Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          ln2WIg3QPJFu8qf++Ra43Y+otKxMhFySBEQa3WvIe48=
Subject key identifier:   A4:28:FC:07:25:B3:1B:D3:85:C8:E0:55:75:CC:7D:E2:61:8B:10:35
Certificate issuer:       /CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
Certificate serial:       29D3FF061F96E15D8181A60F3EA350F4F75759F8
Authority key identifier: E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
Signing time:             Wed 08 Mar 2023 17:26:19 +0000
ROA not before:           Wed 08 Mar 2023 17:21:19 +0000
ROA not after:            Wed 06 Mar 2024 17:26:19 +0000
asID:                     268248
IP address blocks:        45.236.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d3:ff:06:1f:96:e1:5d:81:81:a6:0f:3e:a3:50:f4:f7:57:59:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
        Validity
            Not Before: Mar  8 17:21:19 2023 GMT
            Not After : Mar  6 17:26:19 2024 GMT
        Subject: CN=A428FC0725B31BD385C8E05575CC7DE2618B1035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:8b:b1:bf:f9:3d:e5:ba:8f:1a:62:2a:87:
                    45:73:a5:6e:45:70:15:f2:f5:dd:80:62:34:fd:65:
                    f8:30:ce:5c:e4:72:cf:b1:61:17:de:9a:ac:2f:ff:
                    42:0a:fd:fd:7f:7b:36:cd:32:50:d8:b6:ae:ec:3e:
                    e0:7b:77:62:3d:f5:67:4d:64:95:27:2b:ed:3b:bf:
                    c1:a3:68:78:c3:2f:2b:41:70:5f:91:4c:56:13:a7:
                    c3:83:4e:84:77:8a:12:8a:25:48:d3:95:e9:f1:aa:
                    7d:8d:f5:3d:0e:68:e0:da:c5:d4:54:05:a8:dc:64:
                    b7:77:ea:b7:c2:6d:c8:a2:38:0c:9e:5e:60:79:22:
                    a8:a2:f1:46:1c:d2:99:ee:71:51:ee:42:20:12:4a:
                    42:08:c2:87:04:a7:26:f3:85:14:26:ea:9a:a9:ca:
                    19:8a:8a:cd:c1:b5:49:70:ee:dd:76:6f:72:d3:88:
                    e5:af:69:47:7d:e0:a7:81:4b:de:1d:6a:31:7a:c6:
                    fb:95:10:cc:dd:c2:a2:57:c7:b7:d6:68:61:ff:2f:
                    1d:0a:db:2b:12:7a:5e:0d:bd:36:2b:f1:29:1d:1a:
                    71:ea:32:b5:ac:0a:bb:ac:08:95:fb:cb:18:e8:21:
                    95:95:2b:98:59:ca:fc:99:92:07:94:23:ee:7a:ec:
                    4c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:28:FC:07:25:B3:1B:D3:85:C8:E0:55:75:CC:7D:E2:61:8B:10:35
            X509v3 Authority Key Identifier:
                keyid:E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:9d:68:9d:6e:e6:07:40:84:25:28:c1:ce:ab:89:b0:c5:b4:
         07:cd:e5:c3:c1:bd:09:bf:89:60:53:18:0b:01:47:26:7e:ef:
