Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233362e302f32342d3234203d3e20323639353134.roa
File:                     34352e3138362e3233362e302f32342d3234203d3e20323639353134.roa (raw, json)
Hash identifier:          AYncZABqE/CkPEeChqPfi7HJmfyeilBEcHtbAz6Y180=
Subject key identifier:   BD:3E:36:1C:AA:E2:A5:B5:AE:38:CA:CD:09:AA:BF:81:34:B3:CF:52
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       23CB849817898C7C2EEAE7250CB1D57FCEA6947A
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233362e302f32342d3234203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:56 +0000
ROA not before:           Sun 07 Apr 2024 03:16:56 +0000
ROA not after:            Sun 06 Apr 2025 03:21:56 +0000
asID:                     269514
IP address blocks:        45.186.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cb:84:98:17:89:8c:7c:2e:ea:e7:25:0c:b1:d5:7f:ce:a6:94:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:56 2024 GMT
            Not After : Apr  6 03:21:56 2025 GMT
        Subject: CN=BD3E361CAAE2A5B5AE38CACD09AABF8134B3CF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:c5:5c:5e:6a:ff:6e:33:e7:97:3e:79:78:
                    93:0e:ec:1e:80:7e:35:b7:14:73:66:ed:ff:b8:5f:
                    eb:58:74:10:4f:9e:d9:52:f0:52:b2:df:11:5e:5f:
                    53:91:ba:88:e4:94:08:5b:03:18:2c:53:ad:17:ce:
                    43:61:56:dc:7b:e6:10:18:5d:96:a0:f2:e4:51:d0:
                    54:65:9b:59:4c:b0:e7:a5:9a:b7:7c:1d:5d:3f:ac:
                    5e:91:a9:08:df:78:0b:5a:4c:a6:50:7e:d3:1e:8e:
                    97:5c:6b:0b:5b:36:0f:5c:65:b2:d0:f6:cf:c3:53:
                    cb:c8:87:8b:a5:16:79:de:be:69:cf:06:fe:27:f9:
                    e2:5f:ce:83:10:0e:fb:2f:26:bb:93:40:0b:6c:a6:
                    3a:a4:e7:e6:5d:c4:2f:44:6c:15:d2:58:a0:96:5f:
                    17:a4:63:05:49:77:e8:93:ea:38:72:6d:9f:b0:c3:
                    f2:d2:ed:29:35:60:ef:e1:0c:c5:6a:67:a5:48:49:
                    22:69:2f:69:c3:b2:0b:59:32:76:9b:e9:fa:35:74:
                    ee:d3:d8:63:ea:6a:79:e9:f7:f8:b1:00:22:2c:e0:
                    8f:9d:30:9d:ca:73:2b:37:76:c5:40:d8:42:4d:b0:
                    46:3b:e8:3d:34:fa:c5:2a:0b:ab:e7:a6:c3:3c:68:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3E:36:1C:AA:E2:A5:B5:AE:38:CA:CD:09:AA:BF:81:34:B3:CF:52
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233362e302f32342d3234203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:d1:87:b4:f7:e3:2a:08:bb:f4:75:97:8b:f0:f2:f3:80:d6:
         2e:a7:ba:d7:b1:bf:50:a6:c4:a3:dc:18:f6:af:1b:71:1e:52:
