Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38352e302f32342d3234203d3e20323637313839.roa
File:                     34352e3233312e38352e302f32342d3234203d3e20323637313839.roa (raw, json)
Hash identifier:          dILxPR1idcz7KpV3W1s91t40jGzfBJTv+eSTYb+LUnw=
Subject key identifier:   E9:A9:0C:51:24:D1:6A:14:FA:68:5D:41:29:D4:8C:82:69:57:31:70
Certificate issuer:       /CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
Certificate serial:       22675C543F376D8E6313E3AE081D7A39A3093832
Authority key identifier: C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38352e302f32342d3234203d3e20323637313839.roa
Signing time:             Mon 07 Feb 2022 12:09:24 +0000
ROA not before:           Mon 07 Feb 2022 12:04:24 +0000
ROA not after:            Mon 06 Feb 2023 12:09:24 +0000
asID:                     267189
IP address blocks:        45.231.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:67:5c:54:3f:37:6d:8e:63:13:e3:ae:08:1d:7a:39:a3:09:38:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
        Validity
            Not Before: Feb  7 12:04:24 2022 GMT
            Not After : Feb  6 12:09:24 2023 GMT
        Subject: CN=E9A90C5124D16A14FA685D4129D48C8269573170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:d7:9d:73:1b:b3:e1:6f:d4:ee:24:81:5f:
                    52:d5:6a:c4:08:98:fe:52:f3:da:40:bc:6e:5c:80:
                    a6:62:b8:fd:13:21:3b:c2:1e:32:5d:e8:bd:e8:65:
                    0b:b4:b3:ad:f1:f9:a4:5b:ef:35:f3:92:72:e4:b6:
                    59:e5:63:b0:a7:b8:37:23:aa:6d:4f:4d:42:32:0d:
                    46:9a:e4:52:54:51:a9:f1:f8:db:54:4d:05:be:4a:
                    b6:92:03:de:aa:28:71:17:0a:8f:fb:f0:65:0b:f3:
                    d6:52:f8:cb:d9:bd:56:66:4a:93:dd:91:65:d3:ef:
                    a8:60:ed:ff:d1:39:ae:4a:03:19:a7:e9:21:66:37:
                    25:71:9c:01:e7:c8:9d:2e:b4:be:a2:da:83:5d:67:
                    21:8a:63:ae:ed:32:ab:62:4e:fe:f0:6c:73:30:6c:
                    08:bb:de:9b:ee:81:3c:8b:dd:c5:13:4f:50:45:6f:
                    d5:f8:69:fa:e1:d6:6b:e6:73:d5:69:6f:33:e1:b0:
                    67:98:94:a8:8f:36:f0:11:6c:e7:79:7f:35:1f:bb:
                    02:fb:6d:37:6f:47:6f:59:46:16:f8:bf:7a:6d:b4:
                    c9:d7:23:03:7a:49:25:18:e1:72:d9:60:6e:f5:a8:
                    e2:a3:6c:68:eb:95:f8:90:7f:ad:5f:9e:a9:42:8e:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:0C:51:24:D1:6A:14:FA:68:5D:41:29:D4:8C:82:69:57:31:70
            X509v3 Authority Key Identifier:
                keyid:C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38352e302f32342d3234203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e3:9b:18:57:3d:47:46:42:b1:c6:d7:12:12:46:6f:07:b6:
         fb:fc:d9:f8:d9:9f:e3:01:1c:95:bc:e3:ca:53:3f:7b:81:96:
         9e:19:25:6b:4a:b6:1e:1b:6d:ee:66:71:47:ff:a0:71:af:9b:
         aa:ac:f6:3c:8c:b7:93:b2:4c:c5:64:1a:34:5d:b2:d3:bb:c6:
         44:31:05:12:0d:e7:6e:b8:14:bd:da:7d:a6:43:64:83:75:db:
         80:2c:e4:65:99:37:f0:10:38:ce:5d:9c:ca:33:50:63:f7:b8:
         b9:fe:e6:19:2a:92:08:8e:a7:01:28:d6:bc:1c:2e:ab:84:75:
         7a:0c:a4:42:0a:2e:07:29:5f:54:bd:fd:ca:67:9a:cf:a5:53:
         05:2c:75:1a:ad:be:56:38:fa:8b:92:1e:62:7c:58:47:22:b9:
         2a:7c:02:1d:0e:f8:4e:5a:70:26:78:08:48:31:dc:72:b6:ba:
         aa:c9:04:03:00:97:db:e1:c8:ca:25:8f:4b:e0:5b:cf:e2:d8:
         6b:25:61:6b:90:91:ca:33:e8:d7:83:8d:b7:70:97:2c:37:10:
         ed:2c:52:8f:a3:b0:87:08:45:da:6b:4d:d2:92:52:a8:1c:c7:
         d3:12:34:e2:f7:bb:22:95:ed:57:aa:c6:38:93:8e:b9:0a:85:
         ec:40:3d:f7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUImdcVD83bY5jE+OuCB16OaMJODIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZEMjIwMTU5RTA4MUJEODlEQ0UzNTY3MjhFMDRDN0VD
MTQ0MURGQjAeFw0yMjAyMDcxMjA0MjRaFw0yMzAyMDYxMjA5MjRaMDMxMTAvBgNV
BAMTKEU5QTkwQzUxMjREMTZBMTRGQTY4NUQ0MTI5RDQ4QzgyNjk1NzMxNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzNedcxuz4W/U7iSBX1LVasQI
mP5S89pAvG5cgKZiuP0TITvCHjJd6L3oZQu0s63x+aRb7zXzknLktlnlY7CnuDcj
qm1PTUIyDUaa5FJUUanx+NtUTQW+SraSA96qKHEXCo/78GUL89ZS+MvZvVZmSpPd
kWXT76hg7f/ROa5KAxmn6SFmNyVxnAHnyJ0utL6i2oNdZyGKY67tMqtiTv7wbHMw
bAi73pvugTyL3cUTT1BFb9X4afrh1mvmc9VpbzPhsGeYlKiPNvARbOd5fzUfuwL7
bTdvR29ZRhb4v3pttMnXIwN6SSUY4XLZYG71qOKjbGjrlfiQf61fnqlCjv45AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6akMUSTRahT6aF1BKdSMgmlXMXAwHwYDVR0j
BBgwFoAUxtIgFZ4IG9idzjVnKOBMfsFEHfswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVQS3hCWVNZU2hOd1F4TkpXNlY1cEtIMWtXM0pQb0FhR3dyc2FLNUN5
eEovMC9DNkQyMjAxNTlFMDgxQkQ4OURDRTM1NjcyOEUwNEM3RUMxNDQxREZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2RDIyMDE1OUUwODFCRDg5
RENFMzU2NzI4RTA0QzdFQzE0NDFERkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FFUEt4QllTWVNoTndReE5KVzZWNXBLSDFrVzNKUG9BYUd3cnNhSzVDeXhKLzAv
MzQzNTJlMzIzMzMxMmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALedVMA0GCSqGSIb3DQEBCwUAA4IBAQBV45sYVz1H
RkKxxtcSEkZvB7b7/Nn42Z/jARyVvOPKUz97gZaeGSVrSrYeG23uZnFH/6Bxr5uq
rPY8jLeTskzFZBo0XbLTu8ZEMQUSDeduuBS92n2mQ2SDdduALORlmTfwEDjOXZzK
M1Bj97i5/uYZKpIIjqcBKNa8HC6rhHV6DKRCCi4HKV9Uvf3KZ5rPpVMFLHUarb5W
OPqLkh5ifFhHIrkqfAIdDvhOWnAmeAhIMdxytrqqyQQDAJfb4cjKJY9L4FvP4thr
JWFrkJHKM+jXg423cJcsNxDtLFKPo7CHCEXaa03SklKoHMfTEjTi97sile1XqsY4
k465CoXsQD33
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org