Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/34352e3137322e36382e302f32322d3234203d3e20323635323334.roa
File:                     34352e3137322e36382e302f32322d3234203d3e20323635323334.roa (raw, json)
Hash identifier:          TcMAFPD1Vbos3TWiDCeYTWQXx4p7OPwkOdskiXZQHss=
Subject key identifier:   21:E4:2E:29:0B:EE:B9:43:C7:83:27:F0:BF:12:EF:73:5D:E1:64:DF
Certificate issuer:       /CN=ECAD04592CD55754F7B407BA7025C58F8EAAA65C
Certificate serial:       39B55AE87F62462A4624BF192DA7EBB87B0E2F1C
Authority key identifier: EC:AD:04:59:2C:D5:57:54:F7:B4:07:BA:70:25:C5:8F:8E:AA:A6:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAD04592CD55754F7B407BA7025C58F8EAAA65C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/34352e3137322e36382e302f32322d3234203d3e20323635323334.roa
Signing time:             Tue 01 Aug 2023 20:00:00 +0000
ROA not before:           Tue 01 Aug 2023 19:55:00 +0000
ROA not after:            Thu 01 Aug 2024 20:00:00 +0000
asID:                     265234
IP address blocks:        45.172.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b5:5a:e8:7f:62:46:2a:46:24:bf:19:2d:a7:eb:b8:7b:0e:2f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECAD04592CD55754F7B407BA7025C58F8EAAA65C
        Validity
            Not Before: Aug  1 19:55:00 2023 GMT
            Not After : Aug  1 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:8b:3a:8f:a0:64:09:c2:d1:aa:17:77:19:
                    1a:05:2e:35:8b:46:97:3a:09:9b:c7:ff:19:34:00:
                    1e:15:5d:79:42:a1:60:4f:c8:40:81:ad:a0:d1:54:
                    55:b6:ba:82:99:ec:84:53:22:84:31:9d:c7:26:34:
                    c0:56:ba:07:1f:32:28:71:34:14:f4:a9:ed:aa:50:
                    9a:34:05:fe:42:07:91:63:f7:79:0f:5e:7a:e7:c0:
                    8f:18:9b:25:c8:96:11:08:ec:32:b6:75:a3:25:ae:
                    4b:2e:d0:05:f2:bb:4a:97:9a:de:2d:83:6a:76:c8:
                    1e:b7:25:1f:fe:15:37:dd:1c:04:c7:d4:71:ba:42:
                    5b:46:e6:ec:a7:01:10:18:1e:c3:74:84:73:94:5f:
                    cc:53:96:a2:a0:7e:15:b1:18:64:85:4b:80:85:8f:
                    61:bb:bf:f5:9b:08:c4:44:d4:22:08:e5:f3:c8:d8:
                    05:13:7a:14:b2:0d:3d:ee:05:3f:58:2e:9a:d8:5e:
                    63:f1:33:4a:50:69:9e:7f:45:0b:93:71:0c:3d:ab:
                    a9:04:e6:85:66:6c:4b:53:26:0a:b3:95:30:6e:b8:
                    08:d6:ab:4a:0b:dc:61:ed:cf:7a:b1:ac:b2:75:3c:
                    6a:f9:de:f8:c6:f2:cc:05:cd:94:53:68:f8:17:a4:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E4:2E:29:0B:EE:B9:43:C7:83:27:F0:BF:12:EF:73:5D:E1:64:DF
            X509v3 Authority Key Identifier:
                keyid:EC:AD:04:59:2C:D5:57:54:F7:B4:07:BA:70:25:C5:8F:8E:AA:A6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/ECAD04592CD55754F7B407BA7025C58F8EAAA65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAD04592CD55754F7B407BA7025C58F8EAAA65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/34352e3137322e36382e302f32322d3234203d3e20323635323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:93:f4:11:dd:d6:c1:67:c2:66:a2:bd:2f:cd:ff:17:1c:a8:
         f5:99:80:3c:23:1b:95:47:80:96:99:66:4c:c5:3b:bb:9b:2b:
         c0:6e:be:53:41:26:68:eb:0f:10:83:5f:b7:78:04:33:8c:ff:
         de:fe:c6:ab:0d:d0:22:23:32:b1:bb:78:c2:1c:59:92:10:bd:
         f3:12:c3:ea:f6:47:cb:e0:73:a8:b7:57:49:04:c3:11:a1:57:
         b2:d7:10:fb:40:46:cc:c3:1b:2d:5a:b3:89:bb:9b:75:e5:47:
         6d:47:28:ee:9f:66:33:42:08:12:53:fb:7f:b4:89:24:87:e2:
         79:f8:9e:dd:1c:59:a0:43:96:90:80:22:78:d0:d8:47:45:54:
         b5:c5:09:55:39:aa:f2:66:5b:19:ba:e7:dd:a9:64:ce:2e:6e:
         d2:e4:3f:28:e2:0f:ba:6e:8a:58:ac:52:d6:af:ea:79:4b:3a:
         db:b6:ac:6f:0a:2d:f1:e9:d5:92:7f:a2:ec:1c:23:f3:a5:c6:
         24:bb:0a:41:38:e8:ca:f3:32:52:7d:5c:fb:fa:de:1d:5d:a1:
         09:77:ca:d3:4b:5b:1d:84:45:ae:0b:78:44:01:02:71:03:94:
         ac:39:c6:11:dc:32:f7:f6:d1:50:d0:31:85:9a:c6:1a:89:17:
         27:ba:cc:47
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUObVa6H9iRipGJL8ZLafruHsOLxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBRDA0NTkyQ0Q1NTc1NEY3QjQwN0JBNzAyNUM1OEY4
RUFBQTY1QzAeFw0yMzA4MDExOTU1MDBaFw0yNDA4MDEyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdCRThCM0E4RkEwNjQwOUMy
RDFBQTE3NzcxOTFBMDUyRTM1OEI0Njk3M0EwOTlCQzdGRjE5MzQwMDFFMTU1RDc5
NDJBMTYwNEZDODQwODFBREEwRDE1NDU1QjZCQTgyOTlFQzg0NTMyMjg0MzE5REM3
MjYzNEMwNTZCQTA3MUYzMjI4NzEzNDE0RjRBOUVEQUE1MDlBMzQwNUZFNDIwNzkx
NjNGNzc5MEY1RTdBRTdDMDhGMTg5QjI1Qzg5NjExMDhFQzMyQjY3NUEzMjVBRTRC
MkVEMDA1RjJCQjRBOTc5QURFMkQ4MzZBNzZDODFFQjcyNTFGRkUxNTM3REQxQzA0
QzdENDcxQkE0MjVCNDZFNkVDQTcwMTEwMTgxRUMzNzQ4NDczOTQ1RkNDNTM5NkEy
QTA3RTE1QjExODY0ODU0QjgwODU4RjYxQkJCRkY1OUIwOEM0NDRENDIyMDhFNUYz
QzhEODA1MTM3QTE0QjIwRDNERUUwNTNGNTgyRTlBRDg1RTYzRjEzMzRBNTA2OTlF
N0Y0NTBCOTM3MTBDM0RBQkE5MDRFNjg1NjY2QzRCNTMyNjBBQjM5NTMwNkVCODA4
RDZBQjRBMEJEQzYxRURDRjdBQjFBQ0IyNzUzQzZBRjlERUY4QzZGMkNDMDVDRDk0
NTM2OEY4MTdBNDZCMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt76LOo+gZAnC0aoXdxkaBS41i0aXOgmbx/8ZNAAeFV15QqFgT8hA
ga2g0VRVtrqCmeyEUyKEMZ3HJjTAVroHHzIocTQU9KntqlCaNAX+QgeRY/d5D156
58CPGJslyJYRCOwytnWjJa5LLtAF8rtKl5reLYNqdsgetyUf/hU33RwEx9RxukJb
RubspwEQGB7DdIRzlF/MU5aioH4VsRhkhUuAhY9hu7/1mwjERNQiCOXzyNgFE3oU
sg097gU/WC6a2F5j8TNKUGmef0ULk3EMPaupBOaFZmxLUyYKs5UwbrgI1qtKC9xh
7c96sayydTxq+d74xvLMBc2UU2j4F6RrHwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCHkLikL7rlDx4Mn8L8S73Nd4WTfMB8GA1UdIwQYMBaAFOytBFks1VdU97QHunAl
xY+OqqZcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U5MWgxV0Z3Yk5YNFpE
ZXRZZlN5M2t6dHA1RUZuZWlvYVlGQXh6NXBmaHp2LzAvRUNBRDA0NTkyQ0Q1NTc1
NEY3QjQwN0JBNzAyNUM1OEY4RUFBQTY1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQ0FEMDQ1OTJDRDU1NzU0RjdCNDA3QkE3MDI1QzU4RjhFQUFB
NjVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FOTFoMVdGd2JOWDRaRGV0WWZT
eTNrenRwNUVGbmVpb2FZRkF4ejVwZmh6di8wLzM0MzUyZTMxMzczMjJlMzYzODJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTMyMzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2s
RDANBgkqhkiG9w0BAQsFAAOCAQEACZP0Ed3WwWfCZqK9L83/Fxyo9ZmAPCMblUeA
lplmTMU7u5srwG6+U0EmaOsPEINft3gEM4z/3v7Gqw3QIiMysbt4whxZkhC98xLD
6vZHy+BzqLdXSQTDEaFXstcQ+0BGzMMbLVqzibubdeVHbUco7p9mM0IIElP7f7SJ
JIfiefie3RxZoEOWkIAieNDYR0VUtcUJVTmq8mZbGbrn3alkzi5u0uQ/KOIPum6K
WKxS1q/qeUs627asbwot8enVkn+i7Bwj86XGJLsKQTjoyvMyUn1c+/reHV2hCXfK
00tbHYRFrgt4RAECcQOUrDnGEdwy9/bRUNAxhZrGGokXJ7rMRw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org