Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa
File:                     34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa (raw, json)
Hash identifier:          pYkZOLy90wVxTghSnLUB1kGi7liKSh297C93KVe+D7k=
Subject key identifier:   94:F2:44:17:28:18:46:18:E5:41:88:04:48:63:C0:38:BE:8D:3B:B3
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       6ED8607A4BE0C4FCD1EF87D9DB86590CB064EBCA
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa
Signing time:             Sat 25 Nov 2023 22:00:00 +0000
ROA not before:           Sat 25 Nov 2023 21:55:00 +0000
ROA not after:            Sat 23 Nov 2024 22:00:00 +0000
asID:                     269532
IP address blocks:        45.188.142.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d8:60:7a:4b:e0:c4:fc:d1:ef:87:d9:db:86:59:0c:b0:64:eb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Nov 25 21:55:00 2023 GMT
            Not After : Nov 23 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:ca:1a:06:a3:5a:48:1b:d8:4d:54:08:cc:
                    da:7c:98:b7:1f:82:3a:ae:89:8a:50:a4:23:44:61:
                    34:9c:2d:27:a8:5a:79:f8:4b:d3:e4:f6:43:94:8d:
                    20:7e:2f:53:be:7c:c9:b9:59:60:83:42:66:e5:9b:
                    6f:5c:aa:f7:bb:49:d2:3c:cb:04:ad:f6:90:a7:a3:
                    bb:ca:1e:d7:7b:8e:32:a5:b2:e5:8b:f1:0e:1a:80:
                    9a:44:70:c3:77:68:c9:e8:8b:2e:37:50:d3:38:2a:
                    a0:bc:33:34:9b:c0:91:85:63:77:88:46:4e:2c:a6:
                    27:02:ac:6a:af:02:47:e2:37:5e:43:f8:0b:8d:c1:
                    56:ce:e8:2a:88:6a:47:db:f5:82:9c:00:a4:c3:28:
                    4f:5f:ff:e9:c5:cc:39:8d:00:c2:35:8c:d6:04:d9:
                    3b:71:03:9b:6f:50:02:06:fc:92:8e:b8:3f:01:c6:
                    2e:eb:f4:c8:ad:ae:05:6c:69:0b:22:d9:f3:a5:eb:
                    35:7a:c9:d1:1f:7e:fc:ce:ed:76:64:29:7a:f9:3b:
                    b1:58:f9:4f:06:05:41:81:49:73:7c:35:fa:52:5f:
                    b3:3b:64:5f:90:79:56:47:52:db:c8:fb:34:f2:ca:
                    ef:ce:38:1d:a7:5f:3a:a9:79:15:02:5c:02:cc:f5:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F2:44:17:28:18:46:18:E5:41:88:04:48:63:C0:38:BE:8D:3B:B3
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:21:ab:da:91:dd:12:10:bd:2d:36:3e:07:d1:cb:72:c7:dc:
         d6:18:f5:86:91:b2:a6:1c:b4:6d:1b:87:e8:e9:ff:4e:e5:31:
         15:5d:68:f8:4c:1d:85:67:50:18:16:fe:c8:76:eb:17:d2:4b:
         e5:7b:e0:84:95:46:ac:01:ca:4d:3c:e3:43:34:1f:d4:cf:f3:
         06:d2:5c:6b:0d:9d:35:95:59:40:fb:79:70:bf:47:24:26:75:
         f4:0b:27:af:4e:b7:4c:24:6b:72:a1:e8:0d:9f:80:7d:c7:1b:
         2b:c5:4e:24:9c:70:3e:b0:84:4b:16:8c:6f:68:b9:64:98:a5:
         ab:28:f9:8c:c2:97:d5:e3:56:bb:b8:d8:46:18:92:06:55:ca:
         a6:ad:1b:a1:8d:44:dd:77:64:a7:08:c7:f2:2a:51:96:78:6a:
         1d:05:0c:b4:c7:49:0a:e9:c6:1e:6d:e3:08:8a:2e:c2:ae:df:
         22:78:ca:1d:cd:a2:7b:49:bc:24:29:35:cb:38:11:98:c3:c0:
         8d:a2:b4:83:ab:dc:e9:a6:a5:57:99:3b:dd:df:9c:e6:36:9e:
         ca:84:66:06:71:91:a5:a5:4c:67:47:c0:72:fe:c5:0c:24:0b:
         ce:a8:88:33:68:34:de:18:9f:7a:23:5f:16:e6:45:2a:46:9f:
         26:34:71:97
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUbthgekvgxPzR74fZ24ZZDLBk68owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxQzdBQkFBQzc2MkU4ODk0ODMyQTNDRDMyNkUxMEZF
QUIzQzZCNjAeFw0yMzExMjUyMTU1MDBaFw0yNDExMjMyMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDZBN0NBMUEwNkEzNUE0ODFC
RDg0RDU0MDhDQ0RBN0M5OEI3MUY4MjNBQUU4OThBNTBBNDIzNDQ2MTM0OUMyRDI3
QTg1QTc5Rjg0QkQzRTRGNjQzOTQ4RDIwN0UyRjUzQkU3Q0M5Qjk1OTYwODM0MjY2
RTU5QjZGNUNBQUY3QkI0OUQyM0NDQjA0QURGNjkwQTdBM0JCQ0ExRUQ3N0I4RTMy
QTVCMkU1OEJGMTBFMUE4MDlBNDQ3MEMzNzc2OEM5RTg4QjJFMzc1MEQzMzgyQUEw
QkMzMzM0OUJDMDkxODU2Mzc3ODg0NjRFMkNBNjI3MDJBQzZBQUYwMjQ3RTIzNzVF
NDNGODBCOERDMTU2Q0VFODJBODg2QTQ3REJGNTgyOUMwMEE0QzMyODRGNUZGRkU5
QzVDQzM5OEQwMEMyMzU4Q0Q2MDREOTNCNzEwMzlCNkY1MDAyMDZGQzkyOEVCODNG
MDFDNjJFRUJGNEM4QURBRTA1NkM2OTBCMjJEOUYzQTVFQjM1N0FDOUQxMUY3RUZD
Q0VFRDc2NjQyOTdBRjkzQkIxNThGOTRGMDYwNTQxODE0OTczN0MzNUZBNTI1RkIz
M0I2NDVGOTA3OTU2NDc1MkRCQzhGQjM0RjJDQUVGQ0UzODFEQTc1RjNBQTk3OTE1
MDI1QzAyQ0NGNTlEMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1qfKGgajWkgb2E1UCMzafJi3H4I6romKUKQjRGE0nC0nqFp5+EvT
5PZDlI0gfi9TvnzJuVlgg0Jm5ZtvXKr3u0nSPMsErfaQp6O7yh7Xe44ypbLli/EO
GoCaRHDDd2jJ6IsuN1DTOCqgvDM0m8CRhWN3iEZOLKYnAqxqrwJH4jdeQ/gLjcFW
zugqiGpH2/WCnACkwyhPX//pxcw5jQDCNYzWBNk7cQObb1ACBvySjrg/AcYu6/TI
ra4FbGkLItnzpes1esnRH378zu12ZCl6+TuxWPlPBgVBgUlzfDX6Ul+zO2RfkHlW
R1LbyPs08srvzjgdp186qXkVAlwCzPWdAQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJTyRBcoGEYY5UGIBEhjwDi+jTuzMB8GA1UdIwQYMBaAFI4cerqsdi6IlIMqPNMm
4Q/qs8a2MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FLVmJiMU1OU0w4UkFy
ZWdBYzNNa1dzZ01rdzdmSzJGYkV6a0RmU3drOE4yLzAvOEUxQzdBQkFBQzc2MkU4
ODk0ODMyQTNDRDMyNkUxMEZFQUIzQzZCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84RTFDN0FCQUFDNzYyRTg4OTQ4MzJBM0NEMzI2RTEwRkVBQjND
NkI2LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BS1ZiYjFNTlNMOFJBcmVnQWMz
TWtXc2dNa3c3ZksyRmJFemtEZlN3azhOMi8wLzM0MzUyZTMxMzgzODJlMzEzNDMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM5MzUzMzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LbyOMA0GCSqGSIb3DQEBCwUAA4IBAQCZIavakd0SEL0tNj4H0ctyx9zWGPWGkbKm
HLRtG4fo6f9O5TEVXWj4TB2FZ1AYFv7IdusX0kvle+CElUasAcpNPONDNB/Uz/MG
0lxrDZ01lVlA+3lwv0ckJnX0CyevTrdMJGtyoegNn4B9xxsrxU4knHA+sIRLFoxv
aLlkmKWrKPmMwpfV41a7uNhGGJIGVcqmrRuhjUTdd2SnCMfyKlGWeGodBQy0x0kK
6cYebeMIii7Crt8ieModzaJ7SbwkKTXLOBGYw8CNorSDq9zppqVXmTvd35zmNp7K
hGYGcZGlpUxnR8By/sUMJAvOqIgzaDTeGJ96I18W5kUqRp8mNHGX
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org