Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134302e302f32342d3234203d3e20323639353332.roa
File:                     34352e3138382e3134302e302f32342d3234203d3e20323639353332.roa (raw, json)
Hash identifier:          PAVI+aolt8xNH8nyuftOKqgCN/LR0wkVV0F4rskd5qo=
Subject key identifier:   6C:73:91:C8:AD:51:7D:3C:16:89:58:CF:E5:FB:DC:18:C0:39:6F:FF
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       638CEBC8BB928521B4069428B83A8B4B1C7B6E5C
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134302e302f32342d3234203d3e20323639353332.roa
Signing time:             Sat 10 Sep 2022 21:00:00 +0000
ROA not before:           Sat 10 Sep 2022 20:55:00 +0000
ROA not after:            Sat 09 Sep 2023 21:00:00 +0000
asID:                     269532
IP address blocks:        45.188.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8c:eb:c8:bb:92:85:21:b4:06:94:28:b8:3a:8b:4b:1c:7b:6e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Sep 10 20:55:00 2022 GMT
            Not After : Sep  9 21:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:1a:45:78:d2:db:c2:05:6b:13:5f:55:e4:
                    53:a8:1e:35:8e:68:fb:b1:d9:fd:db:ed:19:d7:e2:
                    fc:1a:d4:1f:02:af:54:4c:07:9d:84:89:34:a5:34:
                    b0:e1:0f:3c:3e:ee:ba:c0:97:33:77:ff:66:c2:ef:
                    e1:39:9a:37:e2:5a:b0:1b:bf:31:c8:24:a1:f3:02:
                    14:fc:a8:8d:40:71:cb:4d:e9:71:c3:f6:1f:3b:9d:
                    79:ab:61:cf:1c:d6:49:df:c0:51:ae:f3:19:b1:ab:
                    d1:b7:ac:dd:fd:6c:19:9f:00:fa:cc:e9:ee:7b:35:
                    72:a2:7a:22:af:56:22:d0:00:55:82:5d:5a:d5:c6:
                    45:16:8a:1e:38:da:a5:08:cf:f4:ce:11:57:db:8e:
                    f9:da:ae:e9:2d:49:62:84:b5:18:4b:90:b3:76:40:
                    93:9f:fb:13:42:f6:bc:ea:7b:a2:8e:62:5d:4b:59:
                    fc:e8:25:6f:a3:32:e2:2d:b7:ae:54:67:9b:29:e5:
                    13:4e:4b:84:86:60:4a:e3:7e:a7:8f:48:ff:00:2d:
                    40:d6:9e:8a:76:93:e9:3d:41:30:de:68:5a:31:e5:
                    bb:29:29:2b:26:f5:fd:eb:aa:3e:40:bd:04:01:2c:
                    c7:11:3e:3c:d1:19:8e:40:0f:3e:61:53:f7:aa:4a:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:73:91:C8:AD:51:7D:3C:16:89:58:CF:E5:FB:DC:18:C0:39:6F:FF
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134302e302f32342d3234203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:76:22:05:4c:64:51:ba:9f:08:fe:d7:07:af:e0:3c:8b:72:
         8f:5b:63:63:9c:0a:27:39:eb:55:34:61:38:f8:16:5e:30:81:
         4e:cd:73:b7:72:71:71:1f:1a:7d:6e:9d:e5:21:41:2f:6b:cd:
         21:56:82:7e:9b:88:72:dd:44:a8:14:36:14:1d:c3:69:3b:52:
         b1:50:c4:87:53:8c:60:11:8a:0f:8b:f2:79:a3:a5:3b:15:82:
         a7:1c:a1:a4:50:34:29:c6:16:14:f9:90:e4:e7:e3:b1:19:5c:
         2b:17:af:aa:65:a7:7a:58:61:c9:d4:ee:06:66:62:f7:5e:90:
         c3:53:17:ee:1f:59:49:c5:be:c3:62:6e:d5:f2:df:a5:e9:b1:
