Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa
File:                     34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa (raw, json)
Hash identifier:          CL8VzmUgamLrMdc8b+/gvBqJPn9N0ll1ftE0E4nh5B0=
Subject key identifier:   40:DF:34:E5:FC:10:78:BC:16:6A:56:BD:7A:FB:4D:8F:27:B4:30:49
Certificate issuer:       /CN=C44E62B2983D2F0879112A160E42CAF2382FA628
Certificate serial:       6E4BA942CB250BF0145308F3079960AF13664D57
Authority key identifier: C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa
Signing time:             Tue 07 Nov 2023 20:35:37 +0000
ROA not before:           Tue 07 Nov 2023 20:30:37 +0000
ROA not after:            Tue 05 Nov 2024 20:35:37 +0000
asID:                     267177
IP address blocks:        45.230.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4b:a9:42:cb:25:0b:f0:14:53:08:f3:07:99:60:af:13:66:4d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C44E62B2983D2F0879112A160E42CAF2382FA628
        Validity
            Not Before: Nov  7 20:30:37 2023 GMT
            Not After : Nov  5 20:35:37 2024 GMT
        Subject: CN=40DF34E5FC1078BC166A56BD7AFB4D8F27B43049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:64:58:28:11:87:6d:e7:cc:08:94:f4:c7:53:
                    d0:ae:24:81:a8:17:d1:22:3f:0c:53:7b:18:fa:6b:
                    cc:e4:2e:f7:c9:8b:5c:37:39:15:3f:43:10:d7:5e:
                    c4:53:5f:37:99:e2:9e:85:2a:79:c9:63:a5:08:21:
                    00:89:b7:38:f7:5c:c1:29:7e:2f:2d:f2:4f:94:52:
                    f6:49:bd:5c:44:cc:54:8a:6a:8b:ff:9f:aa:14:60:
                    43:ae:7f:b1:9e:a8:b8:b6:42:43:71:f1:ff:9f:ee:
                    98:4a:98:70:26:8d:27:9a:f8:64:fe:83:3b:ec:7d:
                    f5:66:48:bc:82:49:5e:ee:c8:1d:08:4a:5d:c2:aa:
                    26:31:7b:4d:a2:30:ce:c0:fd:3c:ba:60:98:69:3c:
                    56:5b:90:9a:17:42:c6:df:b2:49:e6:5c:2d:9a:68:
                    b6:bc:36:a0:60:c5:dc:3a:bd:75:d2:91:8e:11:b3:
                    98:8c:1f:c3:5c:68:95:2d:46:71:4a:70:cd:e5:f3:
                    c2:43:71:51:f4:a0:eb:60:e7:e7:31:a7:09:d9:ed:
                    90:b2:38:4b:51:33:5d:43:01:56:88:60:5b:6c:37:
                    62:b2:02:0a:cd:ed:40:ae:67:14:b2:7c:ad:dc:c6:
                    d3:58:9a:6b:f4:7a:c5:2e:6a:44:a2:4f:ee:25:cf:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DF:34:E5:FC:10:78:BC:16:6A:56:BD:7A:FB:4D:8F:27:B4:30:49
            X509v3 Authority Key Identifier:
                keyid:C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/C44E62B2983D2F0879112A160E42CAF2382FA628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:b3:9b:18:e5:b1:31:46:96:25:f4:45:8d:20:99:3c:dc:c3:
         58:bf:74:f1:43:24:2e:a6:a8:68:ea:52:1b:e5:c5:f4:f1:36:
         8b:dc:a8:23:a6:5d:25:d4:81:e3:49:f4:c9:4a:da:66:d0:c2:
         bb:d0:dd:f9:47:85:c7:3f:9c:88:d4:58:cc:18:f2:bd:43:c0:
         db:88:98:b2:e8:ca:19:40:1e:4a:50:9b:2f:fc:da:42:d7:4c:
         82:c7:f4:f0:9f:74:13:c5:bf:7f:d3:61:2e:6b:6f:52:f9:65:
         7d:f6:fd:e3:fa:95:ed:13:71:40:b6:97:65:b1:f0:c1:11:5b:
         94:17:d1:7c:2b:49:d4:b7:7a:27:d9:54:1c:5b:12:57:e9:0e:
         fb:0d:3e:72:da:10:6a:e9:19:3a:cd:ef:8a:14:b9:9b:7a:62:
         d6:6a:97:c5:21:0d:e5:1b:68:48:2c:06:ea:d8:66:2b:40:da:
         cb:b5:97:14:29:f4:71:34:8c:80:02:ee:f3:06:0b:fc:66:9f:
         32:35:5b:a2:87:fb:01:4e:5b:69:e4:c9:5d:c3:b0:b2:5e:75:
         af:26:25:b4:34:78:95:7c:bd:42:79:d0:c0:51:18:3a:26:32:
         75:09:11:4d:ad:0b:0f:da:59:d4:4c:13:90:e6:1c:6f:ce:d0:
         1e:96:d0:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbkupQsslC/AUUwjzB5lgrxNmTVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ0RTYyQjI5ODNEMkYwODc5MTEyQTE2MEU0MkNBRjIz
ODJGQTYyODAeFw0yMzExMDcyMDMwMzdaFw0yNDExMDUyMDM1MzdaMDMxMTAvBgNV
BAMTKDQwREYzNEU1RkMxMDc4QkMxNjZBNTZCRDdBRkI0RDhGMjdCNDMwNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZFgoEYdt58wIlPTHU9CuJIGo
F9EiPwxTexj6a8zkLvfJi1w3ORU/QxDXXsRTXzeZ4p6FKnnJY6UIIQCJtzj3XMEp
fi8t8k+UUvZJvVxEzFSKaov/n6oUYEOuf7GeqLi2QkNx8f+f7phKmHAmjSea+GT+
gzvsffVmSLyCSV7uyB0ISl3CqiYxe02iMM7A/Ty6YJhpPFZbkJoXQsbfsknmXC2a
aLa8NqBgxdw6vXXSkY4Rs5iMH8NcaJUtRnFKcM3l88JDcVH0oOtg5+cxpwnZ7ZCy
OEtRM11DAVaIYFtsN2KyAgrN7UCuZxSyfK3cxtNYmmv0esUuakSiT+4lz17XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQN805fwQeLwWala9evtNjye0MEkwHwYDVR0j
BBgwFoAUxE5ispg9Lwh5ESoWDkLK8jgvpigwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05DUm5qTU5VUzhqZlN5RmluTVpQeHZtdmNhdEpabW9Dc3ZjQXdmbmJl
MVcvMC9DNDRFNjJCMjk4M0QyRjA4NzkxMTJBMTYwRTQyQ0FGMjM4MkZBNjI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M0NEU2MkIyOTgzRDJGMDg3
OTExMkExNjBFNDJDQUYyMzgyRkE2MjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOQ1Juak1OVVM4amZTeUZpbk1aUHh2bXZjYXRKWm1vQ3N2Y0F3Zm5iZTFXLzAv
MzQzNTJlMzIzMzMwMmUzMjMzMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt5ugwDQYJKoZIhvcNAQELBQADggEBAMazmxjl
sTFGliX0RY0gmTzcw1i/dPFDJC6mqGjqUhvlxfTxNovcqCOmXSXUgeNJ9MlK2mbQ
wrvQ3flHhcc/nIjUWMwY8r1DwNuImLLoyhlAHkpQmy/82kLXTILH9PCfdBPFv3/T
YS5rb1L5ZX32/eP6le0TcUC2l2Wx8MERW5QX0XwrSdS3eifZVBxbElfpDvsNPnLa
EGrpGTrN74oUuZt6YtZql8UhDeUbaEgsBurYZitA2su1lxQp9HE0jIAC7vMGC/xm
nzI1W6KH+wFOW2nkyV3DsLJeda8mJbQ0eJV8vUJ50MBRGDomMnUJEU2tCw/aWdRM
E5DmHG/O0B6W0DA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org