Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/0/34352e3136352e3134302e302f32322d3234203d3e20323638363837.roa
File:                     34352e3136352e3134302e302f32322d3234203d3e20323638363837.roa (raw, json)
Hash identifier:          pVF/37kzCmY7Mvp5OSor46h4YDDOCon2kwhla3yCwmk=
Subject key identifier:   B9:03:50:EB:17:BE:8A:CA:9C:6F:6C:AE:9E:EA:C5:DC:C2:F2:C9:E6
Certificate issuer:       /CN=628F331577861FC4A2FE5DE89BCB94B1D29B3363
Certificate serial:       2F356C0F64E088A99AD1C27B5821F6B105D451E8
Authority key identifier: 62:8F:33:15:77:86:1F:C4:A2:FE:5D:E8:9B:CB:94:B1:D2:9B:33:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/628F331577861FC4A2FE5DE89BCB94B1D29B3363.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/0/34352e3136352e3134302e302f32322d3234203d3e20323638363837.roa
Signing time:             Thu 28 Sep 2023 13:01:32 +0000
ROA not before:           Thu 28 Sep 2023 12:56:32 +0000
ROA not after:            Thu 26 Sep 2024 13:01:32 +0000
asID:                     268687
IP address blocks:        45.165.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:35:6c:0f:64:e0:88:a9:9a:d1:c2:7b:58:21:f6:b1:05:d4:51:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628F331577861FC4A2FE5DE89BCB94B1D29B3363
        Validity
            Not Before: Sep 28 12:56:32 2023 GMT
            Not After : Sep 26 13:01:32 2024 GMT
        Subject: CN=B90350EB17BE8ACA9C6F6CAE9EEAC5DCC2F2C9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:4b:f9:88:e8:62:42:d9:18:2f:33:af:d6:
                    ef:9f:c5:7f:cb:e1:18:36:6c:7c:8a:3e:44:a0:ca:
                    bf:6e:95:5e:26:7a:3e:8f:dc:8b:13:a4:ec:7f:68:
                    8c:6b:0a:f9:0f:21:df:15:72:3b:b0:c0:d0:75:21:
                    51:a7:55:49:fe:e1:df:0e:e9:ee:c7:af:bf:6b:1f:
                    02:f1:33:6f:7e:85:6a:65:10:5f:00:81:32:f9:f3:
                    6e:66:a2:39:de:25:3d:4a:c0:a3:7c:5c:54:6f:37:
                    9c:8e:2d:f9:e5:6d:86:a1:d1:9d:02:78:60:49:4b:
                    4a:6f:98:75:cb:29:97:ab:2a:09:a6:1e:cb:b7:a5:
                    3e:bd:a3:88:95:6f:6e:3a:25:dd:69:21:53:03:a4:
                    b8:9e:d6:4d:c9:97:7d:b1:1e:bd:8c:b9:b6:d8:f3:
                    6b:a7:b5:83:f9:13:30:95:f3:d1:9f:e1:ad:b4:1e:
                    1c:f2:09:9f:d2:be:32:50:fc:5f:36:ec:f1:82:cd:
                    bc:31:65:b4:a8:a9:bf:7e:a2:3f:8e:c5:ef:2c:a8:
                    45:11:6b:89:94:14:d7:40:83:34:5a:c8:15:7b:75:
                    98:c5:b1:1f:fa:61:4e:8d:12:a5:e3:c6:5e:02:bb:
                    aa:32:86:99:85:e6:7a:df:2f:ba:9b:42:44:d7:e5:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:03:50:EB:17:BE:8A:CA:9C:6F:6C:AE:9E:EA:C5:DC:C2:F2:C9:E6
            X509v3 Authority Key Identifier:
