Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233362e302f32322d3232203d3e20323639353134.roa
File:                     34352e3138362e3233362e302f32322d3232203d3e20323639353134.roa (raw, json)
Hash identifier:          DyFTrxl+uVqORPUiSazQMawQoObrjceU9KPtebT2ny4=
Subject key identifier:   4C:14:5A:F5:83:C9:60:E4:11:F7:54:F3:05:CE:8E:06:1B:D4:30:6A
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       427AC983EC57F3F0E875EBA69F462F2D2A1F5378
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233362e302f32322d3232203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:57 +0000
ROA not before:           Sun 07 Apr 2024 03:16:57 +0000
ROA not after:            Sun 06 Apr 2025 03:21:57 +0000
asID:                     269514
IP address blocks:        45.186.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7a:c9:83:ec:57:f3:f0:e8:75:eb:a6:9f:46:2f:2d:2a:1f:53:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:57 2024 GMT
            Not After : Apr  6 03:21:57 2025 GMT
        Subject: CN=4C145AF583C960E411F754F305CE8E061BD4306A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:8f:f2:16:22:26:93:55:1b:b9:f1:be:af:
                    af:f5:a4:39:3f:e6:2b:91:80:c3:97:c4:02:d0:2f:
                    ff:59:f8:f4:b0:36:45:4a:b1:05:53:5f:1c:db:18:
                    fc:d0:08:e1:ef:34:b3:45:c6:80:c8:0c:e3:70:74:
                    70:7a:be:78:65:90:10:df:b0:e0:ab:fa:3f:2b:4d:
                    c2:54:c3:f5:6d:c5:45:fa:7f:c6:07:ec:bb:c8:2f:
                    76:23:3e:ad:70:e7:be:1b:6c:ff:c4:17:60:8b:b1:
                    22:9d:91:0f:bc:37:6e:fa:61:74:67:ca:ec:f3:b6:
                    c0:24:59:32:9a:fc:39:8c:8f:bb:9c:1b:11:eb:aa:
                    fb:a0:f9:6f:bd:fa:2d:bd:d8:8d:eb:3c:82:ba:e6:
                    a3:a4:28:f6:e2:6e:60:55:fd:dd:97:50:8e:55:15:
                    73:30:8d:56:16:6e:d1:e9:ec:fb:9a:26:c3:98:66:
                    78:cd:f1:14:be:76:68:23:e4:9e:f0:ec:9f:1f:e9:
                    05:33:1f:49:ba:3b:89:d6:5a:a5:26:c4:2d:c0:89:
                    15:4f:fa:07:ce:76:0b:e0:7f:9e:49:f5:9e:71:29:
                    39:f3:74:81:21:27:1f:b1:24:bd:fd:5d:74:6a:25:
                    c8:6a:c5:21:22:3c:01:00:17:9e:11:fb:fa:00:c5:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:14:5A:F5:83:C9:60:E4:11:F7:54:F3:05:CE:8E:06:1B:D4:30:6A
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233362e302f32322d3232203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:e6:ab:ff:74:d5:b7:cb:5c:6f:ae:d3:87:0d:78:53:c7:c2:
         40:74:b4:8a:fd:ef:20:0c:c1:d9:5b:9e:af:0b:8e:d3:82:c4:
