Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/34352e3138362e38382e302f32342d3234203d3e20323639343137.roa
File:                     34352e3138362e38382e302f32342d3234203d3e20323639343137.roa (raw, json)
Hash identifier:          j0yYkwx2BdyjgIv4HXN6f/jomUwX4HQpLjPYpMGMk20=
Subject key identifier:   57:77:9F:8B:6F:C5:8C:6C:3E:E6:6A:E9:E9:04:90:4F:0B:E7:65:09
Certificate issuer:       /CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
Certificate serial:       0AC34F604C7A7F2730DF166B2975D035B4ED4F7B
Authority key identifier: 47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/34352e3138362e38382e302f32342d3234203d3e20323639343137.roa
Signing time:             Tue 02 May 2023 13:48:03 +0000
ROA not before:           Tue 02 May 2023 13:43:03 +0000
ROA not after:            Tue 30 Apr 2024 13:48:03 +0000
asID:                     269417
IP address blocks:        45.186.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c3:4f:60:4c:7a:7f:27:30:df:16:6b:29:75:d0:35:b4:ed:4f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
        Validity
            Not Before: May  2 13:43:03 2023 GMT
            Not After : Apr 30 13:48:03 2024 GMT
        Subject: CN=57779F8B6FC58C6C3EE66AE9E904904F0BE76509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ef:7c:f7:48:65:ce:5d:3a:73:07:8c:87:9c:
                    22:89:51:87:d2:5e:0a:f3:4a:27:7a:5c:bd:48:20:
                    06:72:e1:80:db:e9:ac:64:ff:aa:a9:6e:e4:e2:07:
                    99:f2:d1:70:ea:4d:3d:ac:d6:79:3e:14:67:7c:f1:
                    68:ed:c1:76:d7:82:38:06:e5:66:27:f0:a6:4b:d3:
                    b9:79:59:fc:eb:d9:44:50:ae:58:ca:e5:8a:39:12:
                    ba:7e:91:b8:ed:61:36:e9:ec:d6:78:a9:7e:8a:ce:
                    64:66:56:fc:37:47:71:d9:61:6e:f9:df:15:18:2b:
                    62:ed:18:95:8d:62:f9:ed:9c:3f:c2:0c:c8:e2:9f:
                    47:b8:86:73:1a:04:dc:96:26:4d:4c:77:f8:2a:8c:
                    81:8f:10:c9:8e:34:2e:a5:77:ad:a1:fc:e4:85:02:
                    2b:3b:03:a8:21:43:83:67:ed:ad:5f:08:ef:54:16:
                    6d:ea:d2:01:c7:cf:a9:47:a3:f1:3e:b7:fe:2f:4f:
                    bf:76:dd:e0:50:3c:96:b9:c2:35:7f:ff:dd:46:3e:
                    c1:05:87:9b:6b:20:01:f9:c5:19:2c:ab:1c:ec:aa:
                    3d:ee:bc:8a:56:3d:d6:8e:c2:3d:5f:21:af:2e:72:
                    97:b4:00:f9:36:61:13:c6:00:b3:c6:5e:dd:78:61:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:77:9F:8B:6F:C5:8C:6C:3E:E6:6A:E9:E9:04:90:4F:0B:E7:65:09
            X509v3 Authority Key Identifier:
                keyid:47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/34352e3138362e38382e302f32342d3234203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:da:c8:c9:bb:ec:3c:df:9d:06:38:e6:06:69:7e:5e:3c:36:
