Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32322d3232203d3e20323636323637.roa
File:                     34352e36352e3139322e302f32322d3232203d3e20323636323637.roa (raw, json)
Hash identifier:          yRgPKjDiW80gn6YH0xydFCFXhI9z4Ipaoeu1TuE4UhY=
Subject key identifier:   91:BC:00:19:A9:CB:40:98:DE:37:B4:E2:24:1A:93:B7:46:B0:42:2E
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       2DFBEC8649497E6826BF0D90F8435F3708672FF3
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32322d3232203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:35:21 +0000
ROA not before:           Thu 03 Aug 2023 17:30:21 +0000
ROA not after:            Thu 01 Aug 2024 17:35:21 +0000
asID:                     266267
IP address blocks:        45.65.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fb:ec:86:49:49:7e:68:26:bf:0d:90:f8:43:5f:37:08:67:2f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:30:21 2023 GMT
            Not After : Aug  1 17:35:21 2024 GMT
        Subject: CN=91BC0019A9CB4098DE37B4E2241A93B746B0422E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:0d:f8:4f:53:0c:ab:71:5d:f5:4e:cb:e3:
                    fd:db:ef:e6:05:18:fe:82:47:2a:77:1b:71:8e:22:
                    99:99:55:fd:bc:3a:cf:03:ec:77:e4:31:ef:86:65:
                    4f:74:a3:e8:f4:a3:88:e2:30:86:c2:16:fd:1d:1c:
                    6e:e7:0d:18:1b:14:0b:4b:8b:2d:bb:59:d4:c3:df:
                    3a:b5:8a:4d:23:f9:3b:d8:7e:ab:f8:58:48:10:c7:
                    e9:72:a2:a5:f2:f6:0a:42:05:7b:44:3c:5d:95:6a:
                    9f:e1:93:df:91:54:ab:37:8f:0f:1c:6a:f0:d9:7d:
                    b4:08:5a:83:4d:17:f4:c3:72:8a:cc:d1:40:d0:c9:
                    34:26:c1:8f:73:af:85:9d:93:1a:de:45:e6:15:ab:
                    dc:62:64:98:c0:45:8f:95:76:c1:a4:af:b4:e0:24:
                    c5:95:53:1f:52:03:59:3a:d0:2a:f2:02:87:c3:9b:
                    f1:94:3c:0d:49:ce:1c:bc:83:e4:5d:cb:27:78:4c:
                    a2:e2:69:a1:aa:c4:68:a4:60:15:e3:06:54:9c:74:
                    57:e6:d0:fd:20:c1:cd:10:4a:17:60:9b:56:61:d7:
                    96:1e:79:e7:78:97:84:81:0a:48:80:62:ad:23:f5:
                    79:7c:4e:fe:18:ed:22:76:cc:07:f5:ff:e4:fe:07:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BC:00:19:A9:CB:40:98:DE:37:B4:E2:24:1A:93:B7:46:B0:42:2E
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32322d3232203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:ff:af:f3:87:d9:74:2b:07:18:5d:10:b0:2f:cd:f8:92:
         da:28:7d:e8:17:38:9c:f0:53:f7:a8:59:a8:35:a1:ba:54:75:
         85:91:b1:b7:87:40:71:e6:e0:25:6a:e8:98:9e:71:b8:36:57:
         44:78:86:07:b2:55:5a:16:81:ff:ac:1f:03:11:42:8b:42:f7:
         90:c8:f2:3c:2e:92:af:3e:0a:5e:ee:03:cd:fc:c6:34:aa:ba:
         07:45:d2:fb:65:9c:2a:d1:85:13:74:26:af:59:06:a2:26:ce:
         d5:76:c4:b9:f6:3f:69:87:93:ad:a2:8a:15:9c:73:02:01:d1:
         5b:3a:64:74:5d:9b:28:24:00:56:ca:ba:10:3f:fb:35:25:fa:
         2b:92:be:1b:05:e7:69:27:0a:4f:ec:ba:3f:70:4e:c7:af:d5:
         bb:07:ce:a5:ef:89:ed:dd:5a:75:8c:dc:9c:7e:2f:c8:20:8c:
         52:16:f3:2a:4c:a9:7c:71:d9:82:84:b5:09:72:69:4f:d2:c5:
         52:38:a4:72:b2:36:09:27:95:33:b8:37:81:9a:f5:72:78:2c:
         d8:53:6f:0b:07:d8:75:99:6c:15:e0:74:a4:7b:44:54:35:21:
         af:5d:fd:00:0b:0d:ab:09:cd:16:05:9b:6b:04:29:32:18:55:
         46:a8:9c:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULfvshklJfmgmvw2Q+ENfNwhnL/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM4Rjg5NDgzMjQxRjdGNjU3REU2ODQ2Q0JEQjJCQTA0
NDM4N0Y5ODAeFw0yMzA4MDMxNzMwMjFaFw0yNDA4MDExNzM1MjFaMDMxMTAvBgNV
BAMTKDkxQkMwMDE5QTlDQjQwOThERTM3QjRFMjI0MUE5M0I3NDZCMDQyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTQ34T1MMq3Fd9U7L4/3b7+YF
GP6CRyp3G3GOIpmZVf28Os8D7HfkMe+GZU90o+j0o4jiMIbCFv0dHG7nDRgbFAtL
iy27WdTD3zq1ik0j+TvYfqv4WEgQx+lyoqXy9gpCBXtEPF2Vap/hk9+RVKs3jw8c
avDZfbQIWoNNF/TDcorM0UDQyTQmwY9zr4WdkxreReYVq9xiZJjARY+VdsGkr7Tg
JMWVUx9SA1k60CryAofDm/GUPA1Jzhy8g+Rdyyd4TKLiaaGqxGikYBXjBlScdFfm
0P0gwc0QShdgm1Zh15Yeeed4l4SBCkiAYq0j9Xl8Tv4Y7SJ2zAf1/+T+B3rhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkbwAGanLQJjeN7TiJBqTt0awQi4wHwYDVR0j
BBgwFoAU3I+JSDJB9/ZX3mhGy9sroEQ4f5gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdVckREWGdnN1JOVjZaRHJSeEhYV0NKd0x1SFVmaldhaTZrV1dRaTV1
cVQvMC9EQzhGODk0ODMyNDFGN0Y2NTdERTY4NDZDQkRCMkJBMDQ0Mzg3Rjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDOEY4OTQ4MzI0MUY3RjY1
N0RFNjg0NkNCREIyQkEwNDQzODdGOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3VXJERFhnZzdSTlY2WkRyUnhIWFdDSndMdUhVZmpXYWk2a1dXUWk1dXFULzAv
MzQzNTJlMzYzNTJlMzEzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzIzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUHAMA0GCSqGSIb3DQEBCwUAA4IBAQCHi/+v84fZ
dCsHGF0QsC/N+JLaKH3oFzic8FP3qFmoNaG6VHWFkbG3h0Bx5uAlauiYnnG4NldE
eIYHslVaFoH/rB8DEUKLQveQyPI8LpKvPgpe7gPN/MY0qroHRdL7ZZwq0YUTdCav
WQaiJs7VdsS59j9ph5OtoooVnHMCAdFbOmR0XZsoJABWyroQP/s1Jforkr4bBedp
JwpP7Lo/cE7Hr9W7B86l74nt3Vp1jNycfi/IIIxSFvMqTKl8cdmChLUJcmlP0sVS
OKRysjYJJ5UzuDeBmvVyeCzYU28LB9h1mWwV4HSke0RUNSGvXf0ACw2rCc0WBZtr
BCkyGFVGqJzQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org