Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa
File:                     34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa (raw, json)
Hash identifier:          wSKOoTbyXU/eTBW3TAb0+QHM4UTRJgyTL4LnRIieRiA=
Subject key identifier:   3D:32:A3:D2:8E:B5:92:E9:02:EC:37:D4:1B:5F:F7:38:77:76:02:0E
Certificate issuer:       /CN=C44E62B2983D2F0879112A160E42CAF2382FA628
Certificate serial:       111E8D155BDEE3065EC676571951B40F23653608
Authority key identifier: C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa
Signing time:             Tue 07 Nov 2023 20:35:37 +0000
ROA not before:           Tue 07 Nov 2023 20:30:37 +0000
ROA not after:            Tue 05 Nov 2024 20:35:37 +0000
asID:                     267177
IP address blocks:        45.230.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1e:8d:15:5b:de:e3:06:5e:c6:76:57:19:51:b4:0f:23:65:36:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C44E62B2983D2F0879112A160E42CAF2382FA628
        Validity
            Not Before: Nov  7 20:30:37 2023 GMT
            Not After : Nov  5 20:35:37 2024 GMT
        Subject: CN=3D32A3D28EB592E902EC37D41B5FF7387776020E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7b:62:8f:67:18:23:76:d4:d2:38:64:26:3a:
                    e4:41:c5:0b:7a:cf:e8:bc:bc:65:76:3f:52:e5:ca:
                    c7:3d:74:5c:20:de:f1:e8:33:1f:d5:00:83:86:94:
                    c8:81:ff:d2:7e:00:2a:de:21:d5:eb:ab:78:0e:02:
                    e3:42:8c:69:f6:1e:5a:20:23:ef:ac:de:2f:e1:ab:
                    4b:5c:08:6d:f7:95:6e:39:09:bb:b5:f4:f7:8d:77:
                    80:08:a6:68:0f:8f:50:64:e2:ac:68:b2:8a:90:91:
                    8b:50:e1:d2:9e:b8:15:f4:bd:05:c0:80:fa:20:c6:
                    b5:31:8c:58:5d:ea:1e:e4:57:86:d9:d2:90:8a:0d:
                    64:ee:73:56:63:2d:23:02:13:cc:2b:ef:4c:ce:cc:
                    74:fb:18:de:3c:bb:25:4a:2f:af:f3:b5:d1:8c:e7:
                    59:8f:ce:b8:3c:32:e7:4f:e3:39:a9:96:b2:d2:63:
                    1a:ef:0a:02:50:63:c5:a9:71:65:dd:2d:95:84:13:
                    c6:f5:97:f0:73:ab:fa:2c:03:17:15:f3:2c:df:eb:
                    05:4e:e5:60:f9:32:07:4f:b6:1c:3f:8e:b6:0b:95:
                    ab:25:4a:a8:ae:d6:a5:2e:fd:1d:ae:04:78:b1:dc:
                    f9:bc:42:1c:7c:fe:8d:41:f5:42:62:dc:97:55:41:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:A3:D2:8E:B5:92:E9:02:EC:37:D4:1B:5F:F7:38:77:76:02:0E
            X509v3 Authority Key Identifier:
                keyid:C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/C44E62B2983D2F0879112A160E42CAF2382FA628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:01:0e:6e:23:57:a9:4d:fa:65:18:8e:46:26:94:be:fa:7d:
