Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/34352e3137312e34302e302f32322d3234203d3e20323638373437.roa
File:                     34352e3137312e34302e302f32322d3234203d3e20323638373437.roa (raw, json)
Hash identifier:          Hv8wxv82IrwWoPQpWqPaBoDo2hsK3W3jn68DZmzCAZQ=
Subject key identifier:   4F:42:EC:C0:15:F6:E0:ED:A3:69:8D:44:8E:09:B3:09:56:C9:DC:5C
Certificate issuer:       /CN=4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33
Certificate serial:       02E8CC6EFB5B65351DBFE7E1356E7DAF544732A8
Authority key identifier: 4C:8C:8A:9B:4C:9E:62:AC:C6:F9:62:4C:16:29:28:55:D5:5D:4A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/34352e3137312e34302e302f32322d3234203d3e20323638373437.roa
Signing time:             Sat 24 Feb 2024 13:30:00 +0000
ROA not before:           Sat 24 Feb 2024 13:25:00 +0000
ROA not after:            Sat 22 Feb 2025 13:30:00 +0000
asID:                     268747
IP address blocks:        45.171.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e8:cc:6e:fb:5b:65:35:1d:bf:e7:e1:35:6e:7d:af:54:47:32:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33
        Validity
            Not Before: Feb 24 13:25:00 2024 GMT
            Not After : Feb 22 13:30:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:d1:79:01:c6:81:99:6e:e1:c8:7e:f6:8e:
                    a1:0c:80:6a:73:9b:79:5c:00:81:41:c1:ba:86:f0:
                    74:0a:ca:fc:b4:e0:83:b5:c3:f8:c2:9d:23:c9:85:
                    c5:c9:45:44:03:23:02:58:af:d4:60:1c:1a:8e:30:
                    e4:4b:e1:53:99:15:ea:0a:2a:0c:89:dd:90:f9:52:
                    ed:e9:a1:94:70:95:93:2c:ff:bb:0b:ae:8c:e1:29:
                    b8:a5:fb:ea:ec:33:20:13:a2:88:bc:59:b3:4c:88:
                    1b:ce:2d:20:12:18:35:55:86:ca:6e:6c:4a:23:6a:
                    99:22:3c:2e:fd:c9:7b:4d:27:2c:38:76:82:da:a8:
                    67:8c:98:e8:44:e7:ab:f7:b3:e6:a1:8a:ec:7d:03:
                    bf:f4:23:45:ac:2c:61:ca:ef:39:dd:e3:a9:01:db:
                    27:0e:90:44:87:ba:d7:4e:43:de:da:cc:84:27:16:
                    ab:f6:fb:d7:2e:2a:2f:3c:12:32:51:71:83:f2:07:
                    8a:b6:e3:70:41:87:52:b3:b2:7c:24:4a:f8:e9:66:
                    5d:f9:f6:77:d2:66:13:fe:b9:2a:5d:7a:0b:a6:4b:
                    47:94:03:8a:fd:df:e4:41:c9:bf:27:46:1f:24:5e:
                    52:8c:9c:48:83:a2:77:a5:08:92:29:52:96:69:fa:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:42:EC:C0:15:F6:E0:ED:A3:69:8D:44:8E:09:B3:09:56:C9:DC:5C
            X509v3 Authority Key Identifier:
                keyid:4C:8C:8A:9B:4C:9E:62:AC:C6:F9:62:4C:16:29:28:55:D5:5D:4A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/34352e3137312e34302e302f32322d3234203d3e20323638373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:3c:b5:fe:43:d3:e6:ad:ec:fa:19:87:bb:8a:d7:0b:d4:
         93:47:b0:af:d2:ab:6a:b0:4c:01:20:a4:14:6b:56:cd:86:4b:
         97:01:b9:41:bd:dc:fe:cd:22:b3:e0:7e:b9:8c:8a:67:60:94:
         da:25:a3:ef:e7:d0:05:d2:89:67:63:9c:2c:78:b9:39:40:33:
         32:27:de:a6:f9:5f:ce:1a:23:9f:fe:6d:13:7e:b6:1e:e3:c5:
