Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37362e302f32322d3232203d3e20323637353434.roa
File:                     34352e37312e37362e302f32322d3232203d3e20323637353434.roa (raw, json)
Hash identifier:          bCN699ozSSoXDNk/7wtbELgWlU22UafE23G6u/hWhrI=
Subject key identifier:   BA:95:48:E0:47:4D:47:82:32:80:D8:F3:92:92:AD:8F:D3:C7:91:48
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       0CAE4FF6BAA50F92110D79FFF76944572BCD7627
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37362e302f32322d3232203d3e20323637353434.roa
Signing time:             Tue 25 Jul 2023 13:29:58 +0000
ROA not before:           Tue 25 Jul 2023 13:24:58 +0000
ROA not after:            Tue 23 Jul 2024 13:29:58 +0000
asID:                     267544
IP address blocks:        45.71.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ae:4f:f6:ba:a5:0f:92:11:0d:79:ff:f7:69:44:57:2b:cd:76:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Jul 25 13:24:58 2023 GMT
            Not After : Jul 23 13:29:58 2024 GMT
        Subject: CN=3082010A0282010100A87AC4869C85A456BA1F269EF2FC448CB9E33936F64408B9B0C09DBDC18EA725F776DC4E8BE10D3099FAD9251B4221BFF5791AF9172BABC35429125529159EBB2F5CFCEA24252C6E99909ADE6F1E0E4F5FF283B1991084C67439C73CEBDE481AD72DD73A88B5B395CD4B307AA93B363B34F7C514B140DA65C8530ECF0E166989D390FB11AFBD38441C48E70B9D5FF435075C20F98AED82D95CCB8DF45240E6C21FDAEC5926EEC8F02286E47A71E65E8430EE35D0FD56B5126599F33B54F40A30D6BE50670BA93FD6AE08015A51D871495AF90799E1E24726BA63FBCB257BB60AB7C84DD827656E0942FDB9CB003CC4DC1949FED9757436EA23F155701ED1A0550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:c4:86:9c:85:a4:56:ba:1f:26:9e:f2:fc:
                    44:8c:b9:e3:39:36:f6:44:08:b9:b0:c0:9d:bd:c1:
                    8e:a7:25:f7:76:dc:4e:8b:e1:0d:30:99:fa:d9:25:
                    1b:42:21:bf:f5:79:1a:f9:17:2b:ab:c3:54:29:12:
                    55:29:15:9e:bb:2f:5c:fc:ea:24:25:2c:6e:99:90:
                    9a:de:6f:1e:0e:4f:5f:f2:83:b1:99:10:84:c6:74:
                    39:c7:3c:eb:de:48:1a:d7:2d:d7:3a:88:b5:b3:95:
                    cd:4b:30:7a:a9:3b:36:3b:34:f7:c5:14:b1:40:da:
                    65:c8:53:0e:cf:0e:16:69:89:d3:90:fb:11:af:bd:
                    38:44:1c:48:e7:0b:9d:5f:f4:35:07:5c:20:f9:8a:
                    ed:82:d9:5c:cb:8d:f4:52:40:e6:c2:1f:da:ec:59:
                    26:ee:c8:f0:22:86:e4:7a:71:e6:5e:84:30:ee:35:
                    d0:fd:56:b5:12:65:99:f3:3b:54:f4:0a:30:d6:be:
                    50:67:0b:a9:3f:d6:ae:08:01:5a:51:d8:71:49:5a:
                    f9:07:99:e1:e2:47:26:ba:63:fb:cb:25:7b:b6:0a:
                    b7:c8:4d:d8:27:65:6e:09:42:fd:b9:cb:00:3c:c4:
                    dc:19:49:fe:d9:75:74:36:ea:23:f1:55:70:1e:d1:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:95:48:E0:47:4D:47:82:32:80:D8:F3:92:92:AD:8F:D3:C7:91:48
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37362e302f32322d3232203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:a4:b4:70:bc:28:bc:68:96:8c:ca:9d:ab:f5:32:fe:a9:3a:
         cc:87:ad:20:ed:6d:cc:8c:65:ba:84:06:35:7b:2e:68:1f:42:
         9f:f3:45:3b:45:31:ec:42:4d:b8:09:f0:f4:ac:55:db:d4:70:
         7e:26:4a:b2:7a:a5:93:21:6b:1b:8a:94:69:92:ad:c6:69:a4:
         d3:f5:c5:84:c4:33:7f:83:b4:45:ca:9b:6b:19:c8:4d:c6:63:
         1c:2c:a3:3d:0c:ef:57:9e:fb:78:fe:b7:83:65:27:94:01:28:
         dd:52:da:a5:a2:46:17:02:b7:ad:61:ae:39:d6:d8:7f:1d:e7:
         c4:e6:4e:74:05:2b:ff:8e:e9:7c:41:5c:2f:ba:19:a4:5d:94:
         bd:ee:39:8b:4c:27:83:11:dc:99:40:1f:c4:ae:fc:70:fb:26:
         46:04:77:b7:4e:13:b1:a9:23:7f:21:30:f7:b0:1a:7e:d2:65:
         12:5f:6f:f6:22:7f:5d:ac:68:c9:1a:8b:1f:95:10:3c:8e:aa:
         6c:d5:39:33:3f:63:44:0b:40:f5:fa:ee:fd:15:c2:ce:e3:52:
         87:14:6e:26:d0:24:6d:3b:d2:3c:8f:00:79:f1:34:5d:7e:80:
         ea:4e:48:e4:0a:16:e7:80:3d:54:58:4e:31:19:0f:02:33:96:
         9b:98:a5:4c
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUDK5P9rqlD5IRDXn/92lEVyvNdicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU2NUMxMDY0OTU0Qjg4RkZGODMyRENDMTFFREFBMzg5
NDMyQTYyMzAeFw0yMzA3MjUxMzI0NThaFw0yNDA3MjMxMzI5NThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTg3QUM0ODY5Qzg1QTQ1NkJB
MUYyNjlFRjJGQzQ0OENCOUUzMzkzNkY2NDQwOEI5QjBDMDlEQkRDMThFQTcyNUY3
NzZEQzRFOEJFMTBEMzA5OUZBRDkyNTFCNDIyMUJGRjU3OTFBRjkxNzJCQUJDMzU0
MjkxMjU1MjkxNTlFQkIyRjVDRkNFQTI0MjUyQzZFOTk5MDlBREU2RjFFMEU0RjVG
RjI4M0IxOTkxMDg0QzY3NDM5QzczQ0VCREU0ODFBRDcyREQ3M0E4OEI1QjM5NUNE
NEIzMDdBQTkzQjM2M0IzNEY3QzUxNEIxNDBEQTY1Qzg1MzBFQ0YwRTE2Njk4OUQz
OTBGQjExQUZCRDM4NDQxQzQ4RTcwQjlENUZGNDM1MDc1QzIwRjk4QUVEODJEOTVD
Q0I4REY0NTI0MEU2QzIxRkRBRUM1OTI2RUVDOEYwMjI4NkU0N0E3MUU2NUU4NDMw
RUUzNUQwRkQ1NkI1MTI2NTk5RjMzQjU0RjQwQTMwRDZCRTUwNjcwQkE5M0ZENkFF
MDgwMTVBNTFEODcxNDk1QUY5MDc5OUUxRTI0NzI2QkE2M0ZCQ0IyNTdCQjYwQUI3
Qzg0REQ4Mjc2NTZFMDk0MkZEQjlDQjAwM0NDNERDMTk0OUZFRDk3NTc0MzZFQTIz
RjE1NTcwMUVEMUEwNTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqHrEhpyFpFa6Hyae8vxEjLnjOTb2RAi5sMCdvcGOpyX3dtxOi+EN
MJn62SUbQiG/9Xka+Rcrq8NUKRJVKRWeuy9c/OokJSxumZCa3m8eDk9f8oOxmRCE
xnQ5xzzr3kga1y3XOoi1s5XNSzB6qTs2OzT3xRSxQNplyFMOzw4WaYnTkPsRr704
RBxI5wudX/Q1B1wg+Yrtgtlcy430UkDmwh/a7Fkm7sjwIobkenHmXoQw7jXQ/Va1
EmWZ8ztU9Aow1r5QZwupP9auCAFaUdhxSVr5B5nh4kcmumP7yyV7tgq3yE3YJ2Vu
CUL9ucsAPMTcGUn+2XV0Nuoj8VVwHtGgVQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FLqVSOBHTUeCMoDY85KSrY/Tx5FIMB8GA1UdIwQYMBaAFK5lwQZJVLiP/4MtzBHt
qjiUMqYjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jia3FMY041OXJHQ1dE
bXJLTlR2NEY1Z0FnMmJqR0ttNmJyNkgxQkc0WllZLzAvQUU2NUMxMDY0OTU0Qjg4
RkZGODMyRENDMTFFREFBMzg5NDMyQTYyMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BRTY1QzEwNjQ5NTRCODhGRkY4MzJEQ0MxMUVEQUEzODk0MzJB
NjIzLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CYmtxTGNONTlyR0NXRG1yS05U
djRGNWdBZzJiakdLbTZicjZIMUJHNFpZWS8wLzM0MzUyZTM3MzEyZTM3MzYyZTMw
MmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzczNTM0MzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItR0ww
DQYJKoZIhvcNAQELBQADggEBAL6ktHC8KLxolozKnav1Mv6pOsyHrSDtbcyMZbqE
BjV7LmgfQp/zRTtFMexCTbgJ8PSsVdvUcH4mSrJ6pZMhaxuKlGmSrcZppNP1xYTE
M3+DtEXKm2sZyE3GYxwsoz0M71ee+3j+t4NlJ5QBKN1S2qWiRhcCt61hrjnW2H8d
58TmTnQFK/+O6XxBXC+6GaRdlL3uOYtMJ4MR3JlAH8Su/HD7JkYEd7dOE7GpI38h
MPewGn7SZRJfb/Yif12saMkaix+VEDyOqmzVOTM/Y0QLQPX67v0Vws7jUocUbibQ
JG070jyPAHnxNF1+gOpOSOQKFueAPVRYTjEZDwIzlpuYpUw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org