Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32322d3232203d3e20323637323439.roa
File:                     34352e3233322e35362e302f32322d3232203d3e20323637323439.roa (raw, json)
Hash identifier:          qoYmvAYWmWqsrEdGu2qWhBse897bmZKwm/q6bomlV7s=
Subject key identifier:   BA:E1:E2:E8:D6:4B:31:D9:DF:90:73:BB:3B:41:B1:40:13:FC:BA:1E
Certificate issuer:       /CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Certificate serial:       50A1DB4A9B0E3900C2CD758B50BFDC5B301A4A0E
Authority key identifier: E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32322d3232203d3e20323637323439.roa
Signing time:             Thu 15 Feb 2024 13:49:26 +0000
ROA not before:           Thu 15 Feb 2024 13:44:26 +0000
ROA not after:            Thu 13 Feb 2025 13:49:26 +0000
asID:                     267249
IP address blocks:        45.232.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a1:db:4a:9b:0e:39:00:c2:cd:75:8b:50:bf:dc:5b:30:1a:4a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
        Validity
            Not Before: Feb 15 13:44:26 2024 GMT
            Not After : Feb 13 13:49:26 2025 GMT
        Subject: CN=BAE1E2E8D64B31D9DF9073BB3B41B14013FCBA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:41:08:de:5f:4d:dc:5e:ed:3a:3a:b8:21:
                    68:aa:22:a9:a1:60:25:34:21:7d:c4:44:67:ae:2f:
                    b9:80:1a:cd:ec:58:ed:7e:cc:27:2d:c1:2e:12:33:
                    dd:00:ac:e6:00:b1:36:81:99:6b:6f:74:f8:2c:49:
                    de:c8:f7:83:bc:34:87:09:e2:e6:d2:f6:48:cf:10:
                    3c:d2:c1:c4:ce:5c:65:39:94:a7:99:28:7a:94:e9:
                    95:91:fd:b7:bb:4e:2d:8c:01:a6:4c:ea:69:55:37:
                    e5:f2:1a:29:b1:ca:dd:a1:6d:9c:d1:fd:98:31:ad:
                    84:ce:f8:41:f8:c2:c7:28:54:a0:98:a4:bb:04:0a:
                    ef:4d:23:0d:81:a7:92:e6:2f:a2:32:03:e2:da:df:
                    2f:d9:00:50:dc:38:89:92:9f:c1:98:d0:da:dd:13:
                    06:7c:dd:8d:b7:70:7d:97:6b:f7:f7:7c:13:dc:b6:
                    5b:cd:f8:0b:fc:d1:48:92:75:93:93:e4:e3:72:b1:
                    c3:50:91:0f:99:25:fe:f0:dd:ba:b6:4b:b8:13:cf:
                    f2:31:0e:d0:8b:c1:97:77:fe:05:a9:0a:ae:67:fd:
                    73:76:fb:6c:0f:d9:f2:d3:69:76:7b:f0:96:61:c1:
                    06:9d:99:ae:f8:12:57:d7:db:88:b0:bc:1b:4a:fe:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E1:E2:E8:D6:4B:31:D9:DF:90:73:BB:3B:41:B1:40:13:FC:BA:1E
            X509v3 Authority Key Identifier:
                keyid:E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32322d3232203d3e20323637323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:68:3f:59:24:09:90:52:ef:ef:55:c8:13:02:13:67:7e:dc:
         2a:70:76:49:c1:a1:bf:e4:ab:8f:95:91:62:d7:0c:fc:ea:a9:
         2a:f2:38:de:65:d4:d6:32:e9:73:d9:66:71:81:28:e3:d2:f8:
         fb:13:da:e9:e1:84:d0:97:96:cc:da:4c:b3:41:d9:6a:ff:8a:
         2b:4a:dc:a7:c3:67:aa:a9:1a:6a:08:01:43:d2:fc:51:d5:83:
         8d:68:5a:2c:45:62:2c:3f:86:de:81:44:13:39:22:e0:85:33:
         e1:93:27:30:2d:c0:92:34:8a:d5:9f:c9:64:4c:e4:16:eb:53:
         2e:15:c0:e5:2d:3c:e9:dd:aa:b1:99:c8:cf:1d:e2:e5:61:23:
         2c:ce:ac:bb:52:a9:bb:2c:61:1b:1b:dd:89:00:ea:19:cc:fc:
         d7:72:3a:dd:d8:1d:07:50:70:89:84:56:0e:4f:eb:f6:0e:82:
         ec:4a:8c:3c:aa:b7:28:cc:10:fb:8e:bd:6b:14:70:3e:eb:1e:
         f4:f2:a1:58:9d:cd:59:57:1a:e3:16:71:a7:43:7c:84:95:f1:
         9c:c7:48:9e:ed:5d:02:53:5e:ef:70:e4:d9:2d:b8:00:77:ca:
         f4:25:63:ad:c5:0a:6c:6f:21:b4:78:61:79:a0:fa:c2:41:79:
         41:71:70:05
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUKHbSpsOOQDCzXWLUL/cWzAaSg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThEODYwQjQyMkVDQzI3QjBGRTQ2NzJDNjI1NEQzRDEy
MkUxNUY2MDAeFw0yNDAyMTUxMzQ0MjZaFw0yNTAyMTMxMzQ5MjZaMDMxMTAvBgNV
BAMTKEJBRTFFMkU4RDY0QjMxRDlERjkwNzNCQjNCNDFCMTQwMTNGQ0JBMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu20EI3l9N3F7tOjq4IWiqIqmh
YCU0IX3ERGeuL7mAGs3sWO1+zCctwS4SM90ArOYAsTaBmWtvdPgsSd7I94O8NIcJ
4ubS9kjPEDzSwcTOXGU5lKeZKHqU6ZWR/be7Ti2MAaZM6mlVN+XyGimxyt2hbZzR
/ZgxrYTO+EH4wscoVKCYpLsECu9NIw2Bp5LmL6IyA+La3y/ZAFDcOImSn8GY0Nrd
EwZ83Y23cH2Xa/f3fBPctlvN+Av80UiSdZOT5ONyscNQkQ+ZJf7w3bq2S7gTz/Ix
DtCLwZd3/gWpCq5n/XN2+2wP2fLTaXZ78JZhwQadma74ElfX24iwvBtK/rmnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuuHi6NZLMdnfkHO7O0GxQBP8uh4wHwYDVR0j
BBgwFoAU6NhgtCLswnsP5GcsYlTT0SLhX2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGttb2lxN2hINFF0YXJLTmtZTU5UdVVMamJLYTdoNzFqdnJmV3l1RzY1
NlUvMC9FOEQ4NjBCNDIyRUNDMjdCMEZFNDY3MkM2MjU0RDNEMTIyRTE1RjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4RDg2MEI0MjJFQ0MyN0Iw
RkU0NjcyQzYyNTREM0QxMjJFMTVGNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrbW9pcTdoSDRRdGFyS05rWU1OVHVVTGpiS2E3aDcxanZyZld5dUc2NTZVLzAv
MzQzNTJlMzIzMzMyMmUzNTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzIzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeg4MA0GCSqGSIb3DQEBCwUAA4IBAQANaD9ZJAmQ
Uu/vVcgTAhNnftwqcHZJwaG/5KuPlZFi1wz86qkq8jjeZdTWMulz2WZxgSjj0vj7
E9rp4YTQl5bM2kyzQdlq/4orStynw2eqqRpqCAFD0vxR1YONaFosRWIsP4begUQT
OSLghTPhkycwLcCSNIrVn8lkTOQW61MuFcDlLTzp3aqxmcjPHeLlYSMszqy7Uqm7
LGEbG92JAOoZzPzXcjrd2B0HUHCJhFYOT+v2DoLsSow8qrcozBD7jr1rFHA+6x70
8qFYnc1ZVxrjFnGnQ3yElfGcx0ie7V0CU17vcOTZLbgAd8r0JWOtxQpsbyG0eGF5
oPrCQXlBcXAF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org