Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa
File:                     34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa (raw, json)
Hash identifier:          EYoW9a8WsOfRrxiCN8crdzAoxT2NFyGetqzKnCXY0XY=
Subject key identifier:   40:D5:15:FB:CE:33:D7:47:6B:60:36:6E:DA:44:DF:B9:3F:B0:A3:E5
Certificate issuer:       /CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
Certificate serial:       7DAB3FEBFCF2A0FA8494BC1249CE5674BF6E7BF2
Authority key identifier: DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa
Signing time:             Thu 14 Sep 2023 14:45:26 +0000
ROA not before:           Thu 14 Sep 2023 14:40:26 +0000
ROA not after:            Thu 12 Sep 2024 14:45:26 +0000
asID:                     267330
IP address blocks:        45.233.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ab:3f:eb:fc:f2:a0:fa:84:94:bc:12:49:ce:56:74:bf:6e:7b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Validity
            Not Before: Sep 14 14:40:26 2023 GMT
            Not After : Sep 12 14:45:26 2024 GMT
        Subject: CN=40D515FBCE33D7476B60366EDA44DFB93FB0A3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:72:5f:4a:0d:42:ee:fd:d0:fe:0e:3c:d9:
                    4e:75:a9:bf:08:f9:b4:ae:98:c5:f1:3d:af:27:53:
                    64:75:fa:35:e3:7f:ec:17:06:e4:a8:64:d1:52:68:
                    cf:bd:e2:d2:45:cd:56:12:8c:b0:57:50:e7:b4:aa:
                    98:4b:b7:4f:63:cd:75:ab:00:ef:c8:01:72:9b:a1:
                    fe:4d:f5:c3:58:f2:3e:1d:e1:ad:3f:37:a7:c9:7f:
                    fe:f9:59:44:65:2a:b2:8a:be:02:ee:60:7f:63:72:
                    b1:21:49:cd:c6:1f:7e:ae:a9:df:c0:b4:ff:9f:94:
                    bc:46:23:d9:84:9d:18:f2:37:bb:2d:dc:d7:db:69:
                    2b:e0:34:91:6c:82:16:5a:fe:d3:77:a0:e3:cc:86:
                    d5:7a:83:ee:21:9e:8c:03:5d:fc:36:2a:00:52:d2:
                    be:0e:0b:79:d0:e6:f5:ae:40:b5:2f:b8:5b:36:00:
                    df:03:fc:79:6e:f8:94:a8:f9:c8:9f:32:b2:ba:a8:
                    02:e5:49:f7:0f:96:58:da:87:34:c9:1d:fa:31:1d:
                    ad:f2:cc:f4:d5:92:7e:1c:b0:1a:a3:4e:42:a7:95:
                    9a:76:c7:3b:c2:18:aa:c9:ff:66:26:a5:21:f9:e8:
                    79:ed:ac:14:5d:68:41:37:50:0b:8f:6d:5c:3f:0c:
                    05:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D5:15:FB:CE:33:D7:47:6B:60:36:6E:DA:44:DF:B9:3F:B0:A3:E5
            X509v3 Authority Key Identifier:
                keyid:DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:32:65:b5:a6:e0:1e:24:55:2b:53:f4:e7:50:c7:b1:e3:25:
