Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa
File:                     34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (raw, json)
Hash identifier:          rVVjnxuQJbcsq3yzOtjf1md770kkjSu6krmx+TOUoDo=
Subject key identifier:   4E:F9:0C:03:7A:9C:01:66:C2:68:C8:DC:42:43:DA:A5:39:A5:9D:F7
Certificate issuer:       /CN=43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7
Certificate serial:       23F59957A65F40FBEE27B6DF47C6B38BF911240A
Authority key identifier: 43:C9:80:39:3B:B3:D0:2D:AB:AB:20:B5:8D:E3:6C:C2:CB:4D:7D:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa
Signing time:             Sat 03 Feb 2024 20:56:35 +0000
ROA not before:           Sat 03 Feb 2024 20:51:35 +0000
ROA not after:            Sat 01 Feb 2025 20:56:35 +0000
asID:                     266400
IP address blocks:        45.224.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f5:99:57:a6:5f:40:fb:ee:27:b6:df:47:c6:b3:8b:f9:11:24:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7
        Validity
            Not Before: Feb  3 20:51:35 2024 GMT
            Not After : Feb  1 20:56:35 2025 GMT
        Subject: CN=4EF90C037A9C0166C268C8DC4243DAA539A59DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:09:95:f6:42:09:c2:c8:45:2e:f6:66:8f:
                    82:41:87:37:72:f1:22:f4:1f:c8:46:54:f3:9c:75:
                    51:db:c8:25:fe:06:56:19:02:ea:89:67:eb:ca:7d:
                    b9:7d:40:cd:59:95:8a:64:d2:02:89:bd:aa:a8:8a:
                    b3:be:cb:2c:23:26:a3:05:6d:88:a2:b2:4e:ae:fc:
                    06:8c:03:2c:81:5b:ee:b6:c7:6d:b6:73:54:fe:71:
                    9b:85:3f:19:15:bd:88:ee:b8:6f:c0:ac:f5:ae:e3:
                    f3:7e:f8:d4:3e:c4:80:45:97:36:6a:43:32:60:d8:
                    3e:bc:f7:99:c4:8c:1e:b1:4b:30:6b:9b:0b:40:1a:
                    55:bf:8b:f0:6a:46:86:7a:8b:1a:cf:c4:61:d7:d1:
                    9a:14:fa:be:3f:27:89:8c:db:d0:5f:96:ba:14:69:
                    b8:ea:89:cd:95:95:08:51:d6:0e:33:57:98:d5:30:
                    5f:70:a3:cc:31:ab:cd:62:fc:f8:df:e9:0e:d9:66:
                    af:b6:1b:60:e7:5b:14:d9:f9:32:f5:81:ef:8b:56:
                    52:f1:d9:2c:01:39:40:38:eb:87:36:42:79:8e:70:
                    16:52:88:67:11:3c:a4:94:b0:7d:b5:6b:a0:1f:65:
                    e4:aa:0f:d0:be:2e:45:cc:b6:ff:af:5f:ad:75:fa:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F9:0C:03:7A:9C:01:66:C2:68:C8:DC:42:43:DA:A5:39:A5:9D:F7
            X509v3 Authority Key Identifier:
                keyid:43:C9:80:39:3B:B3:D0:2D:AB:AB:20:B5:8D:E3:6C:C2:CB:4D:7D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:0a:6e:ed:b5:9f:2a:d1:a0:35:ae:82:af:9a:66:52:33:
         28:d2:d9:c9:36:da:4e:4f:c5:6c:d5:97:91:1c:29:1e:07:fa:
         d2:14:7b:08:ba:62:ac:77:b9:72:4f:03:98:f6:67:c8:5b:38:
         8a:5b:a6:fe:fe:fa:09:e0:1c:e8:1c:1e:eb:e6:93:4c:dd:df:
         fa:33:64:50:b3:44:57:fc:2b:97:3d:73:ee:c6:36:ca:73:73:
         e7:b1:ea:b6:ac:ae:52:b8:e7:bd:fa:59:ee:ba:7e:6b:dd:29:
         36:64:d0:bc:ef:8e:25:3f:7c:b2:6f:7d:35:7e:cd:de:2b:cf:
         f2:40:6d:53:b2:f9:ea:ad:88:a1:ba:3b:49:9a:c7:79:7f:c4:
         be:38:77:54:e5:27:27:9e:cb:86:b7:08:f9:5b:56:f3:c6:72:
         81:5a:d1:a5:32:2b:50:3e:0f:5a:0c:a6:c6:af:1e:41:b3:90:
         f8:8a:d1:06:2a:fc:8a:83:30:75:36:5b:11:fd:07:8b:c2:e7:
         4b:ab:79:0a:2c:56:dc:11:35:7b:04:1e:4b:b1:f4:4a:ac:77:
         6e:37:7f:16:b3:69:17:42:37:fa:51:75:14:7d:84:48:bd:e1:
         19:fa:71:1d:4f:c7:81:21:57:2f:0e:94:01:c9:81:d4:7e:95:
         a8:80:00:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI/WZV6ZfQPvuJ7bfR8azi/kRJAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNDOTgwMzkzQkIzRDAyREFCQUIyMEI1OERFMzZDQzJD
QjREN0RCNzAeFw0yNDAyMDMyMDUxMzVaFw0yNTAyMDEyMDU2MzVaMDMxMTAvBgNV
BAMTKDRFRjkwQzAzN0E5QzAxNjZDMjY4QzhEQzQyNDNEQUE1MzlBNTlERjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lQmV9kIJwshFLvZmj4JBhzdy
8SL0H8hGVPOcdVHbyCX+BlYZAuqJZ+vKfbl9QM1ZlYpk0gKJvaqoirO+yywjJqMF
bYiisk6u/AaMAyyBW+62x222c1T+cZuFPxkVvYjuuG/ArPWu4/N++NQ+xIBFlzZq
QzJg2D6895nEjB6xSzBrmwtAGlW/i/BqRoZ6ixrPxGHX0ZoU+r4/J4mM29BflroU
abjqic2VlQhR1g4zV5jVMF9wo8wxq81i/Pjf6Q7ZZq+2G2DnWxTZ+TL1ge+LVlLx
2SwBOUA464c2QnmOcBZSiGcRPKSUsH21a6AfZeSqD9C+LkXMtv+vX611+pWhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTvkMA3qcAWbCaMjcQkPapTmlnfcwHwYDVR0j
BBgwFoAUQ8mAOTuz0C2rqyC1jeNswstNfbcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv
aXgvMC80M0M5ODAzOTNCQjNEMDJEQUJBQjIwQjU4REUzNkNDMkNCNEQ3REI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQzk4MDM5M0JCM0QwMkRB
QkFCMjBCNThERTM2Q0MyQ0I0RDdEQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCdkJjSzgzamZLbXRlVVpoSktxZzdQdGtkeDdYdE5xRmdEajRiNHJnb2l4LzAv
MzQzNTJlMzIzMjM0MmUzMTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4IAwDQYJKoZIhvcNAQELBQADggEBAB6gCm7t
tZ8q0aA1roKvmmZSMyjS2ck22k5PxWzVl5EcKR4H+tIUewi6Yqx3uXJPA5j2Z8hb
OIpbpv7++gngHOgcHuvmk0zd3/ozZFCzRFf8K5c9c+7GNspzc+ex6rasrlK45736
We66fmvdKTZk0LzvjiU/fLJvfTV+zd4rz/JAbVOy+eqtiKG6O0max3l/xL44d1Tl
Jyeey4a3CPlbVvPGcoFa0aUyK1A+D1oMpsavHkGzkPiK0QYq/IqDMHU2WxH9B4vC
50ureQosVtwRNXsEHkux9Eqsd243fxazaRdCN/pRdRR9hEi94Rn6cR1Px4EhVy8O
lAHJgdR+laiAAFQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org