Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32322d3234203d3e20323637323439.roa
File:                     34352e3233322e35362e302f32322d3234203d3e20323637323439.roa (raw, json)
Hash identifier:          bDfD1pUSsOf975e23N7Y6S7TCfABEHbbA46NWHkgq9s=
Subject key identifier:   C4:BB:DE:97:91:54:54:7D:EA:6C:E2:DD:35:87:51:C5:9E:39:2D:4B
Certificate issuer:       /CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Certificate serial:       352AB9FA0000720C60B5A3635B32152E7F9CB6C2
Authority key identifier: E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32322d3234203d3e20323637323439.roa
Signing time:             Wed 10 Apr 2024 13:13:59 +0000
ROA not before:           Wed 10 Apr 2024 13:08:59 +0000
ROA not after:            Wed 09 Apr 2025 13:13:59 +0000
asID:                     267249
IP address blocks:        45.232.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2a:b9:fa:00:00:72:0c:60:b5:a3:63:5b:32:15:2e:7f:9c:b6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
        Validity
            Not Before: Apr 10 13:08:59 2024 GMT
            Not After : Apr  9 13:13:59 2025 GMT
        Subject: CN=C4BBDE979154547DEA6CE2DD358751C59E392D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:1b:97:26:6c:46:1f:06:ae:dd:a0:e6:0b:
                    87:6d:89:8b:60:ee:b9:54:cf:7d:81:5d:5f:0a:0a:
                    f4:a8:52:61:e9:33:93:e7:d8:c3:04:d7:3a:fa:23:
                    90:77:2a:8f:8d:57:0b:db:d2:0d:42:7a:3c:a8:a3:
                    09:1f:93:ad:c4:8c:ed:76:9a:f0:02:60:0f:f2:8b:
                    ac:5d:b4:40:d8:4c:eb:25:e6:f1:79:a6:09:67:4b:
                    9c:89:e5:bf:4e:81:d3:4c:69:b1:6c:cd:a6:1a:5b:
                    44:c6:69:af:b9:31:10:b2:17:45:05:e7:9d:ef:20:
                    ee:c2:17:af:7c:96:c5:70:24:a2:44:cf:a4:09:ee:
                    b8:95:a6:3c:ca:60:f8:e5:73:b0:78:9a:39:63:fa:
                    2c:1a:af:6b:d5:0c:8f:81:f7:7c:11:6d:31:7c:98:
                    36:e5:9a:02:b4:a5:05:5d:72:07:f7:9b:a7:97:9e:
                    ca:30:37:7b:de:54:e3:de:91:be:7a:40:20:c3:55:
                    f9:a6:96:a2:f3:aa:c6:5f:e2:38:1c:4b:90:85:fe:
                    69:9e:01:27:57:ce:bf:a0:b5:c8:df:b1:ce:e4:ce:
                    2b:17:1d:69:6a:5a:48:bb:b5:e5:7a:0b:7e:d6:05:
                    9f:8f:09:2b:99:79:0c:9f:ce:3d:77:ca:ed:35:84:
                    c7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BB:DE:97:91:54:54:7D:EA:6C:E2:DD:35:87:51:C5:9E:39:2D:4B
            X509v3 Authority Key Identifier:
                keyid:E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32322d3234203d3e20323637323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:57:a9:4d:de:bf:c5:f5:38:21:02:2e:6b:8d:17:4a:a8:
         3e:49:95:4e:ba:fd:6b:4e:c8:2b:6b:11:7a:74:f7:86:5b:c9:
         5d:5b:c7:b2:8f:6c:df:ea:92:6a:d8:fd:58:f8:5d:3c:36:ce:
         d0:40:bf:74:d2:92:40:4f:e1:6e:ec:3b:62:af:4e:9f:46:59:
         a1:f9:55:ff:18:94:78:86:21:d1:60:df:19:b8:c9:ec:bd:fa:
         0e:e9:67:86:d8:e8:34:96:9d:a5:f6:09:e1:ba:b9:6e:b8:48:
         61:66:b3:af:f3:f9:08:cf:47:6a:e2:02:0c:1e:d9:6c:45:4e:
         a3:2b:eb:63:9c:f8:4c:f6:36:34:91:2d:c7:74:cc:6d:95:94:
         da:a4:17:80:47:2c:74:bf:2b:1c:7c:76:a1:89:77:20:10:23:
         0e:6a:79:00:d5:5a:26:24:bb:f6:d5:9a:b4:fe:d2:34:64:51:
         52:d2:45:1e:3f:2b:ee:5a:38:50:85:46:aa:19:15:cf:58:6a:
         76:d1:34:44:c2:e9:de:c7:4d:2b:f7:79:69:ab:33:b6:99:db:
         54:e4:e0:98:d7:7a:31:60:6e:83:19:4c:62:9e:77:ae:f1:2a:
         30:41:87:1c:7b:8d:59:01:3d:9a:32:fb:16:6f:3b:39:5f:72:
         53:8d:c9:8e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNSq5+gAAcgxgtaNjWzIVLn+ctsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThEODYwQjQyMkVDQzI3QjBGRTQ2NzJDNjI1NEQzRDEy
MkUxNUY2MDAeFw0yNDA0MTAxMzA4NTlaFw0yNTA0MDkxMzEzNTlaMDMxMTAvBgNV
BAMTKEM0QkJERTk3OTE1NDU0N0RFQTZDRTJERDM1ODc1MUM1OUUzOTJENEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62BuXJmxGHwau3aDmC4dtiYtg
7rlUz32BXV8KCvSoUmHpM5Pn2MME1zr6I5B3Ko+NVwvb0g1Cejyoowkfk63EjO12
mvACYA/yi6xdtEDYTOsl5vF5pglnS5yJ5b9OgdNMabFszaYaW0TGaa+5MRCyF0UF
553vIO7CF698lsVwJKJEz6QJ7riVpjzKYPjlc7B4mjlj+iwar2vVDI+B93wRbTF8
mDblmgK0pQVdcgf3m6eXnsowN3veVOPekb56QCDDVfmmlqLzqsZf4jgcS5CF/mme
ASdXzr+gtcjfsc7kzisXHWlqWki7teV6C37WBZ+PCSuZeQyfzj13yu01hMeTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxLvel5FUVH3qbOLdNYdRxZ45LUswHwYDVR0j
BBgwFoAU6NhgtCLswnsP5GcsYlTT0SLhX2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGttb2lxN2hINFF0YXJLTmtZTU5UdVVMamJLYTdoNzFqdnJmV3l1RzY1
NlUvMC9FOEQ4NjBCNDIyRUNDMjdCMEZFNDY3MkM2MjU0RDNEMTIyRTE1RjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4RDg2MEI0MjJFQ0MyN0Iw
RkU0NjcyQzYyNTREM0QxMjJFMTVGNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrbW9pcTdoSDRRdGFyS05rWU1OVHVVTGpiS2E3aDcxanZyZld5dUc2NTZVLzAv
MzQzNTJlMzIzMzMyMmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeg4MA0GCSqGSIb3DQEBCwUAA4IBAQA8vlepTd6/
xfU4IQIua40XSqg+SZVOuv1rTsgraxF6dPeGW8ldW8eyj2zf6pJq2P1Y+F08Ns7Q
QL900pJAT+Fu7Dtir06fRlmh+VX/GJR4hiHRYN8ZuMnsvfoO6WeG2Og0lp2l9gnh
urluuEhhZrOv8/kIz0dq4gIMHtlsRU6jK+tjnPhM9jY0kS3HdMxtlZTapBeARyx0
vyscfHahiXcgECMOankA1VomJLv21Zq0/tI0ZFFS0kUePyvuWjhQhUaqGRXPWGp2
0TREwunex00r93lpqzO2mdtU5OCY13oxYG6DGUxinneu8SowQYcce41ZAT2aMvsW
bzs5X3JTjcmO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org