Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35342e302f32332d3233203d3e20323639343131.roa
File:                     34352e3138362e35342e302f32332d3233203d3e20323639343131.roa (raw, json)
Hash identifier:          wZQx8wwGk27Zjx4f2wP2zJFMeBBREWx2KJbVboz//Rw=
Subject key identifier:   95:9B:0C:80:8F:F5:92:06:A9:CE:3F:4A:84:D2:85:02:99:05:29:83
Certificate issuer:       /CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
Certificate serial:       43E8F6BB242FAE3EBA426AA226533C05CD99BC2C
Authority key identifier: 10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35342e302f32332d3233203d3e20323639343131.roa
Signing time:             Tue 20 Jun 2023 14:04:37 +0000
ROA not before:           Tue 20 Jun 2023 13:59:37 +0000
ROA not after:            Tue 18 Jun 2024 14:04:37 +0000
asID:                     269411
IP address blocks:        45.186.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e8:f6:bb:24:2f:ae:3e:ba:42:6a:a2:26:53:3c:05:cd:99:bc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
        Validity
            Not Before: Jun 20 13:59:37 2023 GMT
            Not After : Jun 18 14:04:37 2024 GMT
        Subject: CN=959B0C808FF59206A9CE3F4A84D2850299052983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:df:07:eb:b5:f4:e3:bb:77:e0:dd:e9:ab:
                    f7:db:ce:66:80:76:6b:0c:e3:4d:0d:20:5a:18:c5:
                    92:f4:23:83:79:cf:19:1b:95:d3:ea:b9:b7:21:c7:
                    42:f1:39:89:6e:d5:52:1b:5f:b9:39:d5:54:7c:1e:
                    ba:2c:fc:e1:c3:43:f5:57:20:bc:01:05:a7:62:4f:
                    26:39:7a:a4:e9:a2:b1:3f:ba:30:40:8d:72:52:88:
                    2d:a2:59:5b:35:45:16:50:85:58:4e:c9:6f:5e:e3:
                    ab:02:8e:01:29:42:49:27:71:d7:b2:f2:b4:41:18:
                    74:17:a3:f6:98:fb:bd:ef:c0:36:31:da:c8:4e:31:
                    85:2f:da:e5:70:6b:de:b0:29:c5:26:da:07:29:e2:
                    e6:c6:32:1c:c2:fb:24:c3:25:a6:59:f4:bd:a7:e6:
                    fe:47:f2:20:1e:d1:7f:6c:ca:07:5a:87:c1:0b:a9:
                    9d:7d:5f:de:47:52:a2:8d:bd:31:02:5e:3e:de:59:
                    6a:cb:99:69:24:90:4f:38:3e:92:76:4e:6e:b7:24:
                    f0:2d:9c:08:e8:18:cd:e6:99:b2:5f:7f:d4:1b:93:
                    6c:7a:6b:f0:3f:3b:53:7b:b8:bc:35:19:75:f4:4f:
                    0c:40:b7:28:e8:f0:9b:73:c2:32:c3:c1:10:76:20:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9B:0C:80:8F:F5:92:06:A9:CE:3F:4A:84:D2:85:02:99:05:29:83
            X509v3 Authority Key Identifier:
                keyid:10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35342e302f32332d3233203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:ad:a2:c6:b8:6d:05:60:1b:b9:12:7a:c4:cb:cd:33:f7:88:
         99:dc:4e:07:62:cb:d7:00:a5:d7:83:5d:26:e6:85:e5:30:10:
         21:58:c1:71:51:8e:a9:9e:93:22:db:5c:15:a6:4d:df:cb:2a:
         b6:fc:f6:72:b2:96:c9:5b:48:21:59:9e:98:14:b9:40:2c:ac:
         b5:90:12:e1:7a:dc:4f:a3:ec:62:24:f5:c2:2b:61:b8:b7:6a:
         cb:98:04:47:56:a4:4d:ad:a6:47:3c:5a:a1:22:3a:c2:74:3f:
         35:e0:34:b0:24:50:c8:94:2f:20:4a:97:4a:45:dc:b1:30:47:
         b8:3b:67:c7:53:96:c0:80:89:0d:05:8a:55:57:9a:f9:a8:30:
         7e:89:b2:12:10:1b:a3:d2:8b:38:8f:62:9f:20:bb:e6:78:c4:
         a8:ca:de:b3:20:c9:57:79:b2:22:d4:bc:4a:b0:1b:aa:9b:3f:
         c8:8e:46:41:cc:18:84:32:d3:fa:48:f2:b8:94:b1:ea:11:87:
         63:88:0d:68:f5:01:bf:3b:c0:0c:7e:97:8b:c1:96:c1:1f:d6:
         3b:5e:3c:87:82:2c:94:d1:75:8d:be:c9:03:84:fa:f9:cf:f0:
         d2:7e:11:af:ec:3b:a6:64:c7:40:26:61:84:d2:84:82:a3:a8:
         10:32:7f:52
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ+j2uyQvrj66QmqiJlM8Bc2ZvCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAwQkEwMTM0Qzc4NUQ4NEE5MTNFRjY1Qjg1QThCNDk3
M0QwQjJDNTAeFw0yMzA2MjAxMzU5MzdaFw0yNDA2MTgxNDA0MzdaMDMxMTAvBgNV
BAMTKDk1OUIwQzgwOEZGNTkyMDZBOUNFM0Y0QTg0RDI4NTAyOTkwNTI5ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpt8H67X047t34N3pq/fbzmaA
dmsM400NIFoYxZL0I4N5zxkbldPqubchx0LxOYlu1VIbX7k51VR8Hros/OHDQ/VX
ILwBBadiTyY5eqTporE/ujBAjXJSiC2iWVs1RRZQhVhOyW9e46sCjgEpQkkncdey
8rRBGHQXo/aY+73vwDYx2shOMYUv2uVwa96wKcUm2gcp4ubGMhzC+yTDJaZZ9L2n
5v5H8iAe0X9sygdah8ELqZ19X95HUqKNvTECXj7eWWrLmWkkkE84PpJ2Tm63JPAt
nAjoGM3mmbJff9Qbk2x6a/A/O1N7uLw1GXX0TwxAtyjo8JtzwjLDwRB2IARLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlZsMgI/1kgapzj9KhNKFApkFKYMwHwYDVR0j
BBgwFoAUEAugE0x4XYSpE+9luFqLSXPQssUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMC8xMDBCQTAxMzRDNzg1RDg0QTkxM0VGNjVCODVBOEI0OTczRDBCMkM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwMEJBMDEzNEM3ODVEODRB
OTEzRUY2NUI4NUE4QjQ5NzNEMEIyQzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzAv
MzQzNTJlMzEzODM2MmUzNTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbo2MA0GCSqGSIb3DQEBCwUAA4IBAQCLraLGuG0F
YBu5EnrEy80z94iZ3E4HYsvXAKXXg10m5oXlMBAhWMFxUY6pnpMi21wVpk3fyyq2
/PZyspbJW0ghWZ6YFLlALKy1kBLhetxPo+xiJPXCK2G4t2rLmARHVqRNraZHPFqh
IjrCdD814DSwJFDIlC8gSpdKRdyxMEe4O2fHU5bAgIkNBYpVV5r5qDB+ibISEBuj
0os4j2KfILvmeMSoyt6zIMlXebIi1LxKsBuqmz/IjkZBzBiEMtP6SPK4lLHqEYdj
iA1o9QG/O8AMfpeLwZbBH9Y7XjyHgiyU0XWNvskDhPr5z/DSfhGv7DumZMdAJmGE
0oSCo6gQMn9S
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org