         e8:ba:23:5f:40:d6:08:0f:db:75:7e:f5:36:bd:dd:fb:90:92:
         c5:20:a0:31:5b:17:84:5d:06:dc:a9:49:df:0c:59:fc:99:cc:
         cb:73:3d:f6:55:4c:18:7f:3c:51:39:d4:dd:5a:7f:2d:cb:66:
         19:9e:81:f0:23:e8:24:2c:e6:c7:f2:d1:86:cd:d3:f1:39:9c:
         c7:48:f3:de:c2:b5:d5:49:9b:39:69:d5:f9:83:fc:47:b8:5e:
         da:79:e3:8a:ea:4e:d1:f9:24:05:38:61:53:cb:06:57:74:77:
         3d:14:47:b2
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUY4zryLuShSG0BpQouDqLSxx7blwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxQzdBQkFBQzc2MkU4ODk0ODMyQTNDRDMyNkUxMEZF
QUIzQzZCNjAeFw0yMjA5MTAyMDU1MDBaFw0yMzA5MDkyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUE2OTFBNDU3OEQyREJDMjA1
NkIxMzVGNTVFNDUzQTgxRTM1OEU2OEZCQjFEOUZEREJFRDE5RDdFMkZDMUFENDFG
MDJBRjU0NEMwNzlEODQ4OTM0QTUzNEIwRTEwRjNDM0VFRUJBQzA5NzMzNzdGRjY2
QzJFRkUxMzk5QTM3RTI1QUIwMUJCRjMxQzgyNEExRjMwMjE0RkNBODhENDA3MUNC
NERFOTcxQzNGNjFGM0I5RDc5QUI2MUNGMUNENjQ5REZDMDUxQUVGMzE5QjFBQkQx
QjdBQ0RERkQ2QzE5OUYwMEZBQ0NFOUVFN0IzNTcyQTI3QTIyQUY1NjIyRDAwMDU1
ODI1RDVBRDVDNjQ1MTY4QTFFMzhEQUE1MDhDRkY0Q0UxMTU3REI4RUY5REFBRUU5
MkQ0OTYyODRCNTE4NEI5MEIzNzY0MDkzOUZGQjEzNDJGNkJDRUE3QkEyOEU2MjVE
NEI1OUZDRTgyNTZGQTMzMkUyMkRCN0FFNTQ2NzlCMjlFNTEzNEU0Qjg0ODY2MDRB
RTM3RUE3OEY0OEZGMDAyRDQwRDY5RThBNzY5M0U5M0Q0MTMwREU2ODVBMzFFNUJC
MjkyOTJCMjZGNUZERUJBQTNFNDBCRDA0MDEyQ0M3MTEzRTNDRDExOThFNDAwRjNF
NjE1M0Y3QUE0QUU4NkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqmkaRXjS28IFaxNfVeRTqB41jmj7sdn92+0Z1+L8GtQfAq9UTAed
hIk0pTSw4Q88Pu66wJczd/9mwu/hOZo34lqwG78xyCSh8wIU/KiNQHHLTelxw/Yf
O515q2HPHNZJ38BRrvMZsavRt6zd/WwZnwD6zOnuezVyonoir1Yi0ABVgl1a1cZF
FooeONqlCM/0zhFX24752q7pLUlihLUYS5CzdkCTn/sTQva86nuijmJdS1n86CVv
ozLiLbeuVGebKeUTTkuEhmBK436nj0j/AC1A1p6KdpPpPUEw3mhaMeW7KSkrJvX9
66o+QL0EASzHET480RmOQA8+YVP3qkrobQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGxzkcitUX08FolYz+X73BjAOW//MB8GA1UdIwQYMBaAFI4cerqsdi6IlIMqPNMm
4Q/qs8a2MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FLVmJiMU1OU0w4UkFy
ZWdBYzNNa1dzZ01rdzdmSzJGYkV6a0RmU3drOE4yLzAvOEUxQzdBQkFBQzc2MkU4
ODk0ODMyQTNDRDMyNkUxMEZFQUIzQzZCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84RTFDN0FCQUFDNzYyRTg4OTQ4MzJBM0NEMzI2RTEwRkVBQjND
NkI2LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BS1ZiYjFNTlNMOFJBcmVnQWMz
TWtXc2dNa3c3ZksyRmJFemtEZlN3azhOMi8wLzM0MzUyZTMxMzgzODJlMzEzNDMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzUzMzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LbyMMA0GCSqGSIb3DQEBCwUAA4IBAQBRdiIFTGRRup8I/tcHr+A8i3KPW2NjnAon
OetVNGE4+BZeMIFOzXO3cnFxHxp9bp3lIUEva80hVoJ+m4hy3USoFDYUHcNpO1Kx
UMSHU4xgEYoPi/J5o6U7FYKnHKGkUDQpxhYU+ZDk5+OxGVwrF6+qZad6WGHJ1O4G
ZmL3XpDDUxfuH1lJxb7DYm7V8t+l6bHouiNfQNYID9t1fvU2vd37kJLFIKAxWxeE
XQbcqUnfDFn8mczLcz32VUwYfzxROdTdWn8ty2YZnoHwI+gkLObH8tGGzdPxOZzH
SPPewrXVSZs5adX5g/xHuF7aeeOK6k7R+SQFOGFTywZXdHc9FEey
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org