         43:21:17:a4:40:ad:c8:75:60:6d:01:82:9c:eb:a8:ce:72:5b:
         88:ba:af:8a:2a:ca:1e:a4:40:47:4c:16:c2:25:5d:1d:68:ed:
         78:61:f0:b0:47:57:32:f2:0f:b9:a4:1a:ed:de:4a:b9:27:33:
         20:07:e6:67:8f:c7:0e:28:c8:23:dd:24:db:45:71:f6:a2:b8:
         39:86:9c:fb:75:44:69:b6:fd:19:f4:c6:3f:26:87:0d:7f:3b:
         e9:1c:70:0c:c0:be:4d:97:03:b2:fa:24:e0:84:cd:08:a6:ae:
         f3:53:94:78:c0:c0:37:9e:af:fb:fb:0a:29:5b:1e:dd:e5:1e:
         89:9b:07:be:e3:64:31:e0:e1:0e:2a:e5:b1:bd:35:15:c6:9a:
         d8:cc:81:fb:dc:6c:1d:15:64:36:97:39:6b:29:b9:f7:7c:74:
         63:bc:c9:65:12:1c:90:9a:2d:34:79:8f:db:29:3d:93:fa:0e:
         3b:88:39:0b:7a:13:55:71:a4:27:d2:8e:3e:c1:b2:b0:e8:c7:
         ac:c3:c4:26:78:ff:c8:06:8e:4d:9b:e2:9a:16:7b:69:7f:f7:
         14:9f:a9:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKdP/Bh+W4V2BgaYPPqNQ9PdXWfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYwMjVENUJFREI1MUUxRDk4N0U0ODA0OEI5NjJFQ0E2
NkU1OUNEMDAeFw0yMzAzMDgxNzIxMTlaFw0yNDAzMDYxNzI2MTlaMDMxMTAvBgNV
BAMTKEE0MjhGQzA3MjVCMzFCRDM4NUM4RTA1NTc1Q0M3REUyNjE4QjEwMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXaYuxv/k95bqPGmIqh0VzpW5F
cBXy9d2AYjT9Zfgwzlzkcs+xYRfemqwv/0IK/f1/ezbNMlDYtq7sPuB7d2I99WdN
ZJUnK+07v8GjaHjDLytBcF+RTFYTp8ODToR3ihKKJUjTlenxqn2N9T0OaODaxdRU
BajcZLd36rfCbciiOAyeXmB5Iqii8UYc0pnucVHuQiASSkIIwocEpybzhRQm6pqp
yhmKis3BtUlw7t12b3LTiOWvaUd94KeBS94dajF6xvuVEMzdwqJXx7fWaGH/Lx0K
2ysSel4NvTYr8SkdGnHqMrWsCrusCJX7yxjoIZWVK5hZyvyZkgeUI+567EytAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpCj8ByWzG9OFyOBVdcx94mGLEDUwHwYDVR0j
BBgwFoAU5gJdW+21Hh2YfkgEi5YuymblnNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZWRERaZVA4Skt6QzJtUndhRnVIQXRiMnpuYU5IQ3p4NFU1RUh0VllQ
SEwvMC9FNjAyNUQ1QkVEQjUxRTFEOTg3RTQ4MDQ4Qjk2MkVDQTY2RTU5Q0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2MDI1RDVCRURCNTFFMUQ5
ODdFNDgwNDhCOTYyRUNBNjZFNTlDRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWVkREWmVQOEpLekMybVJ3YUZ1SEF0YjJ6bmFOSEN6eDRVNUVIdFZZUEhMLzAv
MzQzNTJlMzIzMzM2MmUzMjMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7NwwDQYJKoZIhvcNAQELBQADggEBAASdaJ1u
5gdAhCUowc6ribDFtAfN5cPBvQm/iWBTGAsBRyZ+70MhF6RArch1YG0BgpzrqM5y
W4i6r4oqyh6kQEdMFsIlXR1o7Xhh8LBHVzLyD7mkGu3eSrknMyAH5mePxw4oyCPd
JNtFcfaiuDmGnPt1RGm2/Rn0xj8mhw1/O+kccAzAvk2XA7L6JOCEzQimrvNTlHjA
wDeer/v7CilbHt3lHombB77jZDHg4Q4q5bG9NRXGmtjMgfvcbB0VZDaXOWspufd8
dGO8yWUSHJCaLTR5j9spPZP6DjuIOQt6E1VxpCfSjj7BsrDox6zDxCZ4/8gGjk2b
4poWe2l/9xSfqQE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org