         81:51:50:99:51:77:8b:0c:1c:e9:64:1b:63:20:b4:3c:1a:04:
         49:c1:ab:e4:60:9b:05:07:b4:22:74:b3:80:b2:20:39:e6:99:
         8d:6d:7b:ce:5b:96:56:02:60:9a:f3:9c:1d:a1:91:44:0c:68:
         40:ee:5e:90:b1:f9:74:27:36:34:ed:02:be:d0:72:ac:fa:c8:
         a4:9f:7e:ef:75:19:6c:42:a2:3e:3c:b6:eb:ea:00:5a:a3:07:
         56:14:63:94:f3:1a:b7:08:e1:a7:28:b3:d1:c9:f3:6a:9f:eb:
         b2:ef:38:eb:99:35:79:c9:a3:2d:fa:52:5a:de:1b:58:1d:22:
         e2:c9:d7:9c:57:3e:0b:38:43:20:01:1a:0b:50:56:32:9b:f1:
         bf:c6:c3:63:4b:fc:6d:af:cc:6f:a3:3b:30:1b:49:10:b1:b0:
         e9:72:d5:21:00:cc:07:4f:d3:0d:34:18:4d:2a:cb:c3:dd:f1:
         34:73:57:12:92:0c:02:e4:11:29:ef:6b:4b:5b:68:eb:2f:06:
         7b:69:d1:03:ff:41:01:9f:08:e2:d1:28:7d:eb:83:5c:45:73:
         72:63:4e:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI8uEmBeJjHwu6uclDLHVf86mlHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JDOUQxRDFBRjMyRjFDRkRCQTBGQzdBMTdDMDExNjZF
QkI3QjAwODAeFw0yNDA0MDcwMzE2NTZaFw0yNTA0MDYwMzIxNTZaMDMxMTAvBgNV
BAMTKEJEM0UzNjFDQUFFMkE1QjVBRTM4Q0FDRDA5QUFCRjgxMzRCM0NGNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfMVcXmr/bjPnlz55eJMO7B6A
fjW3FHNm7f+4X+tYdBBPntlS8FKy3xFeX1ORuojklAhbAxgsU60XzkNhVtx75hAY
XZag8uRR0FRlm1lMsOelmrd8HV0/rF6RqQjfeAtaTKZQftMejpdcawtbNg9cZbLQ
9s/DU8vIh4ulFnnevmnPBv4n+eJfzoMQDvsvJruTQAtspjqk5+ZdxC9EbBXSWKCW
XxekYwVJd+iT6jhybZ+ww/LS7Sk1YO/hDMVqZ6VISSJpL2nDsgtZMnab6fo1dO7T
2GPqannp9/ixACIs4I+dMJ3Kcys3dsVA2EJNsEY76D00+sUqC6vnpsM8aA9LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvT42HKripbWuOMrNCaq/gTSzz1IwHwYDVR0j
BBgwFoAUO8nR0a8y8c/boPx6F8ARZuu3sAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHJGZkV0TlBoanNyZ29KQUFwNzRBejU5QkZ2TWJHYWE4enl1RTRjbjRp
M1ovMS8zQkM5RDFEMUFGMzJGMUNGREJBMEZDN0ExN0MwMTE2NkVCQjdCMDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQzlEMUQxQUYzMkYxQ0ZE
QkEwRkM3QTE3QzAxMTY2RUJCN0IwMDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyRmZFdE5QaGpzcmdvSkFBcDc0QXo1OUJGdk1iR2FhOHp5dUU0Y240aTNaLzEv
MzQzNTJlMzEzODM2MmUzMjMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtuuwwDQYJKoZIhvcNAQELBQADggEBAMLRh7T3
4yoIu/R1l4vw8vOA1i6nutexv1CmxKPcGPavG3EeUoFRUJlRd4sMHOlkG2MgtDwa
BEnBq+RgmwUHtCJ0s4CyIDnmmY1te85bllYCYJrznB2hkUQMaEDuXpCx+XQnNjTt
Ar7Qcqz6yKSffu91GWxCoj48tuvqAFqjB1YUY5TzGrcI4acos9HJ82qf67LvOOuZ
NXnJoy36UlreG1gdIuLJ15xXPgs4QyABGgtQVjKb8b/Gw2NL/G2vzG+jOzAbSRCx
sOly1SEAzAdP0w00GE0qy8Pd8TRzVxKSDALkESnva0tbaOsvBntp0QP/QQGfCOLR
KH3rg1xFc3JjTow=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org