Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa (raw, json)
Hash identifier:          VziOfVnaMBI0htqY2pSK7AEmV/LQU3KJJYzIQ4fmqiw=
Subject key identifier:   69:23:C5:A8:30:9C:E6:26:33:41:9C:93:87:35:BA:97:59:08:31:D9
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       3188B5C51239E8EB025B693DB6F8F2D187BCBB92
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:39 +0000
ROA not before:           Mon 04 Mar 2024 14:51:39 +0000
ROA not after:            Mon 03 Mar 2025 14:56:39 +0000
asID:                     268248
IP address blocks:        45.236.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:88:b5:c5:12:39:e8:eb:02:5b:69:3d:b6:f8:f2:d1:87:bc:bb:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:39 2024 GMT
            Not After : Mar  3 14:56:39 2025 GMT
        Subject: CN=6923C5A8309CE62633419C938735BA97590831D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:6a:bc:25:0c:02:e0:86:d0:03:e3:77:7f:
                    f7:62:a3:75:72:8d:dc:a6:34:89:89:15:ca:08:ef:
                    e3:69:43:1a:5d:db:d4:ab:6b:a0:80:82:a1:4e:af:
                    b1:d9:89:ee:b9:dd:3a:5f:2c:b4:1e:3d:78:21:0c:
                    a9:5f:d0:a3:98:8b:eb:d2:19:85:37:2a:ca:64:8c:
                    16:dd:04:ca:7e:9e:70:59:4d:65:15:d9:3e:fe:cb:
                    ef:21:e5:44:53:9a:42:17:c3:42:f4:1b:19:cd:7e:
                    ed:72:2a:65:a1:6f:b6:72:83:45:20:05:51:90:45:
                    0c:a8:b0:28:77:e8:ca:e1:51:19:fd:e9:6c:37:0f:
                    18:1f:a0:c2:df:61:51:1f:29:81:9c:2f:03:13:0d:
                    3f:57:f9:b4:6a:d4:89:bd:7e:e6:76:3e:ee:37:39:
                    05:7d:56:79:04:99:f7:ee:0d:5d:64:d0:84:79:14:
                    83:cd:00:48:77:d6:12:15:05:8f:e1:f5:b8:a5:60:
                    b4:8f:93:91:c4:62:7f:18:51:51:b6:66:4b:8d:1e:
                    a2:96:ab:e6:64:04:79:21:de:94:ad:26:36:08:d7:
                    1c:67:a9:cc:8e:80:2f:cd:1c:c5:28:a9:be:95:f3:
                    1b:54:21:59:9f:78:ea:16:51:a6:68:98:fe:14:a8:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:23:C5:A8:30:9C:E6:26:33:41:9C:93:87:35:BA:97:59:08:31:D9
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:68:61:4c:9e:f2:a0:fa:04:33:be:aa:e0:0e:47:49:c7:81:
         60:0d:3e:4d:f7:8a:b4:9c:32:1c:68:3c:ce:62:d2:53:82:e8:
         5b:36:2e:af:24:60:a2:ea:a4:b0:36:f2:55:45:84:8b:ad:f7:
         c1:9b:a0:ec:2f:1d:06:7f:d9:3e:cc:6b:06:94:d0:2b:73:1c:
         38:64:96:f0:6a:19:28:bf:03:12:07:8e:bf:32:de:f9:6a:27:
         53:62:64:b3:47:14:d0:70:79:cc:b6:32:71:01:70:1b:6e:dd:
         fb:b3:0d:fa:b1:03:6f:d9:87:a7:94:bc:81:54:58:4e:cc:23:
         fa:76:cf:4f:a4:2c:12:fa:41:3d:17:b5:eb:8f:ca:b1:96:93:
         09:15:7a:3d:72:3a:66:fc:a5:69:55:b4:42:4f:c5:b2:01:f9:
         fd:04:42:71:20:9c:d7:aa:c6:d9:3e:b8:fd:8c:1c:1b:8a:d8:
         b0:6a:5c:3c:1f:b2:76:d7:11:90:04:eb:e3:2c:2a:cf:98:63:
         05:24:bd:49:e2:49:cb:ce:c1:bc:2f:54:e9:9e:e8:db:1b:7d:
         86:41:1a:a9:65:b7:01:ff:7c:4b:19:e8:eb:d7:a7:e0:ca:56:
         90:8f:39:f1:39:d0:0b:ff:14:2c:8d:9f:eb:f7:1a:4c:43:e5:
         29:0c:08:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMYi1xRI56OsCW2k9tvjy0Ye8u5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdFOERGNDcxMEZFRjA0RDFDMjY5OTAxNzE0MDY3OUMy
QjUzMEU5MDAeFw0yNDAzMDQxNDUxMzlaFw0yNTAzMDMxNDU2MzlaMDMxMTAvBgNV
BAMTKDY5MjNDNUE4MzA5Q0U2MjYzMzQxOUM5Mzg3MzVCQTk3NTkwODMxRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqWq8JQwC4IbQA+N3f/dio3Vy
jdymNImJFcoI7+NpQxpd29Sra6CAgqFOr7HZie653TpfLLQePXghDKlf0KOYi+vS
GYU3KspkjBbdBMp+nnBZTWUV2T7+y+8h5URTmkIXw0L0GxnNfu1yKmWhb7Zyg0Ug
BVGQRQyosCh36MrhURn96Ww3DxgfoMLfYVEfKYGcLwMTDT9X+bRq1Im9fuZ2Pu43
OQV9VnkEmffuDV1k0IR5FIPNAEh31hIVBY/h9bilYLSPk5HEYn8YUVG2ZkuNHqKW
q+ZkBHkh3pStJjYI1xxnqcyOgC/NHMUoqb6V8xtUIVmfeOoWUaZomP4UqGW7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaSPFqDCc5iYzQZyThzW6l1kIMdkwHwYDVR0j
BBgwFoAUh+jfRxD+8E0cJpkBcUBnnCtTDpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZWRERaZVA4Skt6QzJtUndhRnVIQXRiMnpuYU5IQ3p4NFU1RUh0VllQ
SEwvMS84N0U4REY0NzEwRkVGMDREMUMyNjk5MDE3MTQwNjc5QzJCNTMwRTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3RThERjQ3MTBGRUYwNEQx
QzI2OTkwMTcxNDA2NzlDMkI1MzBFOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWVkREWmVQOEpLekMybVJ3YUZ1SEF0YjJ6bmFOSEN6eDRVNUVIdFZZUEhMLzEv
MzQzNTJlMzIzMzM2MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7NwwDQYJKoZIhvcNAQELBQADggEBAJNoYUye
8qD6BDO+quAOR0nHgWANPk33irScMhxoPM5i0lOC6Fs2Lq8kYKLqpLA28lVFhIut
98GboOwvHQZ/2T7MawaU0CtzHDhklvBqGSi/AxIHjr8y3vlqJ1NiZLNHFNBwecy2
MnEBcBtu3fuzDfqxA2/Zh6eUvIFUWE7MI/p2z0+kLBL6QT0XteuPyrGWkwkVej1y
Omb8pWlVtEJPxbIB+f0EQnEgnNeqxtk+uP2MHBuK2LBqXDwfsnbXEZAE6+MsKs+Y
YwUkvUniScvOwbwvVOme6NsbfYZBGqlltwH/fEsZ6OvXp+DKVpCPOfE50Av/FCyN
n+v3GkxD5SkMCM0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org