         21:a1:84:9e:12:cd:fc:96:1a:ca:96:09:a1:79:30:c6:21:b3:
         ec:07:85:0e:09:64:90:f5:95:96:77:0a:32:71:ed:74:b1:d3:
         7f:59:6d:92:bb:06:ee:35:2c:ae:01:08:2f:ff:9c:a0:21:cf:
         5c:65:3c:17:2f:41:4c:38:ef:ac:ef:15:74:ce:01:fe:dc:e7:
         29:ab:76:a2:c6:09:65:b3:50:3e:fb:9d:bd:7a:13:83:1c:e8:
         6b:83:8e:f4:26:38:45:d8:f3:4d:6b:83:c2:cb:bd:a1:51:48:
         80:93:49:97:dd:b5:a5:c7:50:5a:91:68:e2:78:f2:35:8c:d0:
         a5:e0:d1:50:90:66:00:e6:d2:7d:46:56:86:b7:8b:03:4d:90:
         3a:7b:16:70:49:7e:67:80:af:08:9c:9a:21:b3:1e:ef:8f:74:
         d0:13:5e:7f
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUAujMbvtbZTUdv+fhNW59r1RHMqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM4QzhBOUI0QzlFNjJBQ0M2Rjk2MjRDMTYyOTI4NTVE
NTVENEEzMzAeFw0yNDAyMjQxMzI1MDBaFw0yNTAyMjIxMzMwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzY5OEQxNzkwMUM2ODE5OTZF
RTFDODdFRjY4RUExMEM4MDZBNzM5Qjc5NUMwMDgxNDFDMUJBODZGMDc0MEFDQUZD
QjRFMDgzQjVDM0Y4QzI5RDIzQzk4NUM1Qzk0NTQ0MDMyMzAyNThBRkQ0NjAxQzFB
OEUzMEU0NEJFMTUzOTkxNUVBMEEyQTBDODlERDkwRjk1MkVERTlBMTk0NzA5NTkz
MkNGRkJCMEJBRThDRTEyOUI4QTVGQkVBRUMzMzIwMTNBMjg4QkM1OUIzNEM4ODFC
Q0UyRDIwMTIxODM1NTU4NkNBNkU2QzRBMjM2QTk5MjIzQzJFRkRDOTdCNEQyNzJD
Mzg3NjgyREFBODY3OEM5OEU4NDRFN0FCRjdCM0U2QTE4QUVDN0QwM0JGRjQyMzQ1
QUMyQzYxQ0FFRjM5RERFM0E5MDFEQjI3MEU5MDQ0ODdCQUQ3NEU0M0RFREFDQzg0
MjcxNkFCRjZGQkQ3MkUyQTJGM0MxMjMyNTE3MTgzRjIwNzhBQjZFMzcwNDE4NzUy
QjNCMjdDMjQ0QUY4RTk2NjVERjlGNjc3RDI2NjEzRkVCOTJBNUQ3QTBCQTY0QjQ3
OTQwMzhBRkRERkU0NDFDOUJGMjc0NjFGMjQ1RTUyOEM5QzQ4ODNBMjc3QTUwODky
Mjk1Mjk2NjlGQTA0M0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxpjReQHGgZlu4ch+9o6hDIBqc5t5XACBQcG6hvB0Csr8tOCDtcP4
wp0jyYXFyUVEAyMCWK/UYBwajjDkS+FTmRXqCioMid2Q+VLt6aGUcJWTLP+7C66M
4Sm4pfvq7DMgE6KIvFmzTIgbzi0gEhg1VYbKbmxKI2qZIjwu/cl7TScsOHaC2qhn
jJjoROer97PmoYrsfQO/9CNFrCxhyu853eOpAdsnDpBEh7rXTkPe2syEJxar9vvX
LiovPBIyUXGD8geKtuNwQYdSs7J8JEr46WZd+fZ30mYT/rkqXXoLpktHlAOK/d/k
Qcm/J0YfJF5SjJxIg6J3pQiSKVKWafoEPwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FE9C7MAV9uDto2mNRI4JswlWydxcMB8GA1UdIwQYMBaAFEyMiptMnmKsxvliTBYp
KFXVXUozMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhUZ1JKZzFWWm1VOTM1
TFlDZEpVQ1NkZXRuQWk3N0dVakhCNzRQalY0eEd3LzAvNEM4QzhBOUI0QzlFNjJB
Q0M2Rjk2MjRDMTYyOTI4NTVENTVENEEzMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80QzhDOEE5QjRDOUU2MkFDQzZGOTYyNEMxNjI5Mjg1NUQ1NUQ0
QTMzLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84VGdSSmcxVlptVTkzNUxZQ2RK
VUNTZGV0bkFpNzdHVWpIQjc0UGpWNHhHdy8wLzM0MzUyZTMxMzczMTJlMzQzMDJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzODM3MzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2r
KDANBgkqhkiG9w0BAQsFAAOCAQEAqIM8tf5D0+at7PoZh7uK1wvUk0ewr9KrarBM
ASCkFGtWzYZLlwG5Qb3c/s0is+B+uYyKZ2CU2iWj7+fQBdKJZ2OcLHi5OUAzMife
pvlfzhojn/5tE362HuPFIaGEnhLN/JYaypYJoXkwxiGz7AeFDglkkPWVlncKMnHt
dLHTf1ltkrsG7jUsrgEIL/+coCHPXGU8Fy9BTDjvrO8VdM4B/tznKat2osYJZbNQ
PvudvXoTgxzoa4OO9CY4RdjzTWuDwsu9oVFIgJNJl921pcdQWpFo4njyNYzQpeDR
UJBmAObSfUZWhreLA02QOnsWcEl+Z4CvCJyaIbMe74900BNefw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org