Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa (raw, json)
Hash identifier:          2Z7JUYXu1uCMT21aXisHHGKDGHklYgCkWF8Q+hggEn8=
Subject key identifier:   07:1E:C0:86:5F:0B:80:CA:6E:D8:03:51:E5:8F:91:85:4F:F1:C3:1D
Certificate issuer:       /CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
Certificate serial:       16D7226348B0BFFFE24285B32BFD8FB87E3ECD8D
Authority key identifier: E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa
Signing time:             Wed 08 Mar 2023 17:26:14 +0000
ROA not before:           Wed 08 Mar 2023 17:21:14 +0000
ROA not after:            Wed 06 Mar 2024 17:26:14 +0000
asID:                     268248
IP address blocks:        45.236.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d7:22:63:48:b0:bf:ff:e2:42:85:b3:2b:fd:8f:b8:7e:3e:cd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
        Validity
            Not Before: Mar  8 17:21:14 2023 GMT
            Not After : Mar  6 17:26:14 2024 GMT
        Subject: CN=071EC0865F0B80CA6ED80351E58F91854FF1C31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:b9:14:13:0d:d0:b8:11:80:7a:9f:87:e1:
                    96:3c:e0:b9:fb:c7:45:61:38:26:0b:e4:b5:3a:97:
                    5d:48:47:b1:b1:bd:6b:72:20:ba:6d:37:1e:6d:cb:
                    38:3f:4e:50:9c:76:6e:6f:03:71:72:ba:ff:b6:54:
                    b9:b6:4a:da:12:41:50:70:7a:0f:1d:01:22:f8:14:
                    9d:9c:05:22:af:ee:de:97:e8:e9:f7:bd:54:f3:41:
                    6c:22:b0:3c:96:a9:4f:3f:0d:5f:57:94:f5:a1:30:
                    08:b7:82:95:6a:db:c6:84:a7:ba:f4:dc:29:97:f8:
                    77:47:bd:59:8d:8d:5b:33:f7:96:f5:8a:9c:7d:2f:
                    cd:e6:a3:20:7e:f5:8a:1b:ce:8f:85:7d:5a:d6:5f:
                    40:52:b5:72:95:6b:dc:8f:e4:79:bd:1b:ee:ba:0d:
                    4d:8c:49:00:1f:f9:d5:a2:ef:ec:99:2a:74:ae:21:
                    e6:f7:10:78:a1:62:f8:c7:66:12:93:e4:5a:e3:6f:
                    be:6e:c5:08:33:d7:d4:5e:74:69:4f:09:d7:52:69:
                    b0:d5:bc:8c:d7:2f:6f:a0:de:12:da:af:85:74:33:
                    e1:3f:30:54:e7:a6:f3:65:c7:ae:67:57:1a:ca:83:
                    c2:f5:de:af:6d:9d:ec:b5:2b:9f:7d:39:76:9a:d0:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1E:C0:86:5F:0B:80:CA:6E:D8:03:51:E5:8F:91:85:4F:F1:C3:1D
            X509v3 Authority Key Identifier:
                keyid:E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:7b:cb:55:1c:86:7c:38:15:07:6f:b6:80:8b:45:4a:49:81:
         e2:da:42:01:6a:5d:5f:58:e0:8d:ef:af:3f:e8:d8:39:31:77:
         37:1b:e8:ef:32:2a:67:a1:04:87:98:a3:ef:7b:5e:80:18:f5:
         c4:ce:75:32:0d:62:e5:0f:38:25:72:f8:69:fc:f8:1b:93:ee:
         85:36:76:ab:ff:a7:cf:b1:8e:6a:cf:55:f0:a5:98:e9:b0:97:
         fa:15:38:7f:63:4a:e9:74:ea:15:cc:31:2d:17:c4:11:8d:38:
         b3:6e:54:85:c4:e7:0a:76:0f:16:14:b1:2e:55:cf:3b:1b:6b:
         c2:27:4b:68:0a:51:41:1b:46:3b:38:bb:00:c0:06:df:19:cf:
         5c:9d:d2:96:a5:9a:22:33:88:32:36:13:3d:4a:c3:a0:7e:aa:
         00:6d:60:45:23:60:75:f7:5f:f7:6a:55:5c:d6:62:0a:52:1e:
         30:a9:9f:99:2e:96:8f:50:4a:91:b2:82:1d:4c:7a:18:21:0e:
         5c:38:68:53:aa:40:36:f8:6c:d5:c2:97:be:3a:69:50:2a:67:
         81:62:0e:e6:38:7a:38:c1:b0:da:9d:98:28:b0:ef:22:e4:e7:
         cf:1e:e0:be:8e:ca:8e:2a:f1:37:d4:d7:9b:b7:70:4f:03:76:
         fa:0a:f8:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFtciY0iwv//iQoWzK/2PuH4+zY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYwMjVENUJFREI1MUUxRDk4N0U0ODA0OEI5NjJFQ0E2
NkU1OUNEMDAeFw0yMzAzMDgxNzIxMTRaFw0yNDAzMDYxNzI2MTRaMDMxMTAvBgNV
BAMTKDA3MUVDMDg2NUYwQjgwQ0E2RUQ4MDM1MUU1OEY5MTg1NEZGMUMzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG5rkUEw3QuBGAep+H4ZY84Ln7
x0VhOCYL5LU6l11IR7GxvWtyILptNx5tyzg/TlCcdm5vA3Fyuv+2VLm2StoSQVBw
eg8dASL4FJ2cBSKv7t6X6On3vVTzQWwisDyWqU8/DV9XlPWhMAi3gpVq28aEp7r0
3CmX+HdHvVmNjVsz95b1ipx9L83moyB+9Yobzo+FfVrWX0BStXKVa9yP5Hm9G+66
DU2MSQAf+dWi7+yZKnSuIeb3EHihYvjHZhKT5Frjb75uxQgz19RedGlPCddSabDV
vIzXL2+g3hLar4V0M+E/MFTnpvNlx65nVxrKg8L13q9tney1K599OXaa0P//AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBx7Ahl8LgMpu2ANR5Y+RhU/xwx0wHwYDVR0j
BBgwFoAU5gJdW+21Hh2YfkgEi5YuymblnNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZWRERaZVA4Skt6QzJtUndhRnVIQXRiMnpuYU5IQ3p4NFU1RUh0VllQ
SEwvMC9FNjAyNUQ1QkVEQjUxRTFEOTg3RTQ4MDQ4Qjk2MkVDQTY2RTU5Q0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2MDI1RDVCRURCNTFFMUQ5
ODdFNDgwNDhCOTYyRUNBNjZFNTlDRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWVkREWmVQOEpLekMybVJ3YUZ1SEF0YjJ6bmFOSEN6eDRVNUVIdFZZUEhMLzAv
MzQzNTJlMzIzMzM2MmUzMjMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7NwwDQYJKoZIhvcNAQELBQADggEBADZ7y1Uc
hnw4FQdvtoCLRUpJgeLaQgFqXV9Y4I3vrz/o2Dkxdzcb6O8yKmehBIeYo+97XoAY
9cTOdTINYuUPOCVy+Gn8+BuT7oU2dqv/p8+xjmrPVfClmOmwl/oVOH9jSul06hXM
MS0XxBGNOLNuVIXE5wp2DxYUsS5Vzzsba8InS2gKUUEbRjs4uwDABt8Zz1yd0pal
miIziDI2Ez1Kw6B+qgBtYEUjYHX3X/dqVVzWYgpSHjCpn5kulo9QSpGygh1Mehgh
Dlw4aFOqQDb4bNXCl746aVAqZ4FiDuY4ejjBsNqdmCiw7yLk588e4L6Oyo4q8TfU
15u3cE8DdvoK+Os=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org