                keyid:62:8F:33:15:77:86:1F:C4:A2:FE:5D:E8:9B:CB:94:B1:D2:9B:33:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/0/628F331577861FC4A2FE5DE89BCB94B1D29B3363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/628F331577861FC4A2FE5DE89BCB94B1D29B3363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/0/34352e3136352e3134302e302f32322d3234203d3e20323638363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:7f:3a:37:c3:ec:27:20:22:86:cc:c5:e0:6c:bc:12:06:d7:
         82:d4:92:0e:0b:76:6c:81:4b:c3:68:96:52:33:87:dd:6a:a2:
         01:47:4f:92:f8:cb:c6:b2:0e:dc:9e:af:4c:5d:09:d3:16:9b:
         f4:45:6f:af:39:ea:9d:49:ea:65:41:6b:83:d4:a5:26:8b:a0:
         7c:55:11:26:db:c1:ad:9e:d0:cc:92:1e:49:74:83:0a:9c:45:
         a5:66:d3:5d:89:9d:f4:b8:93:27:ea:6e:b3:4d:40:af:00:7b:
         8d:81:61:ad:2c:6b:59:c7:6e:5a:e8:bf:e2:2d:06:54:2a:0e:
         8b:b2:18:f0:7b:60:26:ce:53:1c:be:0b:f7:29:69:4e:9f:1f:
         74:79:98:c2:a9:db:34:ca:b4:93:a4:f0:c0:32:11:a4:5d:35:
         ca:27:b1:5f:2e:e4:4f:51:32:3a:a6:3e:0b:7f:d0:79:4f:10:
         f9:ce:5b:6d:17:57:16:f7:16:95:37:d7:86:91:de:33:74:47:
         f1:44:06:2c:15:a6:77:0a:4f:bf:09:57:31:a5:c7:67:4e:cf:
         ea:93:cc:87:10:2d:12:c4:23:65:df:1b:35:7d:6a:c3:94:ef:
         f7:59:03:f8:db:5b:7b:ff:eb:0e:76:be:93:4f:85:6b:45:de:
         68:53:6d:cc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULzVsD2TgiKma0cJ7WCH2sQXUUegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI4RjMzMTU3Nzg2MUZDNEEyRkU1REU4OUJDQjk0QjFE
MjlCMzM2MzAeFw0yMzA5MjgxMjU2MzJaFw0yNDA5MjYxMzAxMzJaMDMxMTAvBgNV
BAMTKEI5MDM1MEVCMTdCRThBQ0E5QzZGNkNBRTlFRUFDNURDQzJGMkM5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIEv5iOhiQtkYLzOv1u+fxX/L
4Rg2bHyKPkSgyr9ulV4mej6P3IsTpOx/aIxrCvkPId8VcjuwwNB1IVGnVUn+4d8O
6e7Hr79rHwLxM29+hWplEF8AgTL5825mojneJT1KwKN8XFRvN5yOLfnlbYah0Z0C
eGBJS0pvmHXLKZerKgmmHsu3pT69o4iVb246Jd1pIVMDpLie1k3Jl32xHr2MubbY
82untYP5EzCV89Gf4a20HhzyCZ/SvjJQ/F827PGCzbwxZbSoqb9+oj+Oxe8sqEUR
a4mUFNdAgzRayBV7dZjFsR/6YU6NEqXjxl4Cu6oyhpmF5nrfL7qbQkTX5Ta9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuQNQ6xe+isqcb2yunurF3MLyyeYwHwYDVR0j
BBgwFoAUYo8zFXeGH8Si/l3om8uUsdKbM2MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGF3dFY4cndCNkNqUVpQNXExRkhtYkdZVDdtNVZ1blY3TmN2ZFJKdDlQ
RW8vMC82MjhGMzMxNTc3ODYxRkM0QTJGRTVERTg5QkNCOTRCMUQyOUIzMzYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYyOEYzMzE1Nzc4NjFGQzRB
MkZFNURFODlCQ0I5NEIxRDI5QjMzNjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhhd3RWOHJ3QjZDalFaUDVxMUZIbWJHWVQ3bTVWdW5WN05jdmRSSnQ5UEVvLzAv
MzQzNTJlMzEzNjM1MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpYwwDQYJKoZIhvcNAQELBQADggEBAKB/OjfD
7CcgIobMxeBsvBIG14LUkg4LdmyBS8NollIzh91qogFHT5L4y8ayDtyer0xdCdMW
m/RFb6856p1J6mVBa4PUpSaLoHxVESbbwa2e0MySHkl0gwqcRaVm012JnfS4kyfq
brNNQK8Ae42BYa0sa1nHblrov+ItBlQqDouyGPB7YCbOUxy+C/cpaU6fH3R5mMKp
2zTKtJOk8MAyEaRdNconsV8u5E9RMjqmPgt/0HlPEPnOW20XVxb3FpU314aR3jN0
R/FEBiwVpncKT78JVzGlx2dOz+qTzIcQLRLEI2XfGzV9asOU7/dZA/jbW3v/6w52
vpNPhWtF3mhTbcw=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org