Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230312e302f32342d3234203d3e20323636363134.roa
File:                     34352e372e3230312e302f32342d3234203d3e20323636363134.roa (raw, json)
Hash identifier:          5wWr/ZkeYLc46Qh82z1kTCHSnXJBoqgh4h+2Vaf/Vj8=
Subject key identifier:   7D:64:A1:3A:4A:C3:4D:06:2B:C5:31:F8:93:66:80:57:01:F5:E4:6C
Certificate issuer:       /CN=FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6
Certificate serial:       1DA495D5AC0B4F15B07A7DB904B4548E5946CA06
Authority key identifier: FF:6C:64:0C:10:EC:7C:1F:DC:4E:06:DF:E3:D3:69:E6:8D:B2:63:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230312e302f32342d3234203d3e20323636363134.roa
Signing time:             Wed 22 Mar 2023 14:26:25 +0000
ROA not before:           Wed 22 Mar 2023 14:21:25 +0000
ROA not after:            Wed 20 Mar 2024 14:26:25 +0000
asID:                     266614
IP address blocks:        45.7.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a4:95:d5:ac:0b:4f:15:b0:7a:7d:b9:04:b4:54:8e:59:46:ca:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6
        Validity
            Not Before: Mar 22 14:21:25 2023 GMT
            Not After : Mar 20 14:26:25 2024 GMT
        Subject: CN=7D64A13A4AC34D062BC531F89366805701F5E46C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:fc:2f:05:18:0b:fb:73:99:f2:cf:06:cd:
                    94:e7:e5:8f:ae:30:38:fd:31:ac:d8:63:ff:a8:b7:
                    64:bb:07:18:5d:da:30:1b:00:1a:58:3a:5e:c4:a4:
                    5f:a9:b0:5d:d0:d2:35:60:fb:d9:38:ed:02:23:16:
                    69:78:75:f5:3e:85:ff:4a:61:c6:c9:a2:75:75:08:
                    dc:51:a0:64:c7:87:dc:79:dc:dc:1a:46:5e:af:6b:
                    9c:16:e9:ce:6e:d6:ae:2d:c8:5f:f9:97:c1:05:c6:
                    12:3a:3d:d4:d5:d9:48:da:d1:be:22:84:c5:a9:bf:
                    bd:a3:b0:e5:a0:d0:99:c6:20:50:29:89:61:d7:96:
                    9c:44:27:45:35:cc:4b:a5:00:5d:f9:cf:22:0c:d6:
                    ae:f9:e1:17:09:29:98:33:61:9f:dd:15:94:db:e4:
                    89:63:b2:1d:8a:6e:ba:ca:89:a1:88:11:7c:e0:f0:
                    81:d0:27:b0:df:54:73:52:7a:81:57:09:c4:bc:1c:
                    c4:57:ac:8d:27:e5:df:f3:9c:47:42:e3:e9:06:25:
                    92:42:44:48:a2:1c:37:ed:9e:ec:47:e2:fa:8e:f4:
                    bb:fd:c2:06:4a:2e:a6:27:c0:83:bd:6b:da:f3:a6:
                    05:01:48:dc:d7:dd:7e:b4:a9:5c:6c:04:4b:01:11:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:64:A1:3A:4A:C3:4D:06:2B:C5:31:F8:93:66:80:57:01:F5:E4:6C
            X509v3 Authority Key Identifier:
                keyid:FF:6C:64:0C:10:EC:7C:1F:DC:4E:06:DF:E3:D3:69:E6:8D:B2:63:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230312e302f32342d3234203d3e20323636363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:56:6a:13:85:ef:92:a8:f3:58:5d:f2:82:63:8a:21:ae:ef:
         c7:ea:87:50:1d:1b:48:a9:a6:cf:c4:d6:28:a0:e6:33:31:12:
         0c:d5:b6:af:8c:3e:1f:53:7d:c0:80:8b:dd:3b:be:31:22:da:
         64:21:52:03:48:b1:84:05:39:d0:a5:1a:b9:10:09:e0:d7:59:
         f4:c6:12:ed:73:16:51:dc:74:84:70:02:91:da:7e:01:ba:f7:
         49:10:96:e0:b4:13:b6:ec:2e:3d:92:54:73:76:16:01:e7:83:
         41:e6:36:e4:21:ec:3d:89:ea:e6:dd:bd:fc:dd:de:e9:67:84:
         60:a9:2b:74:0a:57:50:8b:ed:ec:18:55:bc:79:dd:1c:96:b6:
         2d:64:d1:d5:cd:52:a9:c6:b5:f5:f7:80:7c:76:85:1a:7a:0a:
         a6:7c:ad:2f:24:7c:74:b7:19:c7:14:31:27:2d:86:5b:88:c9:
         d2:11:3c:7d:e6:28:72:21:10:14:fe:5b:a4:3b:3f:1e:fc:d2:
         fc:99:74:68:41:f1:af:21:ba:96:21:0a:93:bd:a8:eb:e4:ee:
         ec:5c:c2:19:82:8d:62:42:17:19:c2:d9:06:cd:b0:ef:74:6f:
         7b:30:2c:83:fa:32:df:41:35:42:50:0c:b5:7f:83:92:02:7c:
         4a:d9:98:78
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHaSV1awLTxWwen25BLRUjllGygYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY2QzY0MEMxMEVDN0MxRkRDNEUwNkRGRTNEMzY5RTY4
REIyNjNCNjAeFw0yMzAzMjIxNDIxMjVaFw0yNDAzMjAxNDI2MjVaMDMxMTAvBgNV
BAMTKDdENjRBMTNBNEFDMzREMDYyQkM1MzFGODkzNjY4MDU3MDFGNUU0NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUOfwvBRgL+3OZ8s8GzZTn5Y+u
MDj9MazYY/+ot2S7Bxhd2jAbABpYOl7EpF+psF3Q0jVg+9k47QIjFml4dfU+hf9K
YcbJonV1CNxRoGTHh9x53NwaRl6va5wW6c5u1q4tyF/5l8EFxhI6PdTV2Uja0b4i
hMWpv72jsOWg0JnGIFApiWHXlpxEJ0U1zEulAF35zyIM1q754RcJKZgzYZ/dFZTb
5Iljsh2KbrrKiaGIEXzg8IHQJ7DfVHNSeoFXCcS8HMRXrI0n5d/znEdC4+kGJZJC
REiiHDftnuxH4vqO9Lv9wgZKLqYnwIO9a9rzpgUBSNzX3X60qVxsBEsBESpPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUfWShOkrDTQYrxTH4k2aAVwH15GwwHwYDVR0j
BBgwFoAU/2xkDBDsfB/cTgbf49Np5o2yY7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGNaaWNTZ2l2cDRSVlpvVm9yVFNNMW1lcm5Lcll4MVkxOFF5WjlScEtu
MlkvMC9GRjZDNjQwQzEwRUM3QzFGREM0RTA2REZFM0QzNjlFNjhEQjI2M0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGNkM2NDBDMTBFQzdDMUZE
QzRFMDZERkUzRDM2OUU2OERCMjYzQjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhjWmljU2dpdnA0UlZab1ZvclRTTTFtZXJuS3JZeDFZMThReVo5UnBLbjJZLzAv
MzQzNTJlMzcyZTMyMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM2
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0HyTANBgkqhkiG9w0BAQsFAAOCAQEAQVZqE4Xvkqjz
WF3ygmOKIa7vx+qHUB0bSKmmz8TWKKDmMzESDNW2r4w+H1N9wICL3Tu+MSLaZCFS
A0ixhAU50KUauRAJ4NdZ9MYS7XMWUdx0hHACkdp+Abr3SRCW4LQTtuwuPZJUc3YW
AeeDQeY25CHsPYnq5t29/N3e6WeEYKkrdApXUIvt7BhVvHndHJa2LWTR1c1Sqca1
9feAfHaFGnoKpnytLyR8dLcZxxQxJy2GW4jJ0hE8feYociEQFP5bpDs/HvzS/Jl0
aEHxryG6liEKk72o6+Tu7FzCGYKNYkIXGcLZBs2w73RvezAsg/oy30E1QlAMtX+D
kgJ8StmYeA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org