Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa
File:                     34352e3138362e33322e302f32322d3234203d3e20323639343235.roa (raw, json)
Hash identifier:          ln1jHTtZBEg/EnbP6h9pCUhmCGXc8i1fy8PDMfwheYg=
Subject key identifier:   27:8B:32:18:C3:65:C2:28:2B:BF:59:A5:90:10:C0:A9:3D:0A:0F:A4
Certificate issuer:       /CN=A52F416E7DE17981FB7334B51C91FD583746E12E
Certificate serial:       2C453F1A57D2953AFB48D42785956AD37B5661AF
Authority key identifier: A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa
Signing time:             Fri 12 Apr 2024 21:15:09 +0000
ROA not before:           Fri 12 Apr 2024 21:10:09 +0000
ROA not after:            Fri 11 Apr 2025 21:15:09 +0000
asID:                     269425
IP address blocks:        45.186.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:45:3f:1a:57:d2:95:3a:fb:48:d4:27:85:95:6a:d3:7b:56:61:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Validity
            Not Before: Apr 12 21:10:09 2024 GMT
            Not After : Apr 11 21:15:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:38:66:1a:e8:fc:f3:f8:84:78:97:d3:66:a5:
                    47:da:15:bb:40:10:d8:be:c2:6e:b3:cb:45:d0:19:
                    b3:94:49:92:df:c8:d1:40:4d:ca:7e:c4:81:10:36:
                    26:7b:ef:d7:54:38:1c:39:9f:c2:76:4c:c8:8d:0b:
                    56:73:c1:d4:1a:7a:e5:ef:52:4e:3f:f5:54:b8:11:
                    1b:b9:7b:45:af:fb:8e:d2:96:8e:2a:b6:81:7c:c9:
                    b3:cd:2e:71:fc:57:4b:7d:4e:1f:ad:14:47:99:6f:
                    28:cb:53:05:04:f6:b8:84:60:27:1c:5b:c5:77:04:
                    c3:ad:fa:a7:34:98:b5:ac:ef:a1:55:c8:1b:00:b3:
                    70:65:56:01:5b:83:0f:2d:e0:e6:76:64:ad:a4:45:
                    9d:de:0a:5c:ee:fe:f7:65:9d:20:af:11:8c:64:a4:
                    a1:a8:e4:a2:17:e1:e5:4b:83:7c:89:69:5b:dc:52:
                    5e:f4:77:6c:38:d3:04:c5:b6:f6:df:29:a1:fe:82:
                    ab:63:eb:66:a6:8a:44:2a:f9:e8:a8:7b:43:72:77:
                    cd:6d:3e:75:55:de:d0:96:40:25:80:11:87:2c:da:
                    57:3e:f5:c8:c0:20:07:ea:c2:1c:79:9b:6c:50:ba:
                    13:ef:0c:ce:52:3c:33:2c:7f:4e:89:e3:7d:c1:b2:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8B:32:18:C3:65:C2:28:2B:BF:59:A5:90:10:C0:A9:3D:0A:0F:A4
            X509v3 Authority Key Identifier:
                keyid:A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:06:a8:e5:c6:ae:27:2b:b0:eb:01:06:3e:3e:e3:51:1d:
         9c:dc:da:70:49:df:b9:4a:fa:9d:24:4f:9e:87:09:4a:9a:c5:
         97:17:f4:74:79:6f:dc:19:82:6b:1f:89:64:57:dd:77:0a:8d:
         c2:95:61:8b:b0:06:35:6c:74:59:d3:76:13:31:c4:08:fb:b2:
         cf:32:42:1c:2d:13:69:e9:b3:a7:fe:eb:e0:84:13:23:08:11:
         ad:db:13:4d:cd:9e:e4:7b:9d:86:9c:dd:58:7c:8f:5a:1c:ec:
         28:db:ad:77:ef:b8:b3:79:ff:e8:fb:3b:d4:43:35:33:39:66:
         b8:62:d4:7a:77:33:b8:41:d8:34:dc:d0:10:63:29:c6:99:76:
         22:a5:76:71:24:9a:f8:76:86:86:8f:ce:e5:c5:b1:33:9c:5e:
         c0:38:99:da:5f:66:9b:47:13:78:7f:2d:fb:c1:97:8a:6e:f4:
         d2:3b:b1:1e:ad:3c:2d:3f:f2:c0:6b:67:a1:0c:c9:7e:2d:6a:
         25:80:0d:1b:72:68:34:bf:7d:a7:60:b4:7e:ab:b0:00:84:0f:
         35:58:17:00:33:1c:cc:b2:23:4a:41:39:08:c4:97:d9:04:53:
         cb:1a:14:ca:b1:c8:d2:98:89:d8:06:ed:df:cd:1b:ec:a8:da:
         14:b6:79:d8
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULEU/GlfSlTr7SNQnhZVq03tWYa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUyRjQxNkU3REUxNzk4MUZCNzMzNEI1MUM5MUZENTgz
NzQ2RTEyRTAeFw0yNDA0MTIyMTEwMDlaFw0yNTA0MTEyMTE1MDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTczODY2MUFFOEZDRjNGODg0
Nzg5N0QzNjZBNTQ3REExNUJCNDAxMEQ4QkVDMjZFQjNDQjQ1RDAxOUIzOTQ0OTky
REZDOEQxNDA0RENBN0VDNDgxMTAzNjI2N0JFRkQ3NTQzODFDMzk5RkMyNzY0Q0M4
OEQwQjU2NzNDMUQ0MUE3QUU1RUY1MjRFM0ZGNTU0QjgxMTFCQjk3QjQ1QUZGQjhF
RDI5NjhFMkFCNjgxN0NDOUIzQ0QyRTcxRkM1NzRCN0Q0RTFGQUQxNDQ3OTk2RjI4
Q0I1MzA1MDRGNkI4ODQ2MDI3MUM1QkM1NzcwNEMzQURGQUE3MzQ5OEI1QUNFRkEx
NTVDODFCMDBCMzcwNjU1NjAxNUI4MzBGMkRFMEU2NzY2NEFEQTQ0NTlEREUwQTVD
RUVGRUY3NjU5RDIwQUYxMThDNjRBNEExQThFNEEyMTdFMUU1NEI4MzdDODk2OTVC
REM1MjVFRjQ3NzZDMzhEMzA0QzVCNkY2REYyOUExRkU4MkFCNjNFQjY2QTY4QTQ0
MkFGOUU4QTg3QjQzNzI3N0NENkQzRTc1NTVERUQwOTY0MDI1ODAxMTg3MkNEQTU3
M0VGNUM4QzAyMDA3RUFDMjFDNzk5QjZDNTBCQTEzRUYwQ0NFNTIzQzMzMkM3RjRF
ODlFMzdEQzFCMkYyQzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlzhmGuj88/iEeJfTZqVH2hW7QBDYvsJus8tF0BmzlEmS38jRQE3K
fsSBEDYme+/XVDgcOZ/CdkzIjQtWc8HUGnrl71JOP/VUuBEbuXtFr/uO0paOKraB
fMmzzS5x/FdLfU4frRRHmW8oy1MFBPa4hGAnHFvFdwTDrfqnNJi1rO+hVcgbALNw
ZVYBW4MPLeDmdmStpEWd3gpc7v73ZZ0grxGMZKShqOSiF+HlS4N8iWlb3FJe9Hds
ONMExbb23ymh/oKrY+tmpopEKvnoqHtDcnfNbT51Vd7QlkAlgBGHLNpXPvXIwCAH
6sIceZtsULoT7wzOUjwzLH9OieN9wbLyxwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCeLMhjDZcIoK79ZpZAQwKk9Cg+kMB8GA1UdIwQYMBaAFKUvQW594XmB+3M0tRyR
/Vg3RuEuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JicFFQakw2eUhzZmVl
Z0piQUt3N2ZEM2g3WHpXTnFMdjNLampjSkRkTEdOLzAvQTUyRjQxNkU3REUxNzk4
MUZCNzMzNEI1MUM5MUZENTgzNzQ2RTEyRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNTJGNDE2RTdERTE3OTgxRkI3MzM0QjUxQzkxRkQ1ODM3NDZF
MTJFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CYnBRUGpMNnlIc2ZlZWdKYkFL
dzdmRDNoN1h6V05xTHYzS2pqY0pEZExHTi8wLzM0MzUyZTMxMzgzNjJlMzMzMjJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM0MzIzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi26
IDANBgkqhkiG9w0BAQsFAAOCAQEAdo0GqOXGricrsOsBBj4+41EdnNzacEnfuUr6
nSRPnocJSprFlxf0dHlv3BmCax+JZFfddwqNwpVhi7AGNWx0WdN2EzHECPuyzzJC
HC0Taemzp/7r4IQTIwgRrdsTTc2e5HudhpzdWHyPWhzsKNutd++4s3n/6Ps71EM1
MzlmuGLUenczuEHYNNzQEGMpxpl2IqV2cSSa+HaGho/O5cWxM5xewDiZ2l9mm0cT
eH8t+8GXim700juxHq08LT/ywGtnoQzJfi1qJYANG3JoNL99p2C0fquwAIQPNVgX
ADMczLIjSkE5CMSX2QRTyxoUyrHI0piJ2Abt380b7KjaFLZ52A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org