Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa
File:                     34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (raw, json)
Hash identifier:          H3u7oChGuKR/dOj+DaHKJVCi2+IjPqgAfihGPRyBNqA=
Subject key identifier:   23:5E:C7:4F:03:77:70:39:BD:1B:E8:F4:6A:DE:37:9B:D7:FF:12:D9
Certificate issuer:       /CN=BEB892E574C47C0A212F34E75C03BA72346E3084
Certificate serial:       7D39769DE75A99BAE63B9E1738A9A42537F88A1F
Authority key identifier: BE:B8:92:E5:74:C4:7C:0A:21:2F:34:E7:5C:03:BA:72:34:6E:30:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEB892E574C47C0A212F34E75C03BA72346E3084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa
Signing time:             Thu 14 Sep 2023 20:26:54 +0000
ROA not before:           Thu 14 Sep 2023 20:21:54 +0000
ROA not after:            Thu 12 Sep 2024 20:26:54 +0000
asID:                     268084
IP address blocks:        45.168.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:39:76:9d:e7:5a:99:ba:e6:3b:9e:17:38:a9:a4:25:37:f8:8a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEB892E574C47C0A212F34E75C03BA72346E3084
        Validity
            Not Before: Sep 14 20:21:54 2023 GMT
            Not After : Sep 12 20:26:54 2024 GMT
        Subject: CN=235EC74F03777039BD1BE8F46ADE379BD7FF12D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:4f:8c:2f:c1:53:64:4e:a8:e6:e0:cd:70:
                    a2:d2:db:20:40:3a:e6:f4:73:cb:d9:10:e6:5d:c3:
                    49:f7:a1:ca:ac:d9:63:ce:fc:8b:ca:35:ca:71:ae:
                    34:fd:b0:6a:0b:cb:cc:cc:d4:04:51:2a:1a:42:d0:
                    a4:be:2d:e3:8a:1b:8a:9a:5e:1a:58:b7:91:d6:dd:
                    dd:55:49:2f:5a:81:2d:f7:d6:4e:05:fd:74:17:19:
                    ee:a6:18:22:97:45:61:9d:bc:cd:8b:70:ee:89:a3:
                    36:8c:2f:d5:f0:bd:a3:40:26:ed:e9:80:d9:a1:3e:
                    c2:b2:bd:2d:0e:4c:c9:8b:29:68:5f:c4:be:b8:f7:
                    1d:40:ed:eb:62:00:70:19:16:87:3a:33:ac:c9:79:
                    f2:08:4a:6c:01:4b:71:a0:60:bf:97:c4:ba:52:87:
                    ac:99:49:a7:9b:d3:4f:c5:47:82:e0:e2:c4:1e:5c:
                    a7:c7:ca:3b:ba:ab:5c:f8:2c:6c:1e:16:94:86:5a:
                    50:f4:d2:c2:18:54:cd:29:14:57:c0:01:27:77:47:
                    6e:dc:b8:7f:06:dc:55:0c:39:ae:9d:41:53:88:3e:
                    2e:2d:1f:c7:ab:21:db:6d:c4:b8:54:63:77:4c:b1:
                    b0:61:51:2e:db:db:d8:14:39:f4:58:0c:f5:ff:1d:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:C7:4F:03:77:70:39:BD:1B:E8:F4:6A:DE:37:9B:D7:FF:12:D9
            X509v3 Authority Key Identifier:
                keyid:BE:B8:92:E5:74:C4:7C:0A:21:2F:34:E7:5C:03:BA:72:34:6E:30:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/BEB892E574C47C0A212F34E75C03BA72346E3084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEB892E574C47C0A212F34E75C03BA72346E3084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:8f:84:4b:32:ed:9d:18:0f:51:27:62:46:2c:1d:f3:db:
         e1:42:79:b4:60:61:ef:96:b0:34:a7:0f:df:c3:20:88:c3:06:
         be:1d:b2:e8:c5:64:53:92:59:c9:27:74:12:93:95:30:40:fc:
         0b:e4:5c:7c:1e:af:6e:d9:99:8d:72:dd:fa:7d:56:3b:72:1d:
         77:e3:ff:7a:a2:95:b7:c0:f8:b8:c2:a9:06:d0:ce:9e:38:1f:
         34:bd:c1:68:3a:45:18:3e:d3:e5:f7:b7:2d:fc:f3:6c:60:ee:
         bd:7d:76:01:d8:f5:f2:ac:cb:ba:bc:9d:88:96:ed:f5:20:00:
         c6:df:2d:72:eb:d2:c2:66:67:a5:49:91:e8:25:85:3c:b8:00:
         a5:25:76:83:82:d6:dc:4f:80:bb:2d:ae:65:a7:c7:79:14:c9:
         ed:8b:69:06:6f:d2:d5:df:e5:7f:2c:88:67:2f:03:c6:ad:45:
         ee:6d:10:63:e1:28:ac:5f:eb:ce:b8:12:6d:b6:cd:30:13:61:
         0c:88:e9:ce:15:90:b4:22:1a:5e:22:2a:a8:71:ff:46:de:99:
         c9:ed:5d:60:9a:36:86:8d:99:02:d7:ba:72:6b:f8:36:cd:f0:
         82:64:78:9a:8e:b2:28:8e:88:c9:94:9d:f7:f8:f8:8d:47:04:
         3a:29:a5:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfTl2nedambrmO54XOKmkJTf4ih8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVCODkyRTU3NEM0N0MwQTIxMkYzNEU3NUMwM0JBNzIz
NDZFMzA4NDAeFw0yMzA5MTQyMDIxNTRaFw0yNDA5MTIyMDI2NTRaMDMxMTAvBgNV
BAMTKDIzNUVDNzRGMDM3NzcwMzlCRDFCRThGNDZBREUzNzlCRDdGRjEyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnUU+ML8FTZE6o5uDNcKLS2yBA
Oub0c8vZEOZdw0n3ocqs2WPO/IvKNcpxrjT9sGoLy8zM1ARRKhpC0KS+LeOKG4qa
XhpYt5HW3d1VSS9agS331k4F/XQXGe6mGCKXRWGdvM2LcO6JozaML9XwvaNAJu3p
gNmhPsKyvS0OTMmLKWhfxL649x1A7etiAHAZFoc6M6zJefIISmwBS3GgYL+XxLpS
h6yZSaeb00/FR4Lg4sQeXKfHyju6q1z4LGweFpSGWlD00sIYVM0pFFfAASd3R27c
uH8G3FUMOa6dQVOIPi4tH8erIdttxLhUY3dMsbBhUS7b29gUOfRYDPX/HUGvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI17HTwN3cDm9G+j0at43m9f/EtkwHwYDVR0j
BBgwFoAUvriS5XTEfAohLzTnXAO6cjRuMIQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm
VFYvMC9CRUI4OTJFNTc0QzQ3QzBBMjEyRjM0RTc1QzAzQkE3MjM0NkUzMDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFQjg5MkU1NzRDNDdDMEEy
MTJGMzRFNzVDMDNCQTcyMzQ2RTMwODQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1d1htVGJqR1hkQ3NqUGc1OGV6YUNpN1pOV2dOWjk3aWc4OUh6REVwZlRWLzAv
MzQzNTJlMzEzNjM4MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqPQwDQYJKoZIhvcNAQELBQADggEBAESMj4RL
Mu2dGA9RJ2JGLB3z2+FCebRgYe+WsDSnD9/DIIjDBr4dsujFZFOSWckndBKTlTBA
/AvkXHwer27ZmY1y3fp9VjtyHXfj/3qilbfA+LjCqQbQzp44HzS9wWg6RRg+0+X3
ty3882xg7r19dgHY9fKsy7q8nYiW7fUgAMbfLXLr0sJmZ6VJkeglhTy4AKUldoOC
1txPgLstrmWnx3kUye2LaQZv0tXf5X8siGcvA8atRe5tEGPhKKxf6864Em22zTAT
YQyI6c4VkLQiGl4iKqhx/0bemcntXWCaNoaNmQLXunJr+DbN8IJkeJqOsiiOiMmU
nff4+I1HBDoppaI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org