Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa
File:                     34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (raw, json)
Hash identifier:          yhdRiDYvJLuCy3f/dwYqNmRNcrG7PsLq0rg2Xe9sTkk=
Subject key identifier:   E3:80:88:DF:0A:DD:D1:C3:E2:7E:77:8B:78:90:85:ED:02:94:7F:5E
Certificate issuer:       /CN=98C8564D2D23C0B3238882D116CD64384F680CDC
Certificate serial:       4E384B8CD57FE6C68E847D20F24072178423D1F6
Authority key identifier: 98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa
Signing time:             Tue 25 Apr 2023 21:32:16 +0000
ROA not before:           Tue 25 Apr 2023 21:27:16 +0000
ROA not after:            Tue 23 Apr 2024 21:32:16 +0000
asID:                     267373
IP address blocks:        45.234.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:38:4b:8c:d5:7f:e6:c6:8e:84:7d:20:f2:40:72:17:84:23:d1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C8564D2D23C0B3238882D116CD64384F680CDC
        Validity
            Not Before: Apr 25 21:27:16 2023 GMT
            Not After : Apr 23 21:32:16 2024 GMT
        Subject: CN=E38088DF0ADDD1C3E27E778B789085ED02947F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:2b:8c:91:c9:dd:ac:67:58:82:9f:04:6c:
                    38:8a:8b:f6:28:d2:ef:a1:01:a2:c7:55:f9:ca:fe:
                    63:fd:87:8b:2b:03:57:93:ba:e4:b3:85:c8:32:df:
                    e9:92:c0:cb:3b:c6:43:60:cd:60:3a:9d:de:e8:92:
                    25:1c:5a:0b:60:04:98:fa:ba:2a:c5:e3:9f:73:86:
                    af:7e:4f:b8:76:69:9c:8e:8c:21:68:bc:18:93:98:
                    05:81:a8:1c:a8:c7:55:64:1c:07:95:9d:dd:13:76:
                    4a:d4:00:6f:90:88:e3:cd:2d:e0:ad:fb:f8:71:9d:
                    6b:0d:25:4d:d5:8d:bf:ae:d6:a3:d1:74:ce:5d:21:
                    6d:1e:00:fc:5e:1f:e6:0f:d0:30:57:aa:48:18:ef:
                    9d:80:21:bd:27:0d:7f:3d:bc:4a:3c:e5:fa:9c:a4:
                    ea:8f:88:73:92:06:7b:8b:35:1b:a1:fc:49:66:a4:
                    59:eb:69:a2:7b:ca:51:73:53:13:6e:7e:ee:12:98:
                    e8:70:2a:e4:2d:8f:36:ea:c3:59:59:30:70:1e:a3:
                    eb:b6:f9:fe:2c:22:5b:ee:76:08:60:e9:96:fa:cc:
                    45:dc:fc:d3:22:96:3a:ea:d0:cb:b5:85:32:a8:7e:
                    c4:40:ba:c0:a9:5d:bc:f9:e3:00:bd:41:4c:b8:b1:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:88:DF:0A:DD:D1:C3:E2:7E:77:8B:78:90:85:ED:02:94:7F:5E
            X509v3 Authority Key Identifier:
                keyid:98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/98C8564D2D23C0B3238882D116CD64384F680CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:90:48:af:c1:d7:57:f2:92:8a:d5:2e:ef:3a:82:82:83:4b:
         20:5b:26:10:ec:b4:4c:e2:3a:fa:96:8c:06:d9:cf:26:d5:25:
         6f:71:87:5b:f1:c0:3a:df:72:d7:16:47:23:34:2d:ce:64:73:
         69:18:17:ac:27:0d:30:cc:f2:bf:7a:de:10:5e:c4:2a:1d:4d:
         56:80:ee:87:88:f6:bf:76:7e:5b:a8:15:d3:52:cc:8b:63:d9:
         4f:ce:f7:c5:58:9f:98:1e:0f:2d:86:14:bd:de:c7:79:fd:fd:
         1d:e5:89:f3:07:c5:1d:ce:37:42:c5:8d:e9:3e:2a:0c:6b:d7:
         1b:55:75:3f:00:8d:f5:d2:9a:f0:fa:2c:42:fc:ab:f1:d3:65:
         77:27:9a:a7:3e:6b:43:c6:ad:16:90:03:b6:4b:20:11:0a:39:
         92:a0:3c:1c:44:62:82:e7:8a:36:c2:cc:22:cb:26:3f:61:27:
         99:85:eb:38:72:96:ed:b2:34:ea:28:33:9a:89:fe:0a:4e:25:
         b8:6e:5a:bc:bd:81:d9:00:f8:ac:67:df:4a:d4:84:78:b9:e2:
         9f:b7:b7:89:83:34:d0:16:e3:bc:3a:95:5e:c9:8f:69:32:46:
         3d:ba:93:20:6a:56:5d:8c:76:aa:95:93:15:d2:c1:8c:75:43:
         d7:fc:97:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTjhLjNV/5saOhH0g8kByF4Qj0fYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThDODU2NEQyRDIzQzBCMzIzODg4MkQxMTZDRDY0Mzg0
RjY4MENEQzAeFw0yMzA0MjUyMTI3MTZaFw0yNDA0MjMyMTMyMTZaMDMxMTAvBgNV
BAMTKEUzODA4OERGMEFEREQxQzNFMjdFNzc4Qjc4OTA4NUVEMDI5NDdGNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc3CuMkcndrGdYgp8EbDiKi/Yo
0u+hAaLHVfnK/mP9h4srA1eTuuSzhcgy3+mSwMs7xkNgzWA6nd7okiUcWgtgBJj6
uirF459zhq9+T7h2aZyOjCFovBiTmAWBqByox1VkHAeVnd0TdkrUAG+QiOPNLeCt
+/hxnWsNJU3Vjb+u1qPRdM5dIW0eAPxeH+YP0DBXqkgY752AIb0nDX89vEo85fqc
pOqPiHOSBnuLNRuh/ElmpFnraaJ7ylFzUxNufu4SmOhwKuQtjzbqw1lZMHAeo+u2
+f4sIlvudghg6Zb6zEXc/NMiljrq0Mu1hTKofsRAusCpXbz54wC9QUy4sRlBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU44CI3wrd0cPifneLeJCF7QKUf14wHwYDVR0j
BBgwFoAUmMhWTS0jwLMjiILRFs1kOE9oDNwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREthcWZFVUdmekJTVTdiU0N2dEtucVFwNGI1aFFYeHoxNmdIYUhRcGpM
emIvMC85OEM4NTY0RDJEMjNDMEIzMjM4ODgyRDExNkNENjQzODRGNjgwQ0RDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4Qzg1NjREMkQyM0MwQjMy
Mzg4ODJEMTE2Q0Q2NDM4NEY2ODBDREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RLYXFmRVVHZnpCU1U3YlNDdnRLbnFRcDRiNWhRWHh6MTZnSGFIUXBqTHpiLzAv
MzQzNTJlMzIzMzM0MmUzMjMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6tYwDQYJKoZIhvcNAQELBQADggEBADOQSK/B
11fykorVLu86goKDSyBbJhDstEziOvqWjAbZzybVJW9xh1vxwDrfctcWRyM0Lc5k
c2kYF6wnDTDM8r963hBexCodTVaA7oeI9r92fluoFdNSzItj2U/O98VYn5geDy2G
FL3ex3n9/R3lifMHxR3ON0LFjek+Kgxr1xtVdT8AjfXSmvD6LEL8q/HTZXcnmqc+
a0PGrRaQA7ZLIBEKOZKgPBxEYoLnijbCzCLLJj9hJ5mF6zhylu2yNOooM5qJ/gpO
JbhuWry9gdkA+Kxn30rUhHi54p+3t4mDNNAW47w6lV7Jj2kyRj26kyBqVl2MdqqV
kxXSwYx1Q9f8lxg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org