Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa
File:                     34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa (raw, json)
Hash identifier:          dazJRrEemimuUrCOh3HxP/WvDPxDsyFWWHl/O3B2DyI=
Subject key identifier:   4D:A3:10:2A:A8:B2:52:88:FE:C6:6D:DE:BE:A0:FA:39:21:A3:4A:DC
Certificate issuer:       /CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
Certificate serial:       0E3A133BC07B5F649CF1CF2545FBDB0FE72EF5E4
Authority key identifier: 7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa
Signing time:             Mon 22 Jan 2024 13:01:53 +0000
ROA not before:           Mon 22 Jan 2024 12:56:53 +0000
ROA not after:            Mon 20 Jan 2025 13:01:53 +0000
asID:                     268134
IP address blocks:        45.169.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3a:13:3b:c0:7b:5f:64:9c:f1:cf:25:45:fb:db:0f:e7:2e:f5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
        Validity
            Not Before: Jan 22 12:56:53 2024 GMT
            Not After : Jan 20 13:01:53 2025 GMT
        Subject: CN=4DA3102AA8B25288FEC66DDEBEA0FA3921A34ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:53:f9:c4:ab:5c:a8:94:dd:ad:03:ab:8a:
                    43:d7:07:6a:ca:d6:46:1b:ac:69:04:19:58:e5:ec:
                    b0:8b:ed:66:b3:6c:58:30:20:91:3a:1e:3a:97:9a:
                    5f:78:b5:b1:0f:04:e2:c6:ed:7d:dd:6c:cb:83:15:
                    33:8a:07:c7:a1:ca:81:3e:ea:08:62:3b:11:07:83:
                    c7:33:c0:19:e4:50:c8:7e:fb:ed:98:2f:fe:4f:bc:
                    4d:92:78:b7:ca:dd:83:34:d8:84:be:35:cc:dc:85:
                    8e:39:88:8f:84:a7:8f:56:07:79:6d:0c:09:52:80:
                    ac:39:66:48:df:bc:cb:b0:8a:39:e2:ff:58:c2:86:
                    b8:df:2d:28:2b:69:8b:28:43:67:55:ef:b2:7a:fd:
                    d7:5d:75:bb:9f:6a:26:a9:b8:f4:15:ec:a5:f9:e8:
                    93:1d:a2:e0:63:8a:50:62:6e:c1:4c:f0:1e:4c:e4:
                    d0:e8:c2:97:04:58:e6:f6:a8:01:ed:b2:5e:a4:d6:
                    d4:25:b9:f8:b4:1e:31:58:01:ca:ef:3e:e3:f5:dd:
                    9e:cb:2c:81:8f:15:cd:30:ab:07:0f:c0:58:a0:9e:
                    59:c8:90:07:67:02:ba:3a:be:2b:cf:7a:12:55:59:
                    73:be:a2:f7:c7:13:5d:91:e9:e8:94:aa:9c:69:49:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A3:10:2A:A8:B2:52:88:FE:C6:6D:DE:BE:A0:FA:39:21:A3:4A:DC
            X509v3 Authority Key Identifier:
                keyid:7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:ed:cf:fa:47:41:ce:13:ff:f7:0e:5e:36:2f:86:15:5a:66:
         e2:db:bc:d0:1c:18:f3:ad:da:78:2a:43:88:2e:d3:6d:0b:d3:
         36:ee:7c:a7:f2:d3:4f:01:79:62:25:50:d0:4e:f1:d0:74:c8:
         d0:3f:24:c3:f2:9d:e5:73:27:cf:08:ce:5f:ff:9a:90:e6:61:
         71:5a:60:20:6b:51:f7:1e:7c:58:4e:7a:ef:80:c4:f2:4f:6c:
         1a:68:4b:a6:2c:19:a9:7e:68:37:da:a3:b0:b4:d5:f4:ef:8d:
         39:e3:17:9b:8e:48:33:b4:b1:6f:a1:e2:c7:fd:ee:a1:15:b3:
         7d:53:b8:fa:85:20:ad:78:7a:f4:e6:b6:20:ba:a2:e5:74:ae:
         21:2e:f9:23:b8:03:5f:91:52:85:12:76:10:54:d2:32:34:36:
         0c:0f:55:b5:8d:4e:99:28:11:83:b9:91:60:47:c2:b8:99:f7:
         e9:96:39:49:01:93:38:96:07:fb:89:c3:17:0f:92:a9:c6:d5:
         6a:e7:f7:0c:65:8e:70:b2:69:fd:ea:22:c3:90:3b:d0:5e:f4:
         59:53:03:20:5a:46:91:5b:23:19:6b:26:c1:c4:08:5e:de:35:
         d6:c6:5b:5a:a7:d5:bb:8d:83:30:7f:cf:6b:fa:aa:9e:39:fb:
         c9:0e:c1:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDjoTO8B7X2Sc8c8lRfvbD+cu9eQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NDODJGMjFDNDRFMEZFQkVCN0U1MTcxNTZCNDg4MjhE
RTI4MzM3ODAeFw0yNDAxMjIxMjU2NTNaFw0yNTAxMjAxMzAxNTNaMDMxMTAvBgNV
BAMTKDREQTMxMDJBQThCMjUyODhGRUM2NkRERUJFQTBGQTM5MjFBMzRBREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQyFP5xKtcqJTdrQOrikPXB2rK
1kYbrGkEGVjl7LCL7WazbFgwIJE6HjqXml94tbEPBOLG7X3dbMuDFTOKB8ehyoE+
6ghiOxEHg8czwBnkUMh+++2YL/5PvE2SeLfK3YM02IS+NczchY45iI+Ep49WB3lt
DAlSgKw5ZkjfvMuwijni/1jChrjfLSgraYsoQ2dV77J6/ddddbufaiapuPQV7KX5
6JMdouBjilBibsFM8B5M5NDowpcEWOb2qAHtsl6k1tQlufi0HjFYAcrvPuP13Z7L
LIGPFc0wqwcPwFignlnIkAdnAro6vivPehJVWXO+ovfHE12R6eiUqpxpSXMhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTaMQKqiyUoj+xm3evqD6OSGjStwwHwYDVR0j
BBgwFoAUfMgvIcROD+vrflFxVrSIKN4oM3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlFa281RTJ6TTc2MVRkWmVTVFRRVFFxUXRnVDFwOFdGbUFEaTdUc0dp
b0YvMC83Q0M4MkYyMUM0NEUwRkVCRUI3RTUxNzE1NkI0ODgyOERFMjgzMzc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDQzgyRjIxQzQ0RTBGRUJF
QjdFNTE3MTU2QjQ4ODI4REUyODMzNzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZRWtvNUUyek03NjFUZFplU1RUUVRRcVF0Z1QxcDhXRm1BRGk3VHNHaW9GLzAv
MzQzNTJlMzEzNjM5MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqfAwDQYJKoZIhvcNAQELBQADggEBAFbtz/pH
Qc4T//cOXjYvhhVaZuLbvNAcGPOt2ngqQ4gu020L0zbufKfy008BeWIlUNBO8dB0
yNA/JMPyneVzJ88Izl//mpDmYXFaYCBrUfcefFhOeu+AxPJPbBpoS6YsGal+aDfa
o7C01fTvjTnjF5uOSDO0sW+h4sf97qEVs31TuPqFIK14evTmtiC6ouV0riEu+SO4
A1+RUoUSdhBU0jI0NgwPVbWNTpkoEYO5kWBHwriZ9+mWOUkBkziWB/uJwxcPkqnG
1Wrn9wxljnCyaf3qIsOQO9Be9FlTAyBaRpFbIxlrJsHECF7eNdbGW1qn1buNgzB/
z2v6qp45+8kOwWs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org