Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33382e302f32332d3233203d3e20323636303830.roa
File:                     34352e352e33382e302f32332d3233203d3e20323636303830.roa (raw, json)
Hash identifier:          S3dKKs7/jaEVDGZ4AAixMV+xgI7TBWTNdWsbPIlejKw=
Subject key identifier:   7A:05:02:12:45:3D:8A:CC:2D:A9:5D:33:41:1C:28:56:3A:00:86:B5
Certificate issuer:       /CN=332114655712F86B1FFE277DAA3E55AC2887C145
Certificate serial:       38DA3DE84AC83DD7AA828DBBBBF10B90B21AC1E6
Authority key identifier: 33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33382e302f32332d3233203d3e20323636303830.roa
Signing time:             Fri 15 Sep 2023 12:42:11 +0000
ROA not before:           Fri 15 Sep 2023 12:37:11 +0000
ROA not after:            Fri 13 Sep 2024 12:42:11 +0000
asID:                     266080
IP address blocks:        45.5.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:da:3d:e8:4a:c8:3d:d7:aa:82:8d:bb:bb:f1:0b:90:b2:1a:c1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332114655712F86B1FFE277DAA3E55AC2887C145
        Validity
            Not Before: Sep 15 12:37:11 2023 GMT
            Not After : Sep 13 12:42:11 2024 GMT
        Subject: CN=7A050212453D8ACC2DA95D33411C28563A0086B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:24:6a:ad:97:e4:ec:8a:01:82:2c:b7:63:
                    60:cf:82:d2:9a:92:21:6e:b7:d7:e0:ac:e8:b2:c2:
                    b6:2a:73:aa:c3:0d:b4:00:1a:5c:80:3d:8a:87:8d:
                    77:0e:a5:db:8f:76:9e:53:60:9f:ae:6c:97:96:fb:
                    af:ce:79:da:ae:c8:e7:d7:c8:5b:0c:91:44:0d:7a:
                    43:bf:9e:59:9e:d5:bd:eb:63:3c:fb:dd:bd:d4:87:
                    ff:1b:b7:ed:ac:99:f5:d9:ea:65:f6:14:d3:2a:39:
                    b2:1c:e4:10:1f:50:e3:99:be:5a:90:80:d2:4e:b0:
                    c8:6c:21:76:20:97:39:1b:7e:42:d1:56:97:ae:cf:
                    b6:64:8d:51:c3:b2:73:47:cf:54:7d:78:1e:2d:51:
                    5d:b6:59:8d:52:51:b3:ef:c9:65:72:cd:9b:1d:2c:
                    00:48:d9:05:6c:9f:95:ae:bb:94:78:0c:bf:55:33:
                    0d:d0:7f:10:19:71:4e:f0:7f:d4:6c:9d:9e:8c:20:
                    35:56:6e:a5:78:eb:f9:64:d1:f6:25:70:6f:6f:6e:
                    53:86:d4:d7:bf:64:32:c0:70:ed:57:05:f3:9f:85:
                    d6:2e:d2:88:0f:21:35:14:08:3b:34:6e:c5:6c:b2:
                    02:3e:05:3b:49:89:4f:3f:e9:20:cd:8d:a8:31:f9:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:02:12:45:3D:8A:CC:2D:A9:5D:33:41:1C:28:56:3A:00:86:B5
            X509v3 Authority Key Identifier:
                keyid:33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/332114655712F86B1FFE277DAA3E55AC2887C145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33382e302f32332d3233203d3e20323636303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:0a:78:5b:4c:1e:4a:58:2e:36:3e:13:86:a2:14:b6:30:
         39:ca:25:f0:46:d0:bf:a2:54:3a:1d:11:80:95:3b:7a:4b:99:
         e6:fc:8f:1e:95:60:b0:30:a8:01:52:5f:66:d7:25:c8:a0:07:
         37:63:8c:c1:3f:f5:c3:33:25:5f:47:40:60:33:d5:b3:0f:81:
         f0:95:a5:bb:8d:a9:b5:1a:63:0c:bd:0a:c0:0e:42:72:0d:84:
         d4:42:7d:f6:be:00:eb:72:67:f1:56:88:3e:0f:72:91:3c:f6:
         df:bb:39:5d:ed:34:91:d8:69:7e:30:23:c8:66:8c:a3:32:ca:
         44:21:83:c0:d4:e3:97:04:5d:2d:db:80:33:ec:8b:26:82:11:
         1b:1d:b1:ba:dd:6e:f8:f0:bc:e6:5c:1a:4b:90:e8:a2:88:f0:
         58:49:d3:50:4d:46:1b:b2:6f:6b:a1:dc:b5:d8:31:6a:66:aa:
         82:8e:96:fe:9b:dd:30:79:bf:0f:02:d5:ef:67:b9:e1:ac:8e:
         2c:3d:a1:00:48:7b:84:93:32:1d:69:65:fc:86:4b:d7:19:c9:
         0f:79:10:10:39:a9:0a:38:81:4e:e2:1e:96:5c:c5:c9:52:34:
         42:97:67:0e:64:21:62:3f:a7:f4:76:67:40:72:bd:16:95:13:
         1a:3a:42:20
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUONo96ErIPdeqgo27u/ELkLIaweYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMyMTE0NjU1NzEyRjg2QjFGRkUyNzdEQUEzRTU1QUMy
ODg3QzE0NTAeFw0yMzA5MTUxMjM3MTFaFw0yNDA5MTMxMjQyMTFaMDMxMTAvBgNV
BAMTKDdBMDUwMjEyNDUzRDhBQ0MyREE5NUQzMzQxMUMyODU2M0EwMDg2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tCRqrZfk7IoBgiy3Y2DPgtKa
kiFut9fgrOiywrYqc6rDDbQAGlyAPYqHjXcOpduPdp5TYJ+ubJeW+6/OedquyOfX
yFsMkUQNekO/nlme1b3rYzz73b3Uh/8bt+2smfXZ6mX2FNMqObIc5BAfUOOZvlqQ
gNJOsMhsIXYglzkbfkLRVpeuz7ZkjVHDsnNHz1R9eB4tUV22WY1SUbPvyWVyzZsd
LABI2QVsn5Wuu5R4DL9VMw3QfxAZcU7wf9RsnZ6MIDVWbqV46/lk0fYlcG9vblOG
1Ne/ZDLAcO1XBfOfhdYu0ogPITUUCDs0bsVssgI+BTtJiU8/6SDNjagx+b2nAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUegUCEkU9iswtqV0zQRwoVjoAhrUwHwYDVR0j
BBgwFoAUMyEUZVcS+Gsf/id9qj5VrCiHwUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVo4RlJ2NTh4cHZ0RWdiSEpSRUpVYm5lZWVTZmRLc1BKSERaVHZobmt4
amcvMC8zMzIxMTQ2NTU3MTJGODZCMUZGRTI3N0RBQTNFNTVBQzI4ODdDMTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzMjExNDY1NTcxMkY4NkIx
RkZFMjc3REFBM0U1NUFDMjg4N0MxNDUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VaOEZSdjU4eHB2dEVnYkhKUkVKVWJuZWVlU2ZkS3NQSkhEWlR2aG5reGpnLzAv
MzQzNTJlMzUyZTMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzYzMDM4
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEtBSYwDQYJKoZIhvcNAQELBQADggEBAEW6CnhbTB5KWC42
PhOGohS2MDnKJfBG0L+iVDodEYCVO3pLmeb8jx6VYLAwqAFSX2bXJcigBzdjjME/
9cMzJV9HQGAz1bMPgfCVpbuNqbUaYwy9CsAOQnINhNRCffa+AOtyZ/FWiD4PcpE8
9t+7OV3tNJHYaX4wI8hmjKMyykQhg8DU45cEXS3bgDPsiyaCERsdsbrdbvjwvOZc
GkuQ6KKI8FhJ01BNRhuyb2uh3LXYMWpmqoKOlv6b3TB5vw8C1e9nueGsjiw9oQBI
e4STMh1pZfyGS9cZyQ95EBA5qQo4gU7iHpZcxclSNEKXZw5kIWI/p/R2Z0ByvRaV
Exo6QiA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org