         51:04:bb:a3:fa:d8:13:f1:46:22:d4:28:4e:ea:69:e6:07:70:
         95:ae:75:42:8f:7d:9c:2b:9c:a4:c1:98:8b:62:22:49:a7:80:
         df:8d:9e:e0:5a:31:c7:82:bd:79:af:81:91:22:e9:88:1f:a1:
         45:ff:1a:e7:5e:e7:36:90:d6:fb:8a:ca:cf:7a:65:d3:83:67:
         22:cc:4b:3d:08:92:84:56:12:d2:1a:d9:98:a1:22:93:79:b6:
         5b:14:f3:cc:c0:aa:09:e3:12:ea:64:7d:71:db:4d:2b:72:90:
         e3:d0:ad:97:6e:b1:89:b4:ac:31:b1:08:d2:f4:57:e5:8a:73:
         a0:33:09:1a:24:05:fe:89:a3:6a:d6:a7:39:ff:cb:09:b4:9d:
         f0:01:c2:e5:2b:e1:07:54:b4:8f:f3:22:7e:df:80:e5:43:b0:
         cc:c2:90:4c:29:11:0c:81:3c:49:cf:1e:01:a6:d4:4b:08:0f:
         12:90:7a:69:7d:64:a6:73:06:cd:a1:30:68:06:82:d9:8f:55:
         9f:75:61:84:dc:7c:af:e3:84:2b:b7:e7:48:bc:ac:6c:05:22:
         63:56:a2:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQnrJg+xX8/Dodeumn0YvLSofU3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JDOUQxRDFBRjMyRjFDRkRCQTBGQzdBMTdDMDExNjZF
QkI3QjAwODAeFw0yNDA0MDcwMzE2NTdaFw0yNTA0MDYwMzIxNTdaMDMxMTAvBgNV
BAMTKDRDMTQ1QUY1ODNDOTYwRTQxMUY3NTRGMzA1Q0U4RTA2MUJENDMwNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIo/yFiImk1UbufG+r6/1pDk/
5iuRgMOXxALQL/9Z+PSwNkVKsQVTXxzbGPzQCOHvNLNFxoDIDONwdHB6vnhlkBDf
sOCr+j8rTcJUw/VtxUX6f8YH7LvIL3YjPq1w574bbP/EF2CLsSKdkQ+8N276YXRn
yuzztsAkWTKa/DmMj7ucGxHrqvug+W+9+i292I3rPIK65qOkKPbibmBV/d2XUI5V
FXMwjVYWbtHp7PuaJsOYZnjN8RS+dmgj5J7w7J8f6QUzH0m6O4nWWqUmxC3AiRVP
+gfOdgvgf55J9Z5xKTnzdIEhJx+xJL39XXRqJchqxSEiPAEAF54R+/oAxU2RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTBRa9YPJYOQR91TzBc6OBhvUMGowHwYDVR0j
BBgwFoAUO8nR0a8y8c/boPx6F8ARZuu3sAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHJGZkV0TlBoanNyZ29KQUFwNzRBejU5QkZ2TWJHYWE4enl1RTRjbjRp
M1ovMS8zQkM5RDFEMUFGMzJGMUNGREJBMEZDN0ExN0MwMTE2NkVCQjdCMDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQzlEMUQxQUYzMkYxQ0ZE
QkEwRkM3QTE3QzAxMTY2RUJCN0IwMDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyRmZFdE5QaGpzcmdvSkFBcDc0QXo1OUJGdk1iR2FhOHp5dUU0Y240aTNaLzEv
MzQzNTJlMzEzODM2MmUzMjMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzNTMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuuwwDQYJKoZIhvcNAQELBQADggEBAAbmq/90
1bfLXG+u04cNeFPHwkB0tIr97yAMwdlbnq8LjtOCxFEEu6P62BPxRiLUKE7qaeYH
cJWudUKPfZwrnKTBmItiIkmngN+NnuBaMceCvXmvgZEi6YgfoUX/Gude5zaQ1vuK
ys96ZdODZyLMSz0IkoRWEtIa2ZihIpN5tlsU88zAqgnjEupkfXHbTStykOPQrZdu
sYm0rDGxCNL0V+WKc6AzCRokBf6Jo2rWpzn/ywm0nfABwuUr4QdUtI/zIn7fgOVD
sMzCkEwpEQyBPEnPHgGm1EsIDxKQeml9ZKZzBs2hMGgGgtmPVZ91YYTcfK/jhCu3
50i8rGwFImNWokg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org