Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e3233342e3138342e302f32322d3234203d3e203238333433.roa
File:                     34352e3233342e3138342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          cHjKeWPpxukO1ExtbqvEHHkhD0T9VZLHZbQf40T12bE=
Subject key identifier:   22:E9:EF:7B:3B:C9:5C:54:5E:89:D2:D7:06:87:B6:0C:B9:A8:CF:11
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       3915B35F30C05E3C236AAA028E333A2A52DCB39C
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e3233342e3138342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 01 Dec 2022 13:01:15 +0000
ROA not before:           Thu 01 Dec 2022 12:56:15 +0000
ROA not after:            Thu 30 Nov 2023 13:01:15 +0000
asID:                     28343
IP address blocks:        45.234.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:15:b3:5f:30:c0:5e:3c:23:6a:aa:02:8e:33:3a:2a:52:dc:b3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Dec  1 12:56:15 2022 GMT
            Not After : Nov 30 13:01:15 2023 GMT
        Subject: CN=3082010A0282010100BD2105EF36FC483842CB0494B421EF7AB7255E82DD980F5AA31FC6656EFCC0EBB50CD5630A963801B0E4898A1B4A285E7C8FE9AFC6E058B55A985A9554833FD85F015FB8D484AC3EB7A22C908D4ED4C85E7825542F829E34A3DA85FD9E7DD7EDD873F53C1ABD130EB71E5C43EB0940C081097B2192D49134058EBE1A92C991041F15AA8141293D420F183DDC1A8FC2D728A127F467C0231D2CC518D9566F6A17D0CA76761E002DB0DE5BC34DB51C737B96E033DAECEFE8711B5256E29A709F31FDDBAB7BB8EB8690B7E1CE6667B1855C35C1E7C717FB5805E8D75598F18D36DABAB78AE3BF4A8FED5E518D5FA40707AA36E151F3AE0644C2D27B04F3A211EC950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:05:ef:36:fc:48:38:42:cb:04:94:b4:21:
                    ef:7a:b7:25:5e:82:dd:98:0f:5a:a3:1f:c6:65:6e:
                    fc:c0:eb:b5:0c:d5:63:0a:96:38:01:b0:e4:89:8a:
                    1b:4a:28:5e:7c:8f:e9:af:c6:e0:58:b5:5a:98:5a:
                    95:54:83:3f:d8:5f:01:5f:b8:d4:84:ac:3e:b7:a2:
                    2c:90:8d:4e:d4:c8:5e:78:25:54:2f:82:9e:34:a3:
                    da:85:fd:9e:7d:d7:ed:d8:73:f5:3c:1a:bd:13:0e:
                    b7:1e:5c:43:eb:09:40:c0:81:09:7b:21:92:d4:91:
                    34:05:8e:be:1a:92:c9:91:04:1f:15:aa:81:41:29:
                    3d:42:0f:18:3d:dc:1a:8f:c2:d7:28:a1:27:f4:67:
                    c0:23:1d:2c:c5:18:d9:56:6f:6a:17:d0:ca:76:76:
                    1e:00:2d:b0:de:5b:c3:4d:b5:1c:73:7b:96:e0:33:
                    da:ec:ef:e8:71:1b:52:56:e2:9a:70:9f:31:fd:db:
                    ab:7b:b8:eb:86:90:b7:e1:ce:66:67:b1:85:5c:35:
                    c1:e7:c7:17:fb:58:05:e8:d7:55:98:f1:8d:36:da:
                    ba:b7:8a:e3:bf:4a:8f:ed:5e:51:8d:5f:a4:07:07:
                    aa:36:e1:51:f3:ae:06:44:c2:d2:7b:04:f3:a2:11:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E9:EF:7B:3B:C9:5C:54:5E:89:D2:D7:06:87:B6:0C:B9:A8:CF:11
