtxn0Lm6GGA9U8Ya9r6NsVW6mioyNlajhdS96MLEm27KAzvmPtEJYozBt32
3rmxKO6qYWsX/VLFUhxNInaqP9THpcLfxd5ouIBH90auMZEqyqacdPqgkeZ1rwbL
74GVpIvRH90zUVEVWUNA4XRB4iIhMOSZXXcv71l8Xeod+h1uyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org