         53:25:4e:38:50:30:a6:48:95:e6:ec:14:78:12:b0:f0:dc:8d:
         7b:e6:77:5e:2c:f2:ec:eb:73:53:5d:c9:a7:ec:27:ca:b8:da:
         9d:27:b2:c0:86:b3:59:6d:4b:5a:b9:3a:81:89:6c:de:c8:15:
         2b:67:ff:d8:6e:49:2b:bc:be:a0:56:0d:12:8d:b3:78:6c:90:
         ea:6a:13:8a:9d:41:04:2d:10:52:dc:21:88:08:4e:e4:98:24:
         45:21:f9:a5:6c:8d:2f:ae:15:6c:ec:7e:59:cb:6c:74:bc:02:
         f0:46:42:f1:d7:d4:10:4a:f2:aa:a0:86:f5:8c:d5:09:8c:20:
         7a:c0:d3:cf:94:43:25:79:78:89:e7:e2:3b:af:56:2c:c6:08:
         fa:6f:83:c7:d6:10:6d:b5:91:7c:df:63:50:ce:f3:62:2d:67:
         1d:d7:2c:73:44:fe:a2:7f:d9:4c:09:d6:25:e5:30:4c:07:b6:
         87:2a:96:9e:98:b7:db:8f:5b:33:13:66:ed:5a:32:b3:05:b2:
         d0:e5:79:6b:35:d0:9c:0d:85:1f:70:2e:6d:bd:47:78:f7:c6:
         57:a8:68:a5:9c:9d:70:18:0d:27:2a:26:ff:96:e4:6d:83:1f:
         28:8c:fa:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCsNPYEx6fycw3xZrKXXQNbTtT3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNUE4OEVFRkI1MzVFMEFBOEY5NjAxMzVENTM0NUU4
M0UxQzc4RTAeFw0yMzA1MDIxMzQzMDNaFw0yNDA0MzAxMzQ4MDNaMDMxMTAvBgNV
BAMTKDU3Nzc5RjhCNkZDNThDNkMzRUU2NkFFOUU5MDQ5MDRGMEJFNzY1MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz73z3SGXOXTpzB4yHnCKJUYfS
XgrzSid6XL1IIAZy4YDb6axk/6qpbuTiB5ny0XDqTT2s1nk+FGd88WjtwXbXgjgG
5WYn8KZL07l5Wfzr2URQrljK5Yo5Erp+kbjtYTbp7NZ4qX6KzmRmVvw3R3HZYW75
3xUYK2LtGJWNYvntnD/CDMjin0e4hnMaBNyWJk1Md/gqjIGPEMmONC6ld62h/OSF
Ais7A6ghQ4Nn7a1fCO9UFm3q0gHHz6lHo/E+t/4vT7923eBQPJa5wjV//91GPsEF
h5trIAH5xRksqxzsqj3uvIpWPdaOwj1fIa8ucpe0APk2YRPGALPGXt14Yaz/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUV3efi2/FjGw+5mrp6QSQTwvnZQkwHwYDVR0j
BBgwFoAURzWoju+1NeCqj5YBNdU0XoPhx44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJQNUdXR0pTNWhGUUs3ZjV2UVNIVmRRWmJOYWlKNFdrV3BBeG1iYmVx
NUQvMC80NzM1QTg4RUVGQjUzNUUwQUE4Rjk2MDEzNUQ1MzQ1RTgzRTFDNzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3MzVBODhFRUZCNTM1RTBB
QThGOTYwMTM1RDUzNDVFODNFMUM3OEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyUDVHV0dKUzVoRlFLN2Y1dlFTSFZkUVpiTmFpSjRXa1dwQXhtYmJlcTVELzAv
MzQzNTJlMzEzODM2MmUzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbpYMA0GCSqGSIb3DQEBCwUAA4IBAQBz2sjJu+w8
350GOOYGaX5ePDZTJU44UDCmSJXm7BR4ErDw3I175ndeLPLs63NTXcmn7CfKuNqd
J7LAhrNZbUtauTqBiWzeyBUrZ//YbkkrvL6gVg0SjbN4bJDqahOKnUEELRBS3CGI
CE7kmCRFIfmlbI0vrhVs7H5Zy2x0vALwRkLx19QQSvKqoIb1jNUJjCB6wNPPlEMl
eXiJ5+I7r1Ysxgj6b4PH1hBttZF832NQzvNiLWcd1yxzRP6if9lMCdYl5TBMB7aH
KpaemLfbj1szE2btWjKzBbLQ5XlrNdCcDYUfcC5tvUd498ZXqGilnJ1wGA0nKib/
luRtgx8ojPrc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org