         bc:39:3f:d9:cd:50:82:6a:08:34:44:f2:13:d7:76:e6:31:0d:
         c7:d2:fb:dd:da:c3:66:9f:ff:97:5b:bd:4a:ef:26:46:65:3c:
         df:d5:3f:db:f8:74:5f:ee:61:92:cc:a8:32:0b:bd:16:c3:3a:
         4a:e8:77:a3:d1:11:25:9f:24:5b:89:00:5f:93:7e:18:b7:b6:
         11:b1:3a:a3:21:2a:64:7f:2e:c0:de:1c:0d:4d:63:85:52:d5:
         1b:91:85:b3:38:a0:ce:15:a8:59:2a:49:71:a8:56:d0:02:9d:
         7f:cd:61:f6:4d:d3:c7:bc:1c:b2:2e:23:9f:83:a8:b4:a8:ef:
         18:f0:f1:d7:73:24:e8:82:4e:36:15:8e:84:72:5d:30:87:57:
         65:5b:c5:6f:97:ed:3f:4d:a4:07:d4:85:b0:8a:fd:65:1a:15:
         4e:85:c1:0e:01:4f:08:88:36:19:a7:af:2d:f4:78:1e:d4:3e:
         21:d4:86:33:ab:32:e8:b2:5f:96:c7:c8:2f:85:fa:bb:cc:ce:
         42:44:fe:cd:8a:a0:4f:80:25:22:aa:13:93:28:20:61:d9:84:
         ed:79:a4:b3:18:6f:5e:3c:c3:55:e9:ea:fe:bc:da:f6:3b:5b:
         7b:8b:ee:82
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUER6NFVve4wZexnZXGVG0DyNlNggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ0RTYyQjI5ODNEMkYwODc5MTEyQTE2MEU0MkNBRjIz
ODJGQTYyODAeFw0yMzExMDcyMDMwMzdaFw0yNDExMDUyMDM1MzdaMDMxMTAvBgNV
BAMTKDNEMzJBM0QyOEVCNTkyRTkwMkVDMzdENDFCNUZGNzM4Nzc3NjAyMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDme2KPZxgjdtTSOGQmOuRBxQt6
z+i8vGV2P1Llysc9dFwg3vHoMx/VAIOGlMiB/9J+ACreIdXrq3gOAuNCjGn2Hlog
I++s3i/hq0tcCG33lW45Cbu19PeNd4AIpmgPj1Bk4qxosoqQkYtQ4dKeuBX0vQXA
gPogxrUxjFhd6h7kV4bZ0pCKDWTuc1ZjLSMCE8wr70zOzHT7GN48uyVKL6/ztdGM
51mPzrg8MudP4zmplrLSYxrvCgJQY8WpcWXdLZWEE8b1l/Bzq/osAxcV8yzf6wVO
5WD5MgdPthw/jrYLlaslSqiu1qUu/R2uBHix3Pm8Qhx8/o1B9UJi3JdVQXLDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPTKj0o61kukC7DfUG1/3OHd2Ag4wHwYDVR0j
BBgwFoAUxE5ispg9Lwh5ESoWDkLK8jgvpigwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05DUm5qTU5VUzhqZlN5RmluTVpQeHZtdmNhdEpabW9Dc3ZjQXdmbmJl
MVcvMC9DNDRFNjJCMjk4M0QyRjA4NzkxMTJBMTYwRTQyQ0FGMjM4MkZBNjI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M0NEU2MkIyOTgzRDJGMDg3
OTExMkExNjBFNDJDQUYyMzgyRkE2MjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOQ1Juak1OVVM4amZTeUZpbk1aUHh2bXZjYXRKWm1vQ3N2Y0F3Zm5iZTFXLzAv
MzQzNTJlMzIzMzMwMmUzMjMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt5uowDQYJKoZIhvcNAQELBQADggEBAKEBDm4j
V6lN+mUYjkYmlL76fbw5P9nNUIJqCDRE8hPXduYxDcfS+93aw2af/5dbvUrvJkZl
PN/VP9v4dF/uYZLMqDILvRbDOkrod6PRESWfJFuJAF+Tfhi3thGxOqMhKmR/LsDe
HA1NY4VS1RuRhbM4oM4VqFkqSXGoVtACnX/NYfZN08e8HLIuI5+DqLSo7xjw8ddz
JOiCTjYVjoRyXTCHV2VbxW+X7T9NpAfUhbCK/WUaFU6FwQ4BTwiINhmnry30eB7U
PiHUhjOrMuiyX5bHyC+F+rvMzkJE/s2KoE+AJSKqE5MoIGHZhO15pLMYb148w1Xp
6v682vY7W3uL7oI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org