Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/34352e37302e31362e302f32322d3234203d3e20323637353433.roa
File:                     34352e37302e31362e302f32322d3234203d3e20323637353433.roa (raw, json)
Hash identifier:          HMmupWcn498/+Dcu8YTW0ykXUQc9p5KwFWUTnseG6UQ=
Subject key identifier:   32:60:F6:F7:53:3C:6A:64:D3:0E:21:52:15:91:E9:F4:57:7F:AE:46
Certificate issuer:       /CN=528249EC56CB215F518F4451571769ECE2BB8915
Certificate serial:       79D2F3DCB776B94A3680D1FFF91D64BFC5F662A3
Authority key identifier: 52:82:49:EC:56:CB:21:5F:51:8F:44:51:57:17:69:EC:E2:BB:89:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/528249EC56CB215F518F4451571769ECE2BB8915.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/34352e37302e31362e302f32322d3234203d3e20323637353433.roa
Signing time:             Thu 19 Oct 2023 13:54:18 +0000
ROA not before:           Thu 19 Oct 2023 13:49:18 +0000
ROA not after:            Thu 17 Oct 2024 13:54:18 +0000
asID:                     267543
IP address blocks:        45.70.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d2:f3:dc:b7:76:b9:4a:36:80:d1:ff:f9:1d:64:bf:c5:f6:62:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528249EC56CB215F518F4451571769ECE2BB8915
        Validity
            Not Before: Oct 19 13:49:18 2023 GMT
            Not After : Oct 17 13:54:18 2024 GMT
        Subject: CN=3260F6F7533C6A64D30E21521591E9F4577FAE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:f8:52:92:00:3d:75:e6:30:17:9c:79:bd:
                    43:47:bc:bf:8a:a9:c4:1a:40:e4:d6:2b:fc:9b:32:
                    e2:b6:ff:06:9c:89:89:18:d9:3d:2d:43:c5:73:b5:
                    e9:f4:29:ee:30:c3:45:84:71:3f:d7:81:3d:70:28:
                    70:5c:11:57:bb:87:e7:68:e1:3b:8c:88:e5:a2:5c:
                    e0:4c:76:9b:f2:6e:57:45:a0:b7:a0:d4:0e:c8:b8:
                    1a:d6:92:83:e4:00:1b:05:47:fc:24:71:37:3a:89:
                    c1:61:c7:bd:61:9c:e5:ab:56:e5:1e:1e:e6:cb:fb:
                    11:a5:2f:43:1a:66:be:b9:3f:63:ea:9f:a3:30:f3:
                    34:92:33:ab:75:3f:8f:4c:e4:22:b1:8b:db:53:ce:
                    4c:bc:8d:11:5c:66:77:b2:1d:b1:72:10:93:c8:6c:
                    0e:9b:76:18:48:a3:b5:46:68:30:33:b1:9c:dc:a0:
                    6e:24:e4:f0:31:65:fb:87:fc:72:3e:be:b1:d9:bf:
                    df:9b:b4:d7:2b:b0:79:55:17:18:33:a5:30:2d:35:
                    89:7d:20:cd:60:19:60:45:aa:5e:cf:8b:75:1c:0a:
                    7e:bd:3d:56:4b:7d:8c:3a:bd:21:f8:3d:b2:d6:5b:
                    e3:29:6c:5f:3d:72:0b:b8:58:a7:f1:f5:76:f7:f3:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:F6:F7:53:3C:6A:64:D3:0E:21:52:15:91:E9:F4:57:7F:AE:46
            X509v3 Authority Key Identifier:
                keyid:52:82:49:EC:56:CB:21:5F:51:8F:44:51:57:17:69:EC:E2:BB:89:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/528249EC56CB215F518F4451571769ECE2BB8915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/528249EC56CB215F518F4451571769ECE2BB8915.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/34352e37302e31362e302f32322d3234203d3e20323637353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:81:43:4c:1a:58:de:8f:66:62:b1:00:d4:d3:bc:02:2f:1f:
         b2:70:91:ed:e9:8c:5f:3e:19:5d:3f:e0:f7:ad:6e:63:01:ce:
         74:08:63:60:4f:4d:b6:15:e0:8b:fc:73:25:b9:d3:69:66:38:
         ab:b5:33:78:92:ab:ce:ec:ce:fb:98:eb:3c:a9:1b:fa:75:86:
         20:58:e3:22:61:42:e4:cd:09:4e:bd:58:b9:a6:0c:9d:fd:54:
         1d:b4:be:84:52:ab:94:74:d2:8f:92:d5:f0:6d:42:42:2f:30:
         b4:8a:e1:3c:04:f7:f4:dc:c4:42:60:28:5f:7b:e6:33:76:29:
         97:58:3e:fa:c9:d6:e8:45:54:b3:1a:62:33:df:94:39:68:35:
         43:18:68:c1:55:5e:d6:ab:1b:38:45:0b:53:b4:f0:34:e2:3c:
         2b:a9:34:11:cc:9f:5c:4d:66:d7:e7:e0:ae:d8:69:f5:ca:b4:
         08:de:36:f1:ba:f1:18:35:09:99:20:d3:1b:e1:ab:67:f0:ee:
         3b:e9:0e:a0:cb:6a:3b:f5:95:68:88:80:51:1b:c8:45:62:42:
         77:e4:1d:8d:72:04:43:ae:4c:fe:c6:9e:b1:d6:95:1e:a2:21:
         92:f6:71:ab:4c:d4:65:f8:83:f9:dc:0e:e8:03:2f:ba:8e:a1:
         cd:14:c9:b2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUedLz3Ld2uUo2gNH/+R1kv8X2YqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI4MjQ5RUM1NkNCMjE1RjUxOEY0NDUxNTcxNzY5RUNF
MkJCODkxNTAeFw0yMzEwMTkxMzQ5MThaFw0yNDEwMTcxMzU0MThaMDMxMTAvBgNV
BAMTKDMyNjBGNkY3NTMzQzZBNjREMzBFMjE1MjE1OTFFOUY0NTc3RkFFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vvhSkgA9deYwF5x5vUNHvL+K
qcQaQOTWK/ybMuK2/waciYkY2T0tQ8Vzten0Ke4ww0WEcT/XgT1wKHBcEVe7h+do
4TuMiOWiXOBMdpvybldFoLeg1A7IuBrWkoPkABsFR/wkcTc6icFhx71hnOWrVuUe
HubL+xGlL0MaZr65P2Pqn6Mw8zSSM6t1P49M5CKxi9tTzky8jRFcZneyHbFyEJPI
bA6bdhhIo7VGaDAzsZzcoG4k5PAxZfuH/HI+vrHZv9+btNcrsHlVFxgzpTAtNYl9
IM1gGWBFql7Pi3UcCn69PVZLfYw6vSH4PbLWW+MpbF89cgu4WKfx9Xb381VRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMmD291M8amTTDiFSFZHp9Fd/rkYwHwYDVR0j
BBgwFoAUUoJJ7FbLIV9Rj0RRVxdp7OK7iRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGpp
TWMvMC81MjgyNDlFQzU2Q0IyMTVGNTE4RjQ0NTE1NzE3NjlFQ0UyQkI4OTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyODI0OUVDNTZDQjIxNUY1
MThGNDQ1MTU3MTc2OUVDRTJCQjg5MTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RYWFJuNU5FTTI3Smd4WXBVd3pNRHpYY3NWSlh3QndlWFVXdTQyU0xqaU1jLzAv
MzQzNTJlMzczMDJlMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM1
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1GEDANBgkqhkiG9w0BAQsFAAOCAQEAkoFDTBpY3o9m
YrEA1NO8Ai8fsnCR7emMXz4ZXT/g961uYwHOdAhjYE9NthXgi/xzJbnTaWY4q7Uz
eJKrzuzO+5jrPKkb+nWGIFjjImFC5M0JTr1YuaYMnf1UHbS+hFKrlHTSj5LV8G1C
Qi8wtIrhPAT39NzEQmAoX3vmM3Ypl1g++snW6EVUsxpiM9+UOWg1QxhowVVe1qsb
OEULU7TwNOI8K6k0EcyfXE1m1+fgrthp9cq0CN428brxGDUJmSDTG+GrZ/DuO+kO
oMtqO/WVaIiAURvIRWJCd+QdjXIEQ65M/saesdaVHqIhkvZxq0zUZfiD+dwO6AMv
uo6hzRTJsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org