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/34352e3233342e3138342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:ea:3a:2d:c5:21:e1:8d:af:ac:2c:9f:d9:b1:a3:fb:79:
         08:c9:7b:10:b2:4c:1b:27:a2:8f:38:69:43:d6:81:02:9a:49:
         0d:d3:b2:f6:63:cf:ee:63:92:a9:a2:ff:96:79:c5:5c:be:3d:
         b7:ab:6a:94:25:11:b0:89:33:e4:79:aa:3a:fa:5a:08:81:f5:
         5a:b4:29:b3:aa:aa:0d:2a:2f:29:e6:85:b6:ac:5b:b3:5c:59:
         5c:fa:7a:87:03:ba:7a:e5:c0:9d:ae:e1:f6:14:7f:01:de:4e:
         96:ca:07:d4:68:f5:17:fa:21:fb:e9:d6:0d:30:d5:45:65:fc:
         32:ee:58:5e:c9:ce:1f:97:37:7d:dc:51:a6:96:5d:84:3f:48:
         0a:bd:2a:2d:53:bb:c7:be:6a:0f:2e:84:ed:01:b5:aa:eb:35:
         ea:6a:9e:14:6f:57:02:b5:41:00:0a:90:be:09:bd:ed:31:4e:
         87:30:ea:93:a1:c6:35:aa:64:d1:3b:81:36:a6:02:f6:de:c6:
         3f:8d:f5:12:c0:5a:5b:5e:b4:14:81:71:d3:91:ed:76:7d:80:
         b3:64:73:42:49:5c:0b:10:be:04:42:f8:8f:39:5a:78:e8:37:
         a2:5b:ac:d9:fa:64:5a:e7:36:87:81:2a:20:4e:11:2a:3d:d4:
         2f:ff:5f:46
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUORWzXzDAXjwjaqoCjjM6KlLcs5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjEyMDExMjU2MTVaFw0yMzExMzAxMzAxMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQyMTA1RUYzNkZDNDgzODQy
Q0IwNDk0QjQyMUVGN0FCNzI1NUU4MkREOTgwRjVBQTMxRkM2NjU2RUZDQzBFQkI1
MENENTYzMEE5NjM4MDFCMEU0ODk4QTFCNEEyODVFN0M4RkU5QUZDNkUwNThCNTVB
OTg1QTk1NTQ4MzNGRDg1RjAxNUZCOEQ0ODRBQzNFQjdBMjJDOTA4RDRFRDRDODVF
NzgyNTU0MkY4MjlFMzRBM0RBODVGRDlFN0REN0VERDg3M0Y1M0MxQUJEMTMwRUI3
MUU1QzQzRUIwOTQwQzA4MTA5N0IyMTkyRDQ5MTM0MDU4RUJFMUE5MkM5OTEwNDFG
MTVBQTgxNDEyOTNENDIwRjE4M0REQzFBOEZDMkQ3MjhBMTI3RjQ2N0MwMjMxRDJD
QzUxOEQ5NTY2RjZBMTdEMENBNzY3NjFFMDAyREIwREU1QkMzNERCNTFDNzM3Qjk2
RTAzM0RBRUNFRkU4NzExQjUyNTZFMjlBNzA5RjMxRkREQkFCN0JCOEVCODY5MEI3
RTFDRTY2NjdCMTg1NUMzNUMxRTdDNzE3RkI1ODA1RThENzU1OThGMThEMzZEQUJB
Qjc4QUUzQkY0QThGRUQ1RTUxOEQ1RkE0MDcwN0FBMzZFMTUxRjNBRTA2NDRDMkQy
N0IwNEYzQTIxMUVDOTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvSEF7zb8SDhCywSUtCHverclXoLdmA9aox/GZW78wOu1DNVjCpY4
AbDkiYobSihefI/pr8bgWLVamFqVVIM/2F8BX7jUhKw+t6IskI1O1MheeCVUL4Ke
NKPahf2efdft2HP1PBq9Ew63HlxD6wlAwIEJeyGS1JE0BY6+GpLJkQQfFaqBQSk9
Qg8YPdwaj8LXKKEn9GfAIx0sxRjZVm9qF9DKdnYeAC2w3lvDTbUcc3uW4DPa7O/o
cRtSVuKacJ8x/dure7jrhpC34c5mZ7GFXDXB58cX+1gF6NdVmPGNNtq6t4rjv0qP
7V5RjV+kBweqNuFR864GRMLSewTzohHslQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCLp73s7yVxUXonS1waHtgy5qM8RMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzM0MzUyZTMyMzMzNDJlMzEzODM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3q
uDANBgkqhkiG9w0BAQsFAAOCAQEAgRrqOi3FIeGNr6wsn9mxo/t5CMl7ELJMGyei
jzhpQ9aBAppJDdOy9mPP7mOSqaL/lnnFXL49t6tqlCURsIkz5HmqOvpaCIH1WrQp
s6qqDSovKeaFtqxbs1xZXPp6hwO6euXAna7h9hR/Ad5OlsoH1Gj1F/oh++nWDTDV
RWX8Mu5YXsnOH5c3fdxRppZdhD9ICr0qLVO7x75qDy6E7QG1qus16mqeFG9XArVB
AAqQvgm97TFOhzDqk6HGNapk0TuBNqYC9t7GP431EsBaW160FIFx05Htdn2As2Rz
QklcCxC+BEL4jzlaeOg3olus2fpkWuc2h4EqIE4RKj3UL/9fRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org