Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
File:                     34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (raw, json)
Hash identifier:          jNx4wcHvL/ZGq2geyZw/9Nj0tXwoF4CqMeBwe9KDiBA=
Subject key identifier:   51:BF:A6:29:A6:BD:15:89:CC:4A:5D:6C:03:8E:00:E2:9C:DB:5E:31
Certificate issuer:       /CN=F7E422809108C1661A3F43CB3CECF9CB91247E9E
Certificate serial:       0FCF93431190BDC32AD1B0A069F4FE39E3F1C8B0
Authority key identifier: F7:E4:22:80:91:08:C1:66:1A:3F:43:CB:3C:EC:F9:CB:91:24:7E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
Signing time:             Tue 26 Mar 2024 19:30:46 +0000
ROA not before:           Tue 26 Mar 2024 19:25:46 +0000
ROA not after:            Tue 25 Mar 2025 19:30:46 +0000
asID:                     268668
IP address blocks:        45.164.220.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cf:93:43:11:90:bd:c3:2a:d1:b0:a0:69:f4:fe:39:e3:f1:c8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7E422809108C1661A3F43CB3CECF9CB91247E9E
        Validity
            Not Before: Mar 26 19:25:46 2024 GMT
            Not After : Mar 25 19:30:46 2025 GMT
        Subject: CN=51BFA629A6BD1589CC4A5D6C038E00E29CDB5E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:e6:f5:f9:5f:71:84:fd:9d:77:f6:f9:62:
                    4a:56:6f:5f:4f:1a:80:d6:87:ec:9c:be:41:5a:c0:
                    3b:39:4a:ce:b0:0a:e0:b7:f6:74:40:e6:0d:1d:0a:
                    e3:8b:59:c6:3c:d3:1d:e7:cc:fd:3e:8d:e2:01:e7:
                    69:0d:ca:45:0b:0e:33:1c:4f:1d:01:63:7b:39:21:
                    f6:7c:b2:8c:8d:bb:fb:b3:18:a3:09:e5:7a:56:ef:
                    eb:97:87:ef:fd:70:fd:ea:e6:c1:03:39:9c:9c:27:
                    15:3a:d0:3a:12:f9:aa:bb:ad:b5:4a:13:1c:28:12:
                    40:16:21:b0:52:56:41:d7:0a:22:6e:4f:67:56:44:
                    3c:94:c2:dc:20:ee:87:14:db:db:6f:8d:02:77:16:
                    a1:ef:6b:12:92:85:25:b4:e6:f5:be:f8:49:63:3a:
                    0e:47:67:16:ad:ac:51:e4:7a:b2:e7:8a:87:ad:6d:
                    12:15:f0:a4:a7:07:7f:18:5d:a4:12:7b:de:2b:df:
                    5d:22:80:a5:6d:4e:6e:24:2c:96:0f:80:ef:ce:c5:
                    7d:2c:39:9a:9d:47:a4:a1:6c:a1:26:19:02:1e:2a:
                    4e:04:b3:57:bb:62:de:ce:c5:dd:1b:0f:07:23:de:
                    90:0e:2e:94:e6:42:cc:81:f9:60:08:be:9d:79:23:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BF:A6:29:A6:BD:15:89:CC:4A:5D:6C:03:8E:00:E2:9C:DB:5E:31
            X509v3 Authority Key Identifier:
                keyid:F7:E4:22:80:91:08:C1:66:1A:3F:43:CB:3C:EC:F9:CB:91:24:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:90:f6:7a:08:00:7e:31:b4:bb:69:73:8c:19:85:6a:e5:a3:
         42:7f:1d:ea:05:5e:51:db:b7:26:de:bb:43:30:fa:fd:05:2e:
         f9:6d:3d:58:6d:00:c3:5c:6b:aa:48:32:7b:b1:d8:7d:1a:28:
         8e:3e:57:fa:80:47:5c:66:71:a2:6e:94:e9:b1:a4:14:a0:3d:
         06:2e:81:aa:f1:f3:8d:82:aa:95:b6:67:f5:ca:7b:24:be:7c:
         5b:a6:9f:6a:41:fc:24:d6:b2:16:f2:91:cb:38:b9:4d:4b:df:
         da:9e:cf:07:86:e2:64:37:d6:88:9f:54:46:df:2e:1a:fb:74:
         9c:43:1b:75:5c:48:f7:57:b5:79:41:c8:58:b0:03:91:9d:76:
         78:f2:c9:03:f9:55:d1:77:54:77:e3:02:42:20:60:63:ce:1f:
         b6:71:59:ea:24:87:78:b0:ad:4f:e2:14:03:32:52:10:95:e8:
         e2:3a:66:f9:3d:0c:e8:fe:07:f2:83:ee:93:1e:36:e6:34:3c:
         ce:97:e8:a7:ff:7b:03:35:0e:1b:8c:90:b7:63:2a:e6:7d:bc:
         89:d1:39:19:7b:b8:00:e1:fe:2c:e3:3a:c4:10:2e:f9:6d:47:
         45:fe:46:d4:dd:0b:d0:30:c8:52:06:08:65:40:ba:50:94:2c:
         f0:0b:24:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD8+TQxGQvcMq0bCgafT+OePxyLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdFNDIyODA5MTA4QzE2NjFBM0Y0M0NCM0NFQ0Y5Q0I5
MTI0N0U5RTAeFw0yNDAzMjYxOTI1NDZaFw0yNTAzMjUxOTMwNDZaMDMxMTAvBgNV
BAMTKDUxQkZBNjI5QTZCRDE1ODlDQzRBNUQ2QzAzOEUwMEUyOUNEQjVFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArOb1+V9xhP2dd/b5YkpWb19P
GoDWh+ycvkFawDs5Ss6wCuC39nRA5g0dCuOLWcY80x3nzP0+jeIB52kNykULDjMc
Tx0BY3s5IfZ8soyNu/uzGKMJ5XpW7+uXh+/9cP3q5sEDOZycJxU60DoS+aq7rbVK
ExwoEkAWIbBSVkHXCiJuT2dWRDyUwtwg7ocU29tvjQJ3FqHvaxKShSW05vW++Elj
Og5HZxatrFHkerLnioetbRIV8KSnB38YXaQSe94r310igKVtTm4kLJYPgO/OxX0s
OZqdR6ShbKEmGQIeKk4Es1e7Yt7Oxd0bDwcj3pAOLpTmQsyB+WAIvp15I2tPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUb+mKaa9FYnMSl1sA44A4pzbXjEwHwYDVR0j
BBgwFoAU9+QigJEIwWYaP0PLPOz5y5Ekfp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xt
Q1kvMC9GN0U0MjI4MDkxMDhDMTY2MUEzRjQzQ0IzQ0VDRjlDQjkxMjQ3RTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y3RTQyMjgwOTEwOEMxNjYx
QTNGNDNDQjNDRUNGOUNCOTEyNDdFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyakJmY2NmSE1yNVROc3E1UUNmNUN3R2JFVmtLZnNKN3BkRnFtZ2tMbUNZLzAv
MzQzNTJlMzEzNjM0MmUzMjMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpNwwDQYJKoZIhvcNAQELBQADggEBAJaQ9noI
AH4xtLtpc4wZhWrlo0J/HeoFXlHbtybeu0Mw+v0FLvltPVhtAMNca6pIMnux2H0a
KI4+V/qAR1xmcaJulOmxpBSgPQYugarx842CqpW2Z/XKeyS+fFumn2pB/CTWshby
kcs4uU1L39qezweG4mQ31oifVEbfLhr7dJxDG3VcSPdXtXlByFiwA5GddnjyyQP5
VdF3VHfjAkIgYGPOH7ZxWeokh3iwrU/iFAMyUhCV6OI6Zvk9DOj+B/KD7pMeNuY0
PM6X6Kf/ewM1DhuMkLdjKuZ9vInRORl7uADh/izjOsQQLvltR0X+RtTdC9AwyFIG
CGVAulCULPALJHY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org