         be:01:c6:07:76:27:5c:78:39:03:51:c7:c0:50:fb:a5:63:32:
         33:20:21:92:e9:be:f3:a4:e8:23:70:0e:5c:a2:97:db:e2:92:
         54:44:93:90:2c:5d:28:41:9c:fe:2b:e4:61:6b:6f:07:96:c3:
         2d:ec:3b:d7:90:59:2c:61:5a:cf:47:d3:fe:47:00:22:75:07:
         95:55:f2:0b:d2:2a:f1:58:b4:45:a1:c8:c3:ef:da:ac:38:ae:
         3e:e2:b9:35:68:c5:ce:0d:e2:bf:e7:1a:39:94:68:11:b0:2c:
         00:1f:0f:7a:53:f0:fb:68:43:53:61:f8:e5:9c:ae:ff:1b:9e:
         0c:e3:e4:c0:6b:44:da:d5:f2:6a:d5:ae:0a:3e:db:69:4f:6d:
         00:d0:fc:81:2c:c6:61:06:b0:2c:b2:d7:72:62:d4:d2:59:b1:
         40:d3:fc:83:0a:bd:9f:9e:d1:29:07:68:e7:1f:61:60:d9:12:
         f0:84:e1:e5:2d:21:ef:9e:6a:56:db:17:bf:f6:95:c8:87:41:
         48:1b:0f:a6:6f:b8:d2:ea:81:d8:c8:13:68:cd:91:90:7e:e3:
         38:4b:66:d4:35:6f:6c:7f:87:4c:a5:c4:96:cd:37:bf:b6:5d:
         d3:42:b5:7c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfas/6/zyoPqElLwSSc5WdL9ue/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJGRDM4NjIxQUUzMUMxODZCMTcyMkNGQzg3RkUwMzBG
MzMyMUFFMDAeFw0yMzA5MTQxNDQwMjZaFw0yNDA5MTIxNDQ1MjZaMDMxMTAvBgNV
BAMTKDQwRDUxNUZCQ0UzM0Q3NDc2QjYwMzY2RURBNDRERkI5M0ZCMEEzRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2CnJfSg1C7v3Q/g482U51qb8I
+bSumMXxPa8nU2R1+jXjf+wXBuSoZNFSaM+94tJFzVYSjLBXUOe0qphLt09jzXWr
AO/IAXKbof5N9cNY8j4d4a0/N6fJf/75WURlKrKKvgLuYH9jcrEhSc3GH36uqd/A
tP+flLxGI9mEnRjyN7st3NfbaSvgNJFsghZa/tN3oOPMhtV6g+4hnowDXfw2KgBS
0r4OC3nQ5vWuQLUvuFs2AN8D/Hlu+JSo+cifMrK6qALlSfcPlljahzTJHfoxHa3y
zPTVkn4csBqjTkKnlZp2xzvCGKrJ/2YmpSH56HntrBRdaEE3UAuPbVw/DAXpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQNUV+84z10drYDZu2kTfuT+wo+UwHwYDVR0j
BBgwFoAU2/04YhrjHBhrFyLPyH/gMPMyGuAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFExc3ZMYW9vQXpvb0Rua2dwc2ozSjM4Rkx2dXhwa3JFdTZieXdzOFpD
TGgvMC9EQkZEMzg2MjFBRTMxQzE4NkIxNzIyQ0ZDODdGRTAzMEYzMzIxQUUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCRkQzODYyMUFFMzFDMTg2
QjE3MjJDRkM4N0ZFMDMwRjMzMjFBRTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRMXN2TGFvb0F6b29EbmtncHNqM0ozOEZMdnV4cGtyRXU2Ynl3czhaQ0xoLzAv
MzQzNTJlMzIzMzMzMmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6eEwDQYJKoZIhvcNAQELBQADggEBAEIyZbWm
4B4kVStT9OdQx7HjJb4Bxgd2J1x4OQNRx8BQ+6VjMjMgIZLpvvOk6CNwDlyil9vi
klREk5AsXShBnP4r5GFrbweWwy3sO9eQWSxhWs9H0/5HACJ1B5VV8gvSKvFYtEWh
yMPv2qw4rj7iuTVoxc4N4r/nGjmUaBGwLAAfD3pT8PtoQ1Nh+OWcrv8bngzj5MBr
RNrV8mrVrgo+22lPbQDQ/IEsxmEGsCyy13Ji1NJZsUDT/IMKvZ+e0SkHaOcfYWDZ
EvCE4eUtIe+ealbbF7/2lciHQUgbD6ZvuNLqgdjIE2jNkZB+4zhLZtQ1b2x/h0yl
xJbNN7+2XdNCtXw=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org