Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138372e302f32342d3234203d3e20323637323731.roa
File:                     34352e3233322e3138372e302f32342d3234203d3e20323637323731.roa (raw, json)
Hash identifier:          ATg/qLT9tQe595ik+BNgQDaMr/2dSGsoXzqBpwkS8+k=
Subject key identifier:   D1:51:EC:D7:DB:43:AE:6D:33:EE:EF:0C:EA:9C:95:0B:ED:44:0A:AD
Certificate issuer:       /CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
Certificate serial:       4F1DD17516B5E86E20699A6ECD7163D2784B82E0
Authority key identifier: CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138372e302f32342d3234203d3e20323637323731.roa
Signing time:             Mon 06 Dec 2021 21:21:50 +0000
ROA not before:           Mon 06 Dec 2021 21:16:50 +0000
ROA not after:            Mon 05 Dec 2022 21:21:50 +0000
asID:                     267271
IP address blocks:        45.232.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1d:d1:75:16:b5:e8:6e:20:69:9a:6e:cd:71:63:d2:78:4b:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
        Validity
            Not Before: Dec  6 21:16:50 2021 GMT
            Not After : Dec  5 21:21:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:95:90:2e:e3:51:46:46:3c:97:80:ad:cf:
                    e7:ce:8f:c5:4f:5b:18:19:c1:b3:c4:b7:f4:fc:42:
                    a7:1e:aa:f8:91:91:a9:e8:01:e5:17:0e:92:77:90:
                    e3:b1:fc:d2:9a:b5:19:fc:41:cd:b2:d0:d2:4c:c1:
                    49:a4:cd:cc:fd:e5:7d:07:bf:ec:33:47:06:07:d8:
                    c7:02:05:eb:00:60:1c:82:fe:ee:2d:4a:93:81:40:
                    fa:38:e1:c6:e3:8e:91:b4:de:95:67:7f:b8:79:a4:
                    73:be:3b:dc:54:69:6d:f9:2d:67:3e:eb:7e:5a:e2:
                    90:b8:bd:f0:9f:0a:fd:0a:fd:74:13:2c:a5:01:12:
                    db:9d:b8:dc:e5:41:46:7b:29:ad:9a:e0:79:81:4c:
                    ef:86:05:88:7d:53:41:9c:9b:c0:11:42:22:4a:95:
                    1c:ee:a0:a7:34:bc:8b:02:7c:75:bb:2a:a4:53:11:
                    c2:02:74:b6:e8:d7:87:ac:ad:28:f7:74:fd:ce:3b:
                    a3:ff:56:f0:8b:a0:0b:96:c7:3f:c1:22:f9:31:34:
                    43:99:60:50:f6:47:6b:46:9f:2c:da:e4:6e:82:31:
                    82:8a:c0:52:91:e9:fa:e2:e9:00:93:04:b9:be:55:
                    00:f4:57:bf:af:ab:4b:4c:3a:19:8a:20:72:a4:13:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:51:EC:D7:DB:43:AE:6D:33:EE:EF:0C:EA:9C:95:0B:ED:44:0A:AD
            X509v3 Authority Key Identifier:
                keyid:CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138372e302f32342d3234203d3e20323637323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ee:87:aa:52:a1:c0:3d:33:9c:42:8e:17:49:f7:3b:f4:f1:
         ce:0c:93:b6:43:9d:8e:9d:a0:29:d5:95:07:5d:86:81:46:93:
         1a:b7:c7:4c:96:4a:b7:9d:8a:9c:ee:a2:8b:f6:ea:da:4f:c1:
         80:57:08:b9:8b:2a:a4:cd:c2:2b:7e:4e:64:f5:55:cf:d7:ee:
         f6:46:b9:91:23:94:3b:61:8c:6f:bb:e1:91:80:3b:dd:74:1c:
         0e:ee:f7:27:d8:93:66:80:18:d9:ec:2e:75:88:c1:46:bf:30:
         7d:3e:42:fe:7e:0f:55:45:98:8b:f2:7f:90:e8:c2:97:65:3f:
         11:93:31:7e:6e:7e:b3:9f:21:b2:c8:57:7b:ac:b7:67:5f:02:
         17:d1:a6:d3:b8:3f:87:a8:37:bb:03:7c:24:3d:51:c7:08:ff:
         2d:e3:d8:db:60:5b:cc:c5:40:3e:eb:2c:69:8f:b1:1d:c5:2d:
         d5:f4:15:7e:ea:37:ea:e1:6d:6f:49:9e:a0:56:b6:60:7a:d7:
         7b:a4:af:f9:b4:ab:16:de:23:69:4e:3b:64:8b:12:d9:2f:2b:
         23:d2:8a:31:8b:bb:73:a1:8d:16:bd:f7:b4:e3:95:4d:f8:6b:
         1c:3a:e6:7e:29:a5:89:ca:d4:77:0a:1a:0b:76:9b:ed:4f:ee:
         4f:3c:54:2d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUTx3RdRa16G4gaZpuzXFj0nhLguAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y3Q0EzQzdGNjQ4NEE4REMyNjg4ODk0RjZENzQwMkVE
NTU4MEJFQjAeFw0yMTEyMDYyMTE2NTBaFw0yMjEyMDUyMTIxNTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjkyNjk1OTAyRUUzNTE0NjQ2
M0M5NzgwQURDRkU3Q0U4RkM1NEY1QjE4MTlDMUIzQzRCN0Y0RkM0MkE3MUVBQUY4
OTE5MUE5RTgwMUU1MTcwRTkyNzc5MEUzQjFGQ0QyOUFCNTE5RkM0MUNEQjJEMEQy
NENDMTQ5QTRDRENDRkRFNTdEMDdCRkVDMzM0NzA2MDdEOEM3MDIwNUVCMDA2MDFD
ODJGRUVFMkQ0QTkzODE0MEZBMzhFMUM2RTM4RTkxQjRERTk1Njc3RkI4NzlBNDcz
QkUzQkRDNTQ2OTZERjkyRDY3M0VFQjdFNUFFMjkwQjhCREYwOUYwQUZEMEFGRDc0
MTMyQ0E1MDExMkRCOURCOERDRTU0MTQ2N0IyOUFEOUFFMDc5ODE0Q0VGODYwNTg4
N0Q1MzQxOUM5QkMwMTE0MjIyNEE5NTFDRUVBMEE3MzRCQzhCMDI3Qzc1QkIyQUE0
NTMxMUMyMDI3NEI2RThENzg3QUNBRDI4Rjc3NEZEQ0UzQkEzRkY1NkYwOEJBMDBC
OTZDNzNGQzEyMkY5MzEzNDQzOTk2MDUwRjY0NzZCNDY5RjJDREFFNDZFODIzMTgy
OEFDMDUyOTFFOUZBRTJFOTAwOTMwNEI5QkU1NTAwRjQ1N0JGQUZBQjRCNEMzQTE5
OEEyMDcyQTQxMzI3MkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuSaVkC7jUUZGPJeArc/nzo/FT1sYGcGzxLf0/EKnHqr4kZGp6AHl
Fw6Sd5DjsfzSmrUZ/EHNstDSTMFJpM3M/eV9B7/sM0cGB9jHAgXrAGAcgv7uLUqT
gUD6OOHG446RtN6VZ3+4eaRzvjvcVGlt+S1nPut+WuKQuL3wnwr9Cv10EyylARLb
nbjc5UFGeymtmuB5gUzvhgWIfVNBnJvAEUIiSpUc7qCnNLyLAnx1uyqkUxHCAnS2
6NeHrK0o93T9zjuj/1bwi6ALlsc/wSL5MTRDmWBQ9kdrRp8s2uRugjGCisBSken6
4ukAkwS5vlUA9Fe/r6tLTDoZiiBypBMnLwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNFR7NfbQ65tM+7vDOqclQvtRAqtMB8GA1UdIwQYMBaAFM98o8f2SEqNwmiIlPbX
QC7VWAvrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZxdHo1UFRVWUNkcXdK
NUNBSHJ1WVFpTjI2QURzVWplSkN4ZE43QXBTakV0LzAvQ0Y3Q0EzQzdGNjQ4NEE4
REMyNjg4ODk0RjZENzQwMkVENTU4MEJFQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DRjdDQTNDN0Y2NDg0QThEQzI2ODg4OTRGNkQ3NDAyRUQ1NTgw
QkVCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GcXR6NVBUVVlDZHF3SjVDQUhy
dVlRaU4yNkFEc1VqZUpDeGRON0FwU2pFdC8wLzM0MzUyZTMyMzMzMjJlMzEzODM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzIzNzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Lei7MA0GCSqGSIb3DQEBCwUAA4IBAQAH7oeqUqHAPTOcQo4XSfc79PHODJO2Q52O
naAp1ZUHXYaBRpMat8dMlkq3nYqc7qKL9uraT8GAVwi5iyqkzcIrfk5k9VXP1+72
RrmRI5Q7YYxvu+GRgDvddBwO7vcn2JNmgBjZ7C51iMFGvzB9PkL+fg9VRZiL8n+Q
6MKXZT8RkzF+bn6znyGyyFd7rLdnXwIX0abTuD+HqDe7A3wkPVHHCP8t49jbYFvM
xUA+6yxpj7EdxS3V9BV+6jfq4W1vSZ6gVrZgetd7pK/5tKsW3iNpTjtkixLZLysj
0ooxi7tzoY0Wvfe045VN+GscOuZ+KaWJytR3ChoLdpvtT+5PPFQt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org