Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa
File:                     34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa (raw, json)
Hash identifier:          MF7GOyy1Oi31wC0Ux8jQB9t2xUrEBTx8reZ9kv4BLjA=
Subject key identifier:   F2:34:29:83:C4:7D:F6:06:C7:51:4A:79:76:97:70:E0:72:66:1F:6F
Certificate issuer:       /CN=255391F2D481A010D34E04F0C63EC1E283BD7B55
Certificate serial:       1AD520A484DC0E0A03DE84C14A0660B1790A2CC8
Authority key identifier: 25:53:91:F2:D4:81:A0:10:D3:4E:04:F0:C6:3E:C1:E2:83:BD:7B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/255391F2D481A010D34E04F0C63EC1E283BD7B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa
Signing time:             Thu 15 Jun 2023 04:00:00 +0000
ROA not before:           Thu 15 Jun 2023 03:55:00 +0000
ROA not after:            Sat 15 Jun 2024 04:00:00 +0000
asID:                     268952
IP address blocks:        45.176.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d5:20:a4:84:dc:0e:0a:03:de:84:c1:4a:06:60:b1:79:0a:2c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255391F2D481A010D34E04F0C63EC1E283BD7B55
        Validity
            Not Before: Jun 15 03:55:00 2023 GMT
            Not After : Jun 15 04:00:00 2024 GMT
        Subject: CN=3082010A0282010100CE047B9CD9573E1B10ACFA5A56A16EF53B67BAF9DEA3E89F7B302B86261119209FBFAB9FF789765F894C227F83B38A801BE034DA0E862EDA0BB3DC3D1C65C5DEF76CF86FCA7A8819F0A451898F6D6B0AF13810C8439FF69B38012D7B3915214CA6B6BBFE9DBDC24433E63981F719531E448907A2F2A59AF4199D3D93E448C447016CAE842F79EC436ABEE4D2C7926BCDE497E94A18AD870707BDC91EBA3B2D226C36861AEB671D4B880C529931B960B70B4759E73A8AB511C4308EE1307679168F6745D4C73F306D9A359C2FAE914D7CA5837D89399C5C56D677878B24E24C5FE1FC8DBBF4747706C8AC3B7000E236A357A48C6E9F4E6655F863FF35A6DA4EDD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:7b:9c:d9:57:3e:1b:10:ac:fa:5a:56:a1:
                    6e:f5:3b:67:ba:f9:de:a3:e8:9f:7b:30:2b:86:26:
                    11:19:20:9f:bf:ab:9f:f7:89:76:5f:89:4c:22:7f:
                    83:b3:8a:80:1b:e0:34:da:0e:86:2e:da:0b:b3:dc:
                    3d:1c:65:c5:de:f7:6c:f8:6f:ca:7a:88:19:f0:a4:
                    51:89:8f:6d:6b:0a:f1:38:10:c8:43:9f:f6:9b:38:
                    01:2d:7b:39:15:21:4c:a6:b6:bb:fe:9d:bd:c2:44:
                    33:e6:39:81:f7:19:53:1e:44:89:07:a2:f2:a5:9a:
                    f4:19:9d:3d:93:e4:48:c4:47:01:6c:ae:84:2f:79:
                    ec:43:6a:be:e4:d2:c7:92:6b:cd:e4:97:e9:4a:18:
                    ad:87:07:07:bd:c9:1e:ba:3b:2d:22:6c:36:86:1a:
                    eb:67:1d:4b:88:0c:52:99:31:b9:60:b7:0b:47:59:
                    e7:3a:8a:b5:11:c4:30:8e:e1:30:76:79:16:8f:67:
                    45:d4:c7:3f:30:6d:9a:35:9c:2f:ae:91:4d:7c:a5:
                    83:7d:89:39:9c:5c:56:d6:77:87:8b:24:e2:4c:5f:
                    e1:fc:8d:bb:f4:74:77:06:c8:ac:3b:70:00:e2:36:
                    a3:57:a4:8c:6e:9f:4e:66:55:f8:63:ff:35:a6:da:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:34:29:83:C4:7D:F6:06:C7:51:4A:79:76:97:70:E0:72:66:1F:6F
            X509v3 Authority Key Identifier:
                keyid:25:53:91:F2:D4:81:A0:10:D3:4E:04:F0:C6:3E:C1:E2:83:BD:7B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/255391F2D481A010D34E04F0C63EC1E283BD7B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/255391F2D481A010D34E04F0C63EC1E283BD7B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:bc:bd:ad:c7:cd:26:3d:d8:46:53:95:f1:b6:56:93:28:5a:
         e0:2d:ca:ed:8c:c7:6b:44:73:56:2f:10:8b:9b:f0:5d:ff:36:
         d8:50:83:54:46:b1:5e:45:09:ae:60:4e:88:74:09:b1:04:70:
         c7:c9:eb:26:13:36:0e:9c:a3:e7:59:c7:22:2a:c9:d8:cf:ba:
         dd:88:f8:4e:81:e3:22:64:ba:6a:dd:47:c8:cc:1d:91:12:75:
         51:3e:68:69:16:95:0a:b0:a7:6b:2f:ed:fe:ac:9d:e8:fd:52:
         73:4e:2b:45:e6:ec:f3:dd:62:64:73:b3:5d:ec:de:1f:d5:99:
         b6:98:e0:ab:f1:55:3b:89:88:b7:48:31:18:43:e5:bd:ce:00:
         bd:d3:8b:6f:e1:42:ab:08:1f:1a:56:6a:a4:98:3c:66:3b:2c:
         1b:13:c2:8e:7e:5f:d9:bb:91:34:8f:73:3a:ac:3a:be:ea:ac:
         ea:a2:01:e3:fe:55:26:5c:13:f8:a1:cb:46:8f:16:ae:8f:22:
         6a:32:fa:66:08:b8:65:ac:41:6e:eb:20:d6:e4:48:07:b5:2a:
         07:77:8d:1d:62:88:9c:cd:03:2b:1e:39:20:4a:4f:d2:ed:b7:
         e5:b8:f3:a0:e5:f5:ae:3c:6e:95:df:50:9c:4a:97:67:ab:ac:
         2a:c6:c4:d8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUGtUgpITcDgoD3oTBSgZgsXkKLMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU1MzkxRjJENDgxQTAxMEQzNEUwNEYwQzYzRUMxRTI4
M0JEN0I1NTAeFw0yMzA2MTUwMzU1MDBaFw0yNDA2MTUwNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0UwNDdCOUNEOTU3M0UxQjEw
QUNGQTVBNTZBMTZFRjUzQjY3QkFGOURFQTNFODlGN0IzMDJCODYyNjExMTkyMDlG
QkZBQjlGRjc4OTc2NUY4OTRDMjI3RjgzQjM4QTgwMUJFMDM0REEwRTg2MkVEQTBC
QjNEQzNEMUM2NUM1REVGNzZDRjg2RkNBN0E4ODE5RjBBNDUxODk4RjZENkIwQUYx
MzgxMEM4NDM5RkY2OUIzODAxMkQ3QjM5MTUyMTRDQTZCNkJCRkU5REJEQzI0NDMz
RTYzOTgxRjcxOTUzMUU0NDg5MDdBMkYyQTU5QUY0MTk5RDNEOTNFNDQ4QzQ0NzAx
NkNBRTg0MkY3OUVDNDM2QUJFRTREMkM3OTI2QkNERTQ5N0U5NEExOEFEODcwNzA3
QkRDOTFFQkEzQjJEMjI2QzM2ODYxQUVCNjcxRDRCODgwQzUyOTkzMUI5NjBCNzBC
NDc1OUU3M0E4QUI1MTFDNDMwOEVFMTMwNzY3OTE2OEY2NzQ1RDRDNzNGMzA2RDlB
MzU5QzJGQUU5MTREN0NBNTgzN0Q4OTM5OUM1QzU2RDY3Nzg3OEIyNEUyNEM1RkUx
RkM4REJCRjQ3NDc3MDZDOEFDM0I3MDAwRTIzNkEzNTdBNDhDNkU5RjRFNjY1NUY4
NjNGRjM1QTZEQTRFREQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzgR7nNlXPhsQrPpaVqFu9Ttnuvneo+ifezArhiYRGSCfv6uf94l2
X4lMIn+Ds4qAG+A02g6GLtoLs9w9HGXF3vds+G/KeogZ8KRRiY9tawrxOBDIQ5/2
mzgBLXs5FSFMpra7/p29wkQz5jmB9xlTHkSJB6LypZr0GZ09k+RIxEcBbK6EL3ns
Q2q+5NLHkmvN5JfpShithwcHvckeujstImw2hhrrZx1LiAxSmTG5YLcLR1nnOoq1
EcQwjuEwdnkWj2dF1Mc/MG2aNZwvrpFNfKWDfYk5nFxW1neHiyTiTF/h/I279HR3
BsisO3AA4jajV6SMbp9OZlX4Y/81ptpO3QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPI0KYPEffYGx1FKeXaXcOByZh9vMB8GA1UdIwQYMBaAFCVTkfLUgaAQ004E8MY+
weKDvXtVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c0VVU0eFRmeGZzcTR4
ZnM5ZENOOG8ya1NRd1k2UlpHaGQ2NWJUbWM4cmdtLzAvMjU1MzkxRjJENDgxQTAx
MEQzNEUwNEYwQzYzRUMxRTI4M0JEN0I1NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yNTUzOTFGMkQ0ODFBMDEwRDM0RTA0RjBDNjNFQzFFMjgzQkQ3
QjU1LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HNFVVNHhUZnhmc3E0eGZzOWRD
TjhvMmtTUXdZNlJaR2hkNjViVG1jOHJnbS8wLzM0MzUyZTMxMzczNjJlMzIzMDM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4MzkzNTMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LbDMMA0GCSqGSIb3DQEBCwUAA4IBAQAUvL2tx80mPdhGU5XxtlaTKFrgLcrtjMdr
RHNWLxCLm/Bd/zbYUINURrFeRQmuYE6IdAmxBHDHyesmEzYOnKPnWcciKsnYz7rd
iPhOgeMiZLpq3UfIzB2REnVRPmhpFpUKsKdrL+3+rJ3o/VJzTitF5uzz3WJkc7Nd
7N4f1Zm2mOCr8VU7iYi3SDEYQ+W9zgC904tv4UKrCB8aVmqkmDxmOywbE8KOfl/Z
u5E0j3M6rDq+6qzqogHj/lUmXBP4octGjxaujyJqMvpmCLhlrEFu6yDW5EgHtSoH
d40dYoiczQMrHjkgSk/S7bfluPOg5fWuPG6V31CcSpdnq6wqxsTY
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org