Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38312e302f32342d3234203d3e20323637333435.roa
File:                     34352e3233342e38312e302f32342d3234203d3e20323637333435.roa (raw, json)
Hash identifier:          lXEbkPTv+As/I/s81qlnsqjoZqdwXMPDLRc4I0YBpIc=
Subject key identifier:   90:EB:17:59:F6:ED:57:4E:61:55:DA:A6:78:D0:72:BD:3A:8B:19:71
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       1206D981DC0B2905C033379E6993B215E2CCBED1
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38312e302f32342d3234203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:36:10 +0000
ROA not before:           Tue 30 Jan 2024 16:31:10 +0000
ROA not after:            Tue 28 Jan 2025 16:36:10 +0000
asID:                     267345
IP address blocks:        45.234.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:06:d9:81:dc:0b:29:05:c0:33:37:9e:69:93:b2:15:e2:cc:be:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:31:10 2024 GMT
            Not After : Jan 28 16:36:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:45:60:e9:36:13:b8:89:16:ec:7a:e4:39:
                    bd:7c:dd:9c:15:e8:ed:ed:2d:81:f4:6a:22:ec:e9:
                    b4:20:4b:8c:16:44:4b:0d:3b:d2:7a:b0:75:e3:80:
                    52:46:ca:4e:ef:cc:30:2d:60:5c:62:08:3b:b0:db:
                    28:de:4c:f5:b8:69:0f:60:1d:de:34:7f:7a:90:e8:
                    2c:06:80:05:72:03:e4:7d:5b:54:b5:fe:ef:c6:e8:
                    a2:54:6f:b3:09:b2:37:2d:a7:83:f1:d3:ac:41:4f:
                    20:0f:2f:08:34:eb:9e:f1:77:e4:c5:2f:af:76:26:
                    01:45:7a:bf:48:ea:97:25:a3:01:24:64:0f:f8:8a:
                    3f:7f:90:b2:f4:ba:01:20:b7:e7:17:2c:da:5a:cc:
                    91:b5:58:7e:0f:10:a2:f7:a6:d1:bc:26:dd:21:cf:
                    82:42:35:0f:9e:7a:3c:51:f8:55:07:35:14:12:04:
                    2e:e3:e3:02:80:85:48:70:29:91:10:fd:d8:19:4b:
                    7a:2e:7d:ef:c2:63:cc:c2:10:97:c6:a0:00:85:82:
                    cc:e7:ca:91:55:a7:ba:89:5f:da:39:c9:3a:06:61:
                    47:8f:76:06:27:52:6c:c3:90:7c:bf:44:74:fe:44:
                    34:2a:1c:c8:09:49:81:28:ad:ea:91:f8:b6:af:bf:
                    9e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EB:17:59:F6:ED:57:4E:61:55:DA:A6:78:D0:72:BD:3A:8B:19:71
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38312e302f32342d3234203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:be:5c:05:09:28:a7:8a:f9:a4:c7:50:c9:51:8a:37:91:49:
         ad:1b:df:0f:0e:f2:c1:f5:2e:e0:e4:7a:34:b9:24:10:e6:03:
         2b:8e:9b:c8:fa:df:97:12:06:24:63:de:76:8b:a1:51:2e:09:
         37:f4:8b:db:f5:eb:97:02:37:60:0d:56:de:58:40:6f:15:45:
         1e:43:6b:e7:3e:22:50:99:c6:9e:3f:e0:bc:8f:02:ca:23:23:
         be:2a:90:c5:8f:ac:f8:ce:0d:de:57:4c:ac:f0:48:ec:2e:90:
         ea:b0:dd:d7:ab:11:fe:4c:3c:67:2b:ed:d5:45:2e:0b:6b:63:
         79:ef:00:74:82:cc:de:34:a9:2c:ef:1a:4d:8d:c0:c2:d0:ce:
         9e:fd:79:5b:62:8b:d2:0d:82:7d:c4:9e:48:20:53:2c:8c:dd:
         4b:bb:89:0b:e6:d6:62:12:1b:ff:b6:36:3a:8c:4f:a5:96:32:
         30:cb:69:28:e8:db:d9:9c:f5:32:fