Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/34352e3232352e3234352e302f32342d3234203d3e20323636393734.roa
File:                     34352e3232352e3234352e302f32342d3234203d3e20323636393734.roa (raw, json)
Hash identifier:          v4POXL1phFLi4Pt9nPMKOUXfT81yHvyR6JCeztzpEM4=
Subject key identifier:   E9:4D:40:E7:83:2F:E9:70:CC:D9:8E:92:7C:65:71:8A:C6:10:86:CD
Certificate issuer:       /CN=0235C205EEA5BA52A9BB0B493973047D04CAAFB3
Certificate serial:       3A965A4C1678061A7865B8B7A8944DB6F9651681
Authority key identifier: 02:35:C2:05:EE:A5:BA:52:A9:BB:0B:49:39:73:04:7D:04:CA:AF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0235C205EEA5BA52A9BB0B493973047D04CAAFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/34352e3232352e3234352e302f32342d3234203d3e20323636393734.roa
Signing time:             Tue 11 Apr 2023 15:00:27 +0000
ROA not before:           Tue 11 Apr 2023 14:55:27 +0000
ROA not after:            Tue 09 Apr 2024 15:00:27 +0000
asID:                     266974
IP address blocks:        45.225.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:96:5a:4c:16:78:06:1a:78:65:b8:b7:a8:94:4d:b6:f9:65:16:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0235C205EEA5BA52A9BB0B493973047D04CAAFB3
        Validity
            Not Before: Apr 11 14:55:27 2023 GMT
            Not After : Apr  9 15:00:27 2024 GMT
        Subject: CN=E94D40E7832FE970CCD98E927C65718AC61086CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:73:32:9f:ea:a3:83:58:90:0a:36:02:c3:6a:
                    16:91:c6:cc:59:94:af:d6:79:d0:44:46:6e:b8:a3:
                    fd:d9:39:b6:1c:91:30:57:38:b4:9f:25:96:55:39:
                    68:78:88:f9:ef:9c:e5:7d:b5:4c:f5:f3:e5:01:8e:
                    b4:30:fe:16:74:bf:ed:53:63:5f:ef:45:28:cc:14:
                    bd:b7:2d:86:4c:9a:a2:07:70:5c:e1:17:44:80:39:
                    48:b1:7d:cb:75:8d:fb:34:5f:87:94:bc:88:b7:fa:
                    a3:a6:16:55:35:1e:27:f1:8f:1f:3b:14:ea:16:91:
                    c1:e5:3c:54:76:15:fd:e2:47:91:1a:ce:1c:97:71:
                    60:75:0e:9d:f7:43:90:cf:48:1e:36:77:f0:23:f4:
                    e4:51:85:1a:c6:7f:bc:b8:6c:41:c4:f3:ce:d8:d4:
                    24:5f:2a:70:9b:01:b8:1a:26:cd:e6:ae:d1:90:13:
                    ac:ca:72:9a:98:1e:f5:8d:b0:23:9a:df:fe:62:43:
                    cf:31:08:77:8d:c9:52:de:5b:8a:e1:37:3b:67:9e:
                    a9:a7:6e:54:82:63:26:5a:93:1e:57:b6:52:0c:ea:
                    20:0a:10:63:fb:a8:89:03:19:f6:0c:ec:33:1a:22:
                    8b:16:b7:c6:fa:32:72:35:7f:2b:a1:16:9b:86:a4:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4D:40:E7:83:2F:E9:70:CC:D9:8E:92:7C:65:71:8A:C6:10:86:CD
            X509v3 Authority Key Identifier:
                keyid:02:35:C2:05:EE:A5:BA:52:A9:BB:0B:49:39:73:04:7D:04:CA:AF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/0235C205EEA5BA52A9BB0B493973047D04CAAFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0235C205EEA5BA52A9BB0B493973047D04CAAFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHDacvUqLrTYZwFAdChKgP5xAfG1FyfDHerEU9yDaAjq/0/34352e3232352e3234352e302f32342d3234203d3e20323636393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:9b:55:df:cd:a8:fd:e6:85:0b:c8:77:12:db:3a:db:66:5d:
         4b:bc:91:28:b5:fa:a2:59:81:5b:ee:f5:21:a5:f8:56:80:eb:
         8d:e2:ef:27:45:69:ac:5a:a1:c9:a3:8f:13:58:29:d1:26:29:
         9b:1a:31:42:8e:de:c8:55:b9:ae:90:48:db:47:c8:28:e0:82:
         4d:e0:9a:cd:a9:a2:af:ff:fa:b8:d1:47:e3:2d:f6:01:39:c4:
         59:e1:4c:74:69:fe:83:88:96:17:27:d8:8f:a6:7c:de:2e:8a:
         b9:0b:5e:b7:34:34:b6:86:3d:a3:4c:fc:8f:cc:d8:cb:3c:8e:
         11:39:14:99:2c:13:c9:17:0b:99:54:9d:38:0d:ce:5b:2d:2d:
         84:bb:2e:7f:39:61:73:49:02:4a:42:6c:51:c1:39:a1:5a:84:
         40:60:6c:87:b7:86:1d:da:c1:62:96:ee:31:13:01:f5:f8:7b:
         84:83:0a:aa:d3:ae:9d:95:50:af:61:2b:74:91:17:f8:0c:10:
         ca:3f:c8:44:fe:c0:34:eb:cc:ab:f5:e8:6f:e4:15:55:93:e6:
         08:3c:25:79:2e:7a:3a:08:36:61:78:96:4c:11:cd:cd:ef:bc:
         29:4e:a2:9d:1e:15:a2:00:5e:77:63:56:dc:35:62:1b:ba:e4:
         87:66:6b:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOpZaTBZ4Bhp4Zbi3qJRNtvllFoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIzNUMyMDVFRUE1QkE1MkE5QkIwQjQ5Mzk3MzA0N0Qw
NENBQUZCMzAeFw0yMzA0MTExNDU1MjdaFw0yNDA0MDkxNTAwMjdaMDMxMTAvBgNV
BAMTKEU5NEQ0MEU3ODMyRkU5NzBDQ0Q5OEU5MjdDNjU3MThBQzYxMDg2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpczKf6qODWJAKNgLDahaRxsxZ
lK/WedBERm64o/3ZObYckTBXOLSfJZZVOWh4iPnvnOV9tUz18+UBjrQw/hZ0v+1T
Y1/vRSjMFL23LYZMmqIHcFzhF0SAOUixfct1jfs0X4eUvIi3+qOmFlU1Hifxjx87
FOoWkcHlPFR2Ff3iR5EazhyXcWB1Dp33Q5DPSB42d/Aj9ORRhRrGf7y4bEHE887Y
1CRfKnCbAbgaJs3mrtGQE6zKcpqYHvWNsCOa3/5iQ88xCHeNyVLeW4rhNztnnqmn
blSCYyZakx5XtlIM6iAKEGP7qIkDGfYM7DMaIosWt8b6MnI1fyuhFpuGpOLNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6U1A54Mv6XDM2Y6SfGVxisYQhs0wHwYDVR0j
BBgwFoAUAjXCBe6lulKpuwtJOXMEfQTKr7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUhEYWN2VXFMclRZWndGQWRDaEtnUDV4QWZHMUZ5ZkRIZXJFVTl5RGFB
anEvMC8wMjM1QzIwNUVFQTVCQTUyQTlCQjBCNDkzOTczMDQ3RDA0Q0FBRkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyMzVDMjA1RUVBNUJBNTJB
OUJCMEI0OTM5NzMwNDdEMDRDQUFGQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VIRGFjdlVxTHJUWVp3RkFkQ2hLZ1A1eEFmRzFGeWZESGVyRVU5eURhQWpxLzAv
MzQzNTJlMzIzMjM1MmUzMjM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4fUwDQYJKoZIhvcNAQELBQADggEBAKabVd/N
qP3mhQvIdxLbOttmXUu8kSi1+qJZgVvu9SGl+FaA643i7ydFaaxaocmjjxNYKdEm
KZsaMUKO3shVua6QSNtHyCjggk3gms2poq//+rjRR+Mt9gE5xFnhTHRp/oOIlhcn
2I+mfN4uirkLXrc0NLaGPaNM/I/M2Ms8jhE5FJksE8kXC5lUnTgNzlstLYS7Ln85
YXNJAkpCbFHBOaFahEBgbIe3hh3awWKW7jETAfX4e4SDCqrTrp2VUK9hK3SRF/gM
EMo/yET+wDTrzKv16G/kFVWT5gg8JXkuejoINmF4lkwRzc3vvClOop0eFaIAXndj
Vtw1Yhu65Idma44=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org