Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/34352e3138342e32342e302f32322d3232203d3e20323639333033.roa
File:                     34352e3138342e32342e302f32322d3232203d3e20323639333033.roa (raw, json)
Hash identifier:          VFNIC9ZyLheT0x//e1HA2E7NUu/yJAhEB0GKtuoOj/M=
Subject key identifier:   BA:47:D6:27:D1:CE:4E:C6:71:B5:BC:37:ED:E1:B8:AA:10:62:06:35
Certificate issuer:       /CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
Certificate serial:       29CDD2FA2B988179555317FC0E5E5C3A23CC78A2
Authority key identifier: A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/34352e3138342e32342e302f32322d3232203d3e20323639333033.roa
Signing time:             Sat 16 Mar 2024 20:31:50 +0000
ROA not before:           Sat 16 Mar 2024 20:26:50 +0000
ROA not after:            Sat 15 Mar 2025 20:31:50 +0000
asID:                     269303
IP address blocks:        45.184.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cd:d2:fa:2b:98:81:79:55:53:17:fc:0e:5e:5c:3a:23:cc:78:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
        Validity
            Not Before: Mar 16 20:26:50 2024 GMT
            Not After : Mar 15 20:31:50 2025 GMT
        Subject: CN=BA47D627D1CE4EC671B5BC37EDE1B8AA10620635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:8e:fa:90:18:a8:63:6b:2e:2b:7f:ad:7b:
                    e2:ce:6a:8a:4e:3b:a9:cf:bb:51:bc:30:22:06:9c:
                    75:84:74:db:5a:14:0d:08:fe:48:0a:c0:01:84:d0:
                    d0:c1:c5:95:c8:f6:b0:a9:5f:aa:23:47:c5:f5:36:
                    14:d5:46:26:1f:dd:e8:e0:d7:9d:93:d8:4d:60:93:
                    99:0a:52:00:d0:87:d3:f0:31:02:20:b7:11:33:52:
                    01:5c:4e:99:a6:6f:6e:83:9b:d5:f7:3e:47:86:51:
                    8a:c0:fc:81:64:7c:09:17:d5:b1:f0:51:5c:74:29:
                    f0:e0:b3:33:c2:cd:48:bf:db:a4:ea:7a:88:3c:43:
                    2a:42:b1:96:b7:7d:d7:19:9d:2b:df:7e:ef:1f:81:
                    28:98:49:9c:fc:e8:be:98:9d:fe:6d:e3:84:37:4e:
                    14:c8:eb:ba:00:54:76:cd:c4:d2:57:48:60:fc:de:
                    5d:e7:33:68:19:89:b5:ea:76:86:64:11:df:01:93:
                    5e:d3:de:5a:3b:7e:f1:a0:96:6d:91:c0:61:c1:ef:
                    b9:2f:89:57:38:fd:61:ab:b7:96:4b:b7:fe:5f:e5:
                    93:73:a7:89:8f:a9:76:fb:21:bf:ab:a7:de:f6:38:
                    d0:11:35:9b:d4:fe:89:cb:b5:ff:99:9f:8a:8a:b6:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:47:D6:27:D1:CE:4E:C6:71:B5:BC:37:ED:E1:B8:AA:10:62:06:35
            X509v3 Authority Key Identifier:
                keyid:A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/34352e3138342e32342e302f32322d3232203d3e20323639333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:19:76:f7:3c:f7:9b:56:5c:f1:94:c8:91:8e:6a:fd:72:32:
         a0:49:9e:b4:8c:13:2f:45:61:13:78:0d:5a:bd:86:20:2b:31:
         e8:a6:3b:8c:e6:4b:ca:66:48:ea:2e:eb:db:4e:aa:bf:55:0c:
         dc:8a:f8:f1:59:65:29:50:14:f2:8b:d9:80:71:a0:12:e1:84:
         89:dc:a4:f8:4b:f8:1e:7f:46:70:e1:19:91:08:8c:ad:8c:ec:
         ae:2c:9c:0b:c7:65:ee:70:bc:b0:53:01:dc:c0:bc:a9:cb:59:
         7f:1f:2d:57:33:b2:1c:30:f4:b8:73:b4:fc:06:64:03:b3:47:
         20:b4:91:82:bf:70:fc:82:81:dc:3c:e0:e0:46:5c:f8:ad:00:
         5b:b4:6b:03:fa:5b:58:4a:c4:4a:fe:72:69:a2:11:da:b8:2c:
         95:9f:83:0b:c7:f8:6d:d5:55:c1:67:04:df:60:27:94:30:52:
         b0:a7:f0:7a:b4:2b:c4:75:98:a9:77:02:59:65:ee:5c:92:8e:
         41:48:8a:be:f4:48:14:5d:35:e9:20:fd:71:6c:2d:b4:b9:52:
         48:c1:09:85:cb:af:36:73:dc:3e:46:e0:c6:0f:f9:02:29:0c:
         0d:00:3f:18:1f:5e:d7:33:1e:d4:87:a8:5d:09:9c:7e:7c:4f:
         33:8c:dc:f3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKc3S+iuYgXlVUxf8Dl5cOiPMeKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ3RTk0NjM3NkJCMUZFNjMzRTEzREY5MkJFRjYwQkJE
RjhBNjQzODAeFw0yNDAzMTYyMDI2NTBaFw0yNTAzMTUyMDMxNTBaMDMxMTAvBgNV
BAMTKEJBNDdENjI3RDFDRTRFQzY3MUI1QkMzN0VERTFCOEFBMTA2MjA2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCav476kBioY2suK3+te+LOaopO
O6nPu1G8MCIGnHWEdNtaFA0I/kgKwAGE0NDBxZXI9rCpX6ojR8X1NhTVRiYf3ejg
152T2E1gk5kKUgDQh9PwMQIgtxEzUgFcTpmmb26Dm9X3PkeGUYrA/IFkfAkX1bHw
UVx0KfDgszPCzUi/26Tqeog8QypCsZa3fdcZnSvffu8fgSiYSZz86L6Ynf5t44Q3
ThTI67oAVHbNxNJXSGD83l3nM2gZibXqdoZkEd8Bk17T3lo7fvGglm2RwGHB77kv
iVc4/WGrt5ZLt/5f5ZNzp4mPqXb7Ib+rp972ONARNZvU/onLtf+Zn4qKtvalAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUukfWJ9HOTsZxtbw37eG4qhBiBjUwHwYDVR0j
BBgwFoAUpH6UY3a7H+Yz4T35K+9gu9+KZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnNERUdlbVpmYVd0dXlhUXhiN0pVVnFLNXVMc05KcEZTSFAzZWp3VUVj
NFIvMC9BNDdFOTQ2Mzc2QkIxRkU2MzNFMTNERjkyQkVGNjBCQkRGOEE2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0N0U5NDYzNzZCQjFGRTYz
M0UxM0RGOTJCRUY2MEJCREY4QTY0MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JzREVHZW1aZmFXdHV5YVF4YjdKVVZxSzV1THNOSnBGU0hQM2Vqd1VFYzRSLzAv
MzQzNTJlMzEzODM0MmUzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5
MzMzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbgYMA0GCSqGSIb3DQEBCwUAA4IBAQBpGXb3PPeb
VlzxlMiRjmr9cjKgSZ60jBMvRWETeA1avYYgKzHopjuM5kvKZkjqLuvbTqq/VQzc
ivjxWWUpUBTyi9mAcaAS4YSJ3KT4S/gef0Zw4RmRCIytjOyuLJwLx2XucLywUwHc
wLypy1l/Hy1XM7IcMPS4c7T8BmQDs0cgtJGCv3D8goHcPODgRlz4rQBbtGsD+ltY
SsRK/nJpohHauCyVn4MLx/ht1VXBZwTfYCeUMFKwp/B6tCvEdZipdwJZZe5cko5B
SIq+9EgUXTXpIP1xbC20uVJIwQmFy682c9w+RuDGD/kCKQwNAD8YH17XMx7Uh6hd
CZx+fE8zjNzz
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org