Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/34352e3137322e3235322e302f32322d3234203d3e20323638383334.roa
File:                     34352e3137322e3235322e302f32322d3234203d3e20323638383334.roa (raw, json)
Hash identifier:          BVtsRrURQoZc1WgeGN/XVHOWbTuCsPKUBXabKxS/LEs=
Subject key identifier:   73:DF:7D:06:97:EF:98:CD:5A:DD:35:E1:46:7E:95:C0:AD:5D:FD:D1
Certificate issuer:       /CN=CF6F651962E513C0566982D037B8C2B9D63509F0
Certificate serial:       33F15B305DB07C3FE5705E9FADFC0080ED4491FC
Authority key identifier: CF:6F:65:19:62:E5:13:C0:56:69:82:D0:37:B8:C2:B9:D6:35:09:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF6F651962E513C0566982D037B8C2B9D63509F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/34352e3137322e3235322e302f32322d3234203d3e20323638383334.roa
Signing time:             Thu 07 Apr 2022 23:20:15 +0000
ROA not before:           Thu 07 Apr 2022 23:15:15 +0000
ROA not after:            Fri 07 Apr 2023 23:20:15 +0000
asID:                     268834
IP address blocks:        45.172.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f1:5b:30:5d:b0:7c:3f:e5:70:5e:9f:ad:fc:00:80:ed:44:91:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF6F651962E513C0566982D037B8C2B9D63509F0
        Validity
            Not Before: Apr  7 23:15:15 2022 GMT
            Not After : Apr  7 23:20:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:e1:3e:d3:ca:78:11:3f:32:64:a9:fc:f5:
                    35:86:56:88:cf:46:d8:65:a4:7d:d3:fb:e1:ef:11:
                    6a:bb:a9:1d:53:23:11:43:2c:54:98:eb:4a:ac:d8:
                    a7:af:b9:e0:2a:59:ad:52:30:14:10:88:93:c6:0a:
                    39:2c:e1:f0:eb:3a:c6:ab:7f:1b:2c:9a:19:8e:41:
                    29:55:83:b2:10:13:a5:62:58:d3:7c:e3:bb:8a:a7:
                    5a:95:99:22:c0:03:df:ac:5c:60:9c:b8:8e:fe:4d:
                    66:86:84:76:77:f9:8a:76:62:85:b6:01:12:ce:b5:
                    f4:8e:9f:4f:e5:5d:6c:2f:a4:38:f2:57:6d:7e:1c:
                    99:f0:b7:ad:e3:0d:5c:61:0c:93:0a:bb:cd:ed:d8:
                    2e:ff:62:9c:06:47:b3:62:09:4f:02:53:30:0f:5c:
                    10:b2:e9:2e:7c:4c:39:df:a5:05:d2:03:f0:89:f6:
                    a4:10:18:4d:10:cd:86:e5:2e:bd:1a:e1:1e:bc:14:
                    4f:44:4e:d3:57:18:c6:b7:2a:15:ed:f8:8f:5c:ee:
                    f1:51:9b:ba:0d:a4:cd:aa:49:e7:52:68:b4:9e:14:
                    0b:5f:91:27:64:36:32:a0:bc:ff:8c:18:70:af:5f:
                    49:dd:9f:19:7a:f8:8a:8c:f3:04:00:23:af:51:c1:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:7D:06:97:EF:98:CD:5A:DD:35:E1:46:7E:95:C0:AD:5D:FD:D1
            X509v3 Authority Key Identifier:
                keyid:CF:6F:65:19:62:E5:13:C0:56:69:82:D0:37:B8:C2:B9:D6:35:09:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/CF6F651962E513C0566982D037B8C2B9D63509F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF6F651962E513C0566982D037B8C2B9D63509F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/34352e3137322e3235322e302f32322d3234203d3e20323638383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:49:09:43:7f:0c:e5:e2:fd:10:4b:e2:62:e4:c9:b8:32:9f:
         55:ae:8e:33:5f:e8:be:90:04:cb:58:cc:1a:d7:a4:7c:ab:52:
         3e:b8:e5:86:9d:63:61:fe:10:c6:b5:5f:72:b3:19:5a:08:1f:
         02:ad:ce:27:10:e3:3a:f7:dd:ca:04:3b:0f:e9:12:54:f8:d8:
         01:76:c4:bc:81:41:d7:a7:06:86:9a:12:60:a0:79:ec:59:c1:
         e2:b3:9c:a6:6d:1d:e9:53:d6:50:ac:91:be:7d:88:6f:45:cf:
         b3:f0:4e:09:05:98:4f:a9:8b:4d:02:54:10:90:5e:6a:3f:ae:
         c6:a6:5b:63:86:de:52:14:6f:13:bc:52:9f:32:2b:91:1c:de:
         c2:8a:d7:62:2e:71:ed:3c:ca:69:38:25:af:24:aa:92:33:4d:
         05:0a:e3:e0:c0:5f:84:1d:4a:d7:d2:6f:8f:6a:50:88:af:8d:
         23:40:ac:08:5b:7e:5f:fe:f6:e4:6d:78:e0:a6:f5:8b:2b:7b:
         49:fd:a1:d8:f7:1a:a6:5f:50:17:84:98:bc:4d:de:b8:24:ec:
         c3:b9:04:11:b4:45:2e:ba:89:dc:d7:f7:61:12:a2:5f:6f:63:
         18:66:c2:11:22:a4:37:8d:9c:da:58:52:97:43:67:99:43:71:
         22:96:3c:d0
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUM/FbMF2wfD/lcF6frfwAgO1EkfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y2RjY1MTk2MkU1MTNDMDU2Njk4MkQwMzdCOEMyQjlE
NjM1MDlGMDAeFw0yMjA0MDcyMzE1MTVaFw0yMzA0MDcyMzIwMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE4QkUxM0VEM0NBNzgxMTNG
MzI2NEE5RkNGNTM1ODY1Njg4Q0Y0NkQ4NjVBNDdERDNGQkUxRUYxMTZBQkJBOTFE
NTMyMzExNDMyQzU0OThFQjRBQUNEOEE3QUZCOUUwMkE1OUFENTIzMDE0MTA4ODkz
QzYwQTM5MkNFMUYwRUIzQUM2QUI3RjFCMkM5QTE5OEU0MTI5NTU4M0IyMTAxM0E1
NjI1OEQzN0NFM0JCOEFBNzVBOTU5OTIyQzAwM0RGQUM1QzYwOUNCODhFRkU0RDY2
ODY4NDc2NzdGOThBNzY2Mjg1QjYwMTEyQ0VCNUY0OEU5RjRGRTU1RDZDMkZBNDM4
RjI1NzZEN0UxQzk5RjBCN0FERTMwRDVDNjEwQzkzMEFCQkNERUREODJFRkY2MjlD
MDY0N0IzNjIwOTRGMDI1MzMwMEY1QzEwQjJFOTJFN0M0QzM5REZBNTA1RDIwM0Yw
ODlGNkE0MTAxODREMTBDRDg2RTUyRUJEMUFFMTFFQkMxNDRGNDQ0RUQzNTcxOEM2
QjcyQTE1RURGODhGNUNFRUYxNTE5QkJBMERBNENEQUE0OUU3NTI2OEI0OUUxNDBC
NUY5MTI3NjQzNjMyQTBCQ0ZGOEMxODcwQUY1RjQ5REQ5RjE5N0FGODhBOENGMzA0
MDAyM0FGNTFDMTNDREQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwYvhPtPKeBE/MmSp/PU1hlaIz0bYZaR90/vh7xFqu6kdUyMRQyxU
mOtKrNinr7ngKlmtUjAUEIiTxgo5LOHw6zrGq38bLJoZjkEpVYOyEBOlYljTfOO7
iqdalZkiwAPfrFxgnLiO/k1mhoR2d/mKdmKFtgESzrX0jp9P5V1sL6Q48ldtfhyZ
8Let4w1cYQyTCrvN7dgu/2KcBkezYglPAlMwD1wQsukufEw536UF0gPwifakEBhN
EM2G5S69GuEevBRPRE7TVxjGtyoV7fiPXO7xUZu6DaTNqknnUmi0nhQLX5EnZDYy
oLz/jBhwr19J3Z8ZeviKjPMEACOvUcE83QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHPffQaX75jNWt014UZ+lcCtXf3RMB8GA1UdIwQYMBaAFM9vZRli5RPAVmmC0De4
wrnWNQnwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VxaTVoRjZNMVBtY3ly
am8yaUREblBCNXJmVVFwZGU5TGthdEdMbkxFeTFyLzAvQ0Y2RjY1MTk2MkU1MTND
MDU2Njk4MkQwMzdCOEMyQjlENjM1MDlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DRjZGNjUxOTYyRTUxM0MwNTY2OTgyRDAzN0I4QzJCOUQ2MzUw
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FcWk1aEY2TTFQbWN5cmpvMmlE
RG5QQjVyZlVRcGRlOUxrYXRHTG5MRXkxci8wLzM0MzUyZTMxMzczMjJlMzIzNTMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4MzgzMzM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
Laz8MA0GCSqGSIb3DQEBCwUAA4IBAQAjSQlDfwzl4v0QS+Ji5Mm4Mp9Vro4zX+i+
kATLWMwa16R8q1I+uOWGnWNh/hDGtV9ysxlaCB8Crc4nEOM6993KBDsP6RJU+NgB
dsS8gUHXpwaGmhJgoHnsWcHis5ymbR3pU9ZQrJG+fYhvRc+z8E4JBZhPqYtNAlQQ
kF5qP67Gpltjht5SFG8TvFKfMiuRHN7CitdiLnHtPMppOCWvJKqSM00FCuPgwF+E
HUrX0m+PalCIr40jQKwIW35f/vbkbXjgpvWLK3tJ/aHY9xqmX1AXhJi8Td64JOzD
uQQRtEUuuonc1/dhEqJfb2MYZsIRIqQ3jZzaWFKXQ2eZQ3EiljzQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org