Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/34352e3138362e3130322e302f32332d3234203d3e20323639343232.roa
File:                     34352e3138362e3130322e302f32332d3234203d3e20323639343232.roa (raw, json)
Hash identifier:          QbJUV1BPVKae5uOKVxGdj9/8FQb6ysUeQxnWD5m9Hd4=
Subject key identifier:   8B:76:33:F3:33:88:3A:AE:8B:80:68:6A:B9:28:92:85:C4:48:54:29
Certificate issuer:       /CN=F8CD8F0474D30C184CB2C850D383396854E57CAA
Certificate serial:       27E0AFDE46AD464460D679CCB64C0D9EE219E93B
Authority key identifier: F8:CD:8F:04:74:D3:0C:18:4C:B2:C8:50:D3:83:39:68:54:E5:7C:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8CD8F0474D30C184CB2C850D383396854E57CAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/34352e3138362e3130322e302f32332d3234203d3e20323639343232.roa
Signing time:             Mon 11 Mar 2024 14:24:03 +0000
ROA not before:           Mon 11 Mar 2024 14:19:03 +0000
ROA not after:            Mon 10 Mar 2025 14:24:03 +0000
asID:                     269422
IP address blocks:        45.186.102.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e0:af:de:46:ad:46:44:60:d6:79:cc:b6:4c:0d:9e:e2:19:e9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8CD8F0474D30C184CB2C850D383396854E57CAA
        Validity
            Not Before: Mar 11 14:19:03 2024 GMT
            Not After : Mar 10 14:24:03 2025 GMT
        Subject: CN=8B7633F333883AAE8B80686AB9289285C4485429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:ff:11:b1:8d:35:b2:70:88:6c:e7:92:d6:
                    f3:61:88:c7:3e:a8:e6:0f:6b:b8:56:ec:cc:68:ed:
                    63:49:3b:a5:34:e3:83:ea:62:b8:b2:2f:97:db:6a:
                    ef:e2:8a:86:d9:54:75:82:93:9e:28:d8:64:f3:49:
                    03:bf:be:8e:53:e0:7f:e8:6e:aa:ae:fa:99:f5:ef:
                    ce:8f:e5:bc:26:7d:65:69:a3:2a:d6:b8:56:91:7d:
                    ff:03:76:b2:f4:a5:87:8c:7a:eb:1e:ef:61:81:b3:
                    7b:db:95:45:73:9a:5c:6e:ea:0a:e7:cf:38:46:35:
                    bc:6e:cb:9c:4f:83:ea:c2:ed:3d:68:50:48:d6:aa:
                    d3:2f:91:31:20:3a:84:d3:a7:a1:15:fd:66:43:7d:
                    ef:d7:7b:e0:50:ba:8d:d4:17:13:01:a4:b8:d3:72:
                    b6:b4:71:ee:37:fd:e9:5f:95:65:20:7f:bd:6a:7c:
                    dc:78:60:4b:71:ae:1e:df:e3:d1:e2:2a:ae:8c:86:
                    f6:f7:0f:fc:c6:73:d1:c0:88:c6:7a:43:31:63:14:
                    e3:2f:97:be:97:02:f3:c2:0a:96:b7:23:a0:fa:0f:
                    e9:61:12:64:e4:48:3b:9f:a4:ef:15:a5:98:87:58:
                    16:de:bd:27:36:80:7b:b6:c2:23:21:57:24:6f:5a:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:76:33:F3:33:88:3A:AE:8B:80:68:6A:B9:28:92:85:C4:48:54:29
            X509v3 Authority Key Identifier:
                keyid:F8:CD:8F:04:74:D3:0C:18:4C:B2:C8:50:D3:83:39:68:54:E5:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/F8CD8F0474D30C184CB2C850D383396854E57CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8CD8F0474D30C184CB2C850D383396854E57CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/34352e3138362e3130322e302f32332d3234203d3e20323639343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:3c:a8:15:65:a0:10:9f:b0:37:3f:19:9a:4d:6c:e0:00:4d:
         a7:f6:3c:2d:c9:3f:f5:fc:24:c7:ca:7a:48:bf:68:52:90:0f:
         15:a4:ca:36:cb:86:b2:f6:83:2d:a0:c3:0b:87:e3:fc:c7:26:
         de:83:e6:7d:21:bb:40:bc:84:cb:aa:10:d4:c2:c7:7a:f2:e9:
         1c:e9:87:d9:c3:0d:86:84:65:b5:19:9c:7b:d3:1e:8f:41:ee:
         1b:48:cf:32:4c:5e:26:6e:45:19:06:93:6d:cd:e5:31:72:22:
         1b:87:ee:60:48:2a:48:3f:c0:0e:90:89:de:87:cf:de:78:d5:
         56:99:25:1d:6b:f4:58:d5:f3:96:95:28:70:e0:4b:94:f4:2b:
         18:d3:7d:5e:5a:33:97:7e:2f:ab:ea:77:96:bd:e6:5a:ea:9f:
         c7:a2:e8:d2:66:6a:43:8a:26:0f:62:fb:92:6f:27:68:a5:9b:
         58:81:b2:f8:71:66:6a:75:d9:92:7e:6a:ad:4e:1c:5b:b3:2d:
         90:f9:6d:5e:39:75:10:3e:d8:14:e7:a3:95:1f:8a:09:f4:e6:
         c1:4b:51:2c:2d:41:ac:da:5c:fa:d5:ab:44:31:90:77:1d:6d:
         f2:ff:22:2d:51:9f:20:bb:06:bf:42:58:20:c5:3d:92:fd:c0:
         5a:2a:43:c5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ+Cv3katRkRg1nnMtkwNnuIZ6TswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhDRDhGMDQ3NEQzMEMxODRDQjJDODUwRDM4MzM5Njg1
NEU1N0NBQTAeFw0yNDAzMTExNDE5MDNaFw0yNTAzMTAxNDI0MDNaMDMxMTAvBgNV
BAMTKDhCNzYzM0YzMzM4ODNBQUU4QjgwNjg2QUI5Mjg5Mjg1QzQ0ODU0MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaP8RsY01snCIbOeS1vNhiMc+
qOYPa7hW7Mxo7WNJO6U044PqYriyL5fbau/iiobZVHWCk54o2GTzSQO/vo5T4H/o
bqqu+pn1786P5bwmfWVpoyrWuFaRff8DdrL0pYeMeuse72GBs3vblUVzmlxu6grn
zzhGNbxuy5xPg+rC7T1oUEjWqtMvkTEgOoTTp6EV/WZDfe/Xe+BQuo3UFxMBpLjT
cra0ce43/elflWUgf71qfNx4YEtxrh7f49HiKq6Mhvb3D/zGc9HAiMZ6QzFjFOMv
l76XAvPCCpa3I6D6D+lhEmTkSDufpO8VpZiHWBbevSc2gHu2wiMhVyRvWg8ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUi3Yz8zOIOq6LgGhquSiShcRIVCkwHwYDVR0j
BBgwFoAU+M2PBHTTDBhMsshQ04M5aFTlfKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTNlUWlGdnlmVFlBSmhxUkpYaXNrOWJUSDdGTm5ZQWtLb29ReXY4U1BT
cTEvMC9GOENEOEYwNDc0RDMwQzE4NENCMkM4NTBEMzgzMzk2ODU0RTU3Q0FBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y4Q0Q4RjA0NzREMzBDMTg0
Q0IyQzg1MEQzODMzOTY4NTRFNTdDQUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UzZVFpRnZ5ZlRZQUpocVJKWGlzazliVEg3Rk5uWUFrS29vUXl2OFNQU3ExLzAv
MzQzNTJlMzEzODM2MmUzMTMwMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtumYwDQYJKoZIhvcNAQELBQADggEBADk8qBVl
oBCfsDc/GZpNbOAATaf2PC3JP/X8JMfKeki/aFKQDxWkyjbLhrL2gy2gwwuH4/zH
Jt6D5n0hu0C8hMuqENTCx3ry6Rzph9nDDYaEZbUZnHvTHo9B7htIzzJMXiZuRRkG
k23N5TFyIhuH7mBIKkg/wA6Qid6Hz9541VaZJR1r9FjV85aVKHDgS5T0KxjTfV5a
M5d+L6vqd5a95lrqn8ei6NJmakOKJg9i+5JvJ2ilm1iBsvhxZmp12ZJ+aq1OHFuz
LZD5bV45dRA+2BTno5Ufign05sFLUSwtQazaXPrVq0QxkHcdbfL/Ii1RnyC7Br9C
WCDFPZL9wFoqQ8U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:41 2024 by rpki-client on console-ams.rpki-client.org