Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          CXcWcqgcVXaCroBAoexqt5Nq/a9dvfMQZa3XfHvzBCk=
Subject key identifier:   AA:4D:1E:80:9D:B4:54:68:CD:84:22:77:19:8C:5F:7A:49:1C:76:68
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       308244975857430354595D8463BF705ADC95CC22
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:45 +0000
ROA not before:           Fri 08 Dec 2023 00:42:45 +0000
ROA not after:            Fri 06 Dec 2024 00:47:45 +0000
asID:                     268296
IP address blocks:        45.237.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:82:44:97:58:57:43:03:54:59:5d:84:63:bf:70:5a:dc:95:cc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:45 2023 GMT
            Not After : Dec  6 00:47:45 2024 GMT
        Subject: CN=AA4D1E809DB45468CD842277198C5F7A491C7668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:97:45:ee:28:c2:ac:44:c6:cc:1a:d5:82:
                    2e:94:1f:24:cd:68:03:1d:23:09:49:24:05:a0:76:
                    73:26:d3:bf:15:95:79:9e:4e:83:ab:da:91:7b:09:
                    c5:8f:b3:e6:c7:f2:ee:96:c4:fe:56:52:c2:cc:9d:
                    43:de:a5:fe:46:12:b5:83:58:d3:09:c6:ea:f3:7f:
                    72:bd:44:98:73:35:b7:da:28:53:89:58:e8:80:05:
                    be:47:87:9a:0d:05:5d:01:85:f4:7a:23:4d:03:48:
                    e9:8a:73:89:3a:a2:13:ac:80:b9:95:c4:61:40:5e:
                    3a:81:44:05:88:78:71:bb:c8:a0:2e:a9:a7:71:98:
                    c7:de:31:fd:ee:45:e2:04:fb:5e:a3:fe:77:b5:f2:
                    45:d7:07:78:5e:20:55:e3:1f:af:4f:e5:08:71:4e:
                    f3:a2:57:58:09:5c:29:57:06:96:3e:e5:aa:5f:63:
                    30:a9:15:fc:a4:37:8b:2c:c5:27:ad:96:76:f6:4b:
                    9a:73:74:01:4d:8b:8b:4c:52:fe:cf:65:a5:cd:c2:
                    34:1e:59:b4:78:85:8b:0c:ad:57:40:3a:b2:d5:a7:
                    94:b9:d5:3b:0d:24:92:d7:fe:78:b8:65:21:c8:0a:
                    a8:e4:36:bd:37:f2:c1:a2:04:fa:d8:95:15:a8:01:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4D:1E:80:9D:B4:54:68:CD:84:22:77:19:8C:5F:7A:49:1C:76:68
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:03:55:02:ea:bd:ea:53:c9:cd:01:47:94:3a:1f:ff:7d:
         15:14:9c:74:1f:54:67:41:be:02:8d:1f:92:1b:7f:c1:b5:1b:
         72:cb:56:c5:fc:b5:99:75:4c:3b:da:10:1f:05:e4:28:aa:13:
         f8:82:9a:2d:92:4f:e9:26:ec:7e:80:d3:34:9c:44:6c:27:1f:
         dc:51:a3:32:87:19:44:f1:55:c1:70:03:0b:ca:e8:14:8e:56:
         53:f2:5f:3a:4e:99:10:d0:85:82:5e:ef:cb:ee:42:13:c4:85:
         95:8f:20:47:15:a6:91:16:1e:5a:c3:fd:e1:ec:16:b2:11:34:
         41:5e:66:99:20:b9:16:fd:db:f2:18:47:00:e7:a0:a9:42:8d:
         52:15:d8:ea:c4:34:40:24:5a:f3:ce:9f:24:34:7b:46:70:9d:
         2b:ad:e2:03:bc:c3:0c:09:e5:ce:bf:af:97:56:6f:c8:38:7d:
         3d:38:32:16:2d:e3:10:6a:37:fa:ce:90:96:15:73:b8:e0:c7:
         58:6c:fd:de:ab:02:b8:33:d2:a2:93:1c:6a:e3:30:11:3e:e2:
         44:2f:74:50:bf:09:29:f3:8c:d2:80:c0:39:de:96:86:80:ea:
         19:27:57:97:d4:0b:35:ae:b6:1e:16:3c:5d:3d:3b:fd:8c:15:
         74:bf:91:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMIJEl1hXQwNUWV2EY79wWtyVzCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ0M0NEODE1REE1OEQ4MEQ4QTRDODgwMjA1NTZDNDc0
QzE1MjBGMTAeFw0yMzEyMDgwMDQyNDVaFw0yNDEyMDYwMDQ3NDVaMDMxMTAvBgNV
BAMTKEFBNEQxRTgwOURCNDU0NjhDRDg0MjI3NzE5OEM1RjdBNDkxQzc2NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVLJdF7ijCrETGzBrVgi6UHyTN
aAMdIwlJJAWgdnMm078VlXmeToOr2pF7CcWPs+bH8u6WxP5WUsLMnUPepf5GErWD
WNMJxurzf3K9RJhzNbfaKFOJWOiABb5Hh5oNBV0BhfR6I00DSOmKc4k6ohOsgLmV
xGFAXjqBRAWIeHG7yKAuqadxmMfeMf3uReIE+16j/ne18kXXB3heIFXjH69P5Qhx
TvOiV1gJXClXBpY+5apfYzCpFfykN4ssxSetlnb2S5pzdAFNi4tMUv7PZaXNwjQe
WbR4hYsMrVdAOrLVp5S51TsNJJLX/ni4ZSHICqjkNr038sGiBPrYlRWoAZTZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqk0egJ20VGjNhCJ3GYxfekkcdmgwHwYDVR0j
BBgwFoAULUPNgV2ljYDYpMiAIFVsR0wVIPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC8yRDQzQ0Q4MTVEQTU4RDgwRDhBNEM4ODAyMDU1NkM0NzRDMTUyMEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENDNDRDgxNURBNThEODBE
OEE0Qzg4MDIwNTU2QzQ3NEMxNTIwRjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzQzNTJlMzIzMzM3MmUzMjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7fQwDQYJKoZIhvcNAQELBQADggEBABRcA1UC
6r3qU8nNAUeUOh//fRUUnHQfVGdBvgKNH5Ibf8G1G3LLVsX8tZl1TDvaEB8F5Ciq
E/iCmi2ST+km7H6A0zScRGwnH9xRozKHGUTxVcFwAwvK6BSOVlPyXzpOmRDQhYJe
78vuQhPEhZWPIEcVppEWHlrD/eHsFrIRNEFeZpkguRb92/IYRwDnoKlCjVIV2OrE
NEAkWvPOnyQ0e0ZwnSut4gO8wwwJ5c6/r5dWb8g4fT04MhYt4xBqN/rOkJYVc7jg
x1hs/d6rArgz0qKTHGrjMBE+4kQvdFC/CSnzjNKAwDneloaA6hknV5fUCzWuth4W
PF09O/2MFXS/kdc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org