Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33342e302f32332d3233203d3e20323637333034.roa
File:                     34352e3233332e33342e302f32332d3233203d3e20323637333034.roa (raw, json)
Hash identifier:          9f+O8eux4OrsQ0mh9izELfhpebGAjSBeIa11KRKFD7s=
Subject key identifier:   06:69:91:97:4F:CF:64:D8:76:ED:56:61:73:8D:68:7F:89:91:77:75
Certificate issuer:       /CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
Certificate serial:       64B3EE086336C0EE1625C231084A06613ABC5AA9
Authority key identifier: DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33342e302f32332d3233203d3e20323637333034.roa
Signing time:             Tue 23 Aug 2022 05:00:00 +0000
ROA not before:           Tue 23 Aug 2022 04:55:00 +0000
ROA not after:            Wed 23 Aug 2023 05:00:00 +0000
asID:                     267304
IP address blocks:        45.233.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b3:ee:08:63:36:c0:ee:16:25:c2:31:08:4a:06:61:3a:bc:5a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
        Validity
            Not Before: Aug 23 04:55:00 2022 GMT
            Not After : Aug 23 05:00:00 2023 GMT
        Subject: CN=3082010A0282010100B789B8ADB2B0A4A01720E3503FD53E9DE958FF246F602167A5047441B718CE84415DF900F561CD6846C0A8A09FDC75DFE0D6767EC5FF38299922BBF3CBEDCAFA27B4CFFCDB9078848D743AA85960530CE45CAFC701D1CC8015A3B90063E3F90381098497C3A97BA21DE732DB84D6F1CD68DF0AECAA0547062F021CC09EA806F8E2932A999BEFA9F903AAC127E1AB257DE29CCC9A847E15BC96EA0E535756B9D982735B6634D3CC4D923BD1D1C513E0C4E5BF448F100B749A7D28B8106E0BAC3B8273765E400D9A2F48B9D392B99C31B07751EDE29F7F4C0CF8641B7B0BCA0191CA7D7C86108EB49C16FC90DC1C3274475744A13144155C426A8114676136C67F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:b8:ad:b2:b0:a4:a0:17:20:e3:50:3f:d5:
                    3e:9d:e9:58:ff:24:6f:60:21:67:a5:04:74:41:b7:
                    18:ce:84:41:5d:f9:00:f5:61:cd:68:46:c0:a8:a0:
                    9f:dc:75:df:e0:d6:76:7e:c5:ff:38:29:99:22:bb:
                    f3:cb:ed:ca:fa:27:b4:cf:fc:db:90:78:84:8d:74:
                    3a:a8:59:60:53:0c:e4:5c:af:c7:01:d1:cc:80:15:
                    a3:b9:00:63:e3:f9:03:81:09:84:97:c3:a9:7b:a2:
                    1d:e7:32:db:84:d6:f1:cd:68:df:0a:ec:aa:05:47:
                    06:2f:02:1c:c0:9e:a8:06:f8:e2:93:2a:99:9b:ef:
                    a9:f9:03:aa:c1:27:e1:ab:25:7d:e2:9c:cc:9a:84:
                    7e:15:bc:96:ea:0e:53:57:56:b9:d9:82:73:5b:66:
                    34:d3:cc:4d:92:3b:d1:d1:c5:13:e0:c4:e5:bf:44:
                    8f:10:0b:74:9a:7d:28:b8:10:6e:0b:ac:3b:82:73:
                    76:5e:40:0d:9a:2f:48:b9:d3:92:b9:9c:31:b0:77:
                    51:ed:e2:9f:7f:4c:0c:f8:64:1b:7b:0b:ca:01:91:
                    ca:7d:7c:86:10:8e:b4:9c:16:fc:90:dc:1c:32:74:
                    47:57:44:a1:31:44:15:5c:42:6a:81:14:67:61:36:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:91:97:4F:CF:64:D8:76:ED:56:61:73:8D:68:7F:89:91:77:75
            X509v3 Authority Key Identifier:
                keyid:DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33342e302f32332d3233203d3e20323637333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:33:2e:0b:d5:40:b5:cb:92:aa:21:da:f0:46:33:36:84:
         bc:89:08:14:9d:06:63:b7:44:10:fa:81:0f:62:f7:93:49:9e:
         52:f8:56:c7:7e:58:28:96:d5:b1:9e:77:30:c8:ec:a4:c9:98:
         a2:30:9d:27:bf:fb:b0:1e:88:39:6a:94:5f:a6:0a:ab:9e:2e:
         71:79:e5:88:59:7d:bf:8f:77:ef:af:96:55:0a:4c:be:c6:00:
         53:62:04:e2:53:50:6f:6a:60:97:ab:9c:1a:8c:32:e6:b1:74:
         ed:af:b7:8e:85:c7:06:51:59:c5:7c:fe:9e:bf:99:fd:27:92:
         44:92:59:c6:33:7a:06:d3:ea:a6:5b:66:4d:3c:17:8f:53:b2:
         5e:80:01:db:25:83:8b:80:18:68:b9:90:f6:1d:97:9f:0b:f6:
         a8:ae:05:1e:84:5e:14:72:59:aa:bd:23:7b:1c:86:81:d9:57:
         bb:a2:a8:a8:0e:91:66:96:2f:d9:b8:5d:f3:05:70:00:a4:fb:
         e8:ee:f9:1a:39:82:6a:7e:ec:84:6a:89:64:af:5d:11:e3:64:
         3b:5a:45:16:56:ef:20:46:34:4b:fc:04:a9:5d:7a:d8:82:6b:
         04:b3:12:77:7f:14:0f:6e:c9:3d:6b:ae:67:59:45:f5:b3:33:
         50:57:5d:d9
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUZLPuCGM2wO4WJcIxCEoGYTq8WqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE4NEYzMzQ5RDAzNzg5MkZGNTNFMzhBQkRBOEVCREZB
NkY4RjQ5OTAeFw0yMjA4MjMwNDU1MDBaFw0yMzA4MjMwNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc4OUI4QURCMkIwQTRBMDE3
MjBFMzUwM0ZENTNFOURFOTU4RkYyNDZGNjAyMTY3QTUwNDc0NDFCNzE4Q0U4NDQx
NURGOTAwRjU2MUNENjg0NkMwQThBMDlGREM3NURGRTBENjc2N0VDNUZGMzgyOTk5
MjJCQkYzQ0JFRENBRkEyN0I0Q0ZGQ0RCOTA3ODg0OEQ3NDNBQTg1OTYwNTMwQ0U0
NUNBRkM3MDFEMUNDODAxNUEzQjkwMDYzRTNGOTAzODEwOTg0OTdDM0E5N0JBMjFE
RTczMkRCODRENkYxQ0Q2OERGMEFFQ0FBMDU0NzA2MkYwMjFDQzA5RUE4MDZGOEUy
OTMyQTk5OUJFRkE5RjkwM0FBQzEyN0UxQUIyNTdERTI5Q0NDOUE4NDdFMTVCQzk2
RUEwRTUzNTc1NkI5RDk4MjczNUI2NjM0RDNDQzREOTIzQkQxRDFDNTEzRTBDNEU1
QkY0NDhGMTAwQjc0OUE3RDI4QjgxMDZFMEJBQzNCODI3Mzc2NUU0MDBEOUEyRjQ4
QjlEMzkyQjk5QzMxQjA3NzUxRURFMjlGN0Y0QzBDRjg2NDFCN0IwQkNBMDE5MUNB
N0Q3Qzg2MTA4RUI0OUMxNkZDOTBEQzFDMzI3NDQ3NTc0NEExMzE0NDE1NUM0MjZB
ODExNDY3NjEzNkM2N0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt4m4rbKwpKAXIONQP9U+nelY/yRvYCFnpQR0QbcYzoRBXfkA9WHN
aEbAqKCf3HXf4NZ2fsX/OCmZIrvzy+3K+ie0z/zbkHiEjXQ6qFlgUwzkXK/HAdHM
gBWjuQBj4/kDgQmEl8Ope6Id5zLbhNbxzWjfCuyqBUcGLwIcwJ6oBvjikyqZm++p
+QOqwSfhqyV94pzMmoR+FbyW6g5TV1a52YJzW2Y008xNkjvR0cUT4MTlv0SPEAt0
mn0ouBBuC6w7gnN2XkANmi9IudOSuZwxsHdR7eKff0wM+GQbewvKAZHKfXyGEI60
nBb8kNwcMnRHV0ShMUQVXEJqgRRnYTbGfwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAZpkZdPz2TYdu1WYXONaH+JkXd1MB8GA1UdIwQYMBaAFNqE8zSdA3iS/1Pjir2o
69+m+PSZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkeHE3VjJZaGNLZ3hX
S2E4eDVKQmNncWREek1RZTF0eE5MYlZFMWQ2ZXdvLzAvREE4NEYzMzQ5RDAzNzg5
MkZGNTNFMzhBQkRBOEVCREZBNkY4RjQ5OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EQTg0RjMzNDlEMDM3ODkyRkY1M0UzOEFCREE4RUJERkE2RjhG
NDk5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZHhxN1YyWWhjS2d4V0thOHg1
SkJjZ3FkRHpNUWUxdHhOTGJWRTFkNmV3by8wLzM0MzUyZTMyMzMzMzJlMzMzNDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNzMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3p
IjANBgkqhkiG9w0BAQsFAAOCAQEAoQMzLgvVQLXLkqoh2vBGMzaEvIkIFJ0GY7dE
EPqBD2L3k0meUvhWx35YKJbVsZ53MMjspMmYojCdJ7/7sB6IOWqUX6YKq54ucXnl
iFl9v49376+WVQpMvsYAU2IE4lNQb2pgl6ucGowy5rF07a+3joXHBlFZxXz+nr+Z
/SeSRJJZxjN6BtPqpltmTTwXj1OyXoAB2yWDi4AYaLmQ9h2Xnwv2qK4FHoReFHJZ
qr0jexyGgdlXu6KoqA6RZpYv2bhd8wVwAKT76O75GjmCan7shGqJZK9dEeNkO1pF
FlbvIEY0S/wEqV162IJrBLMSd38UD27JPWuuZ1lF9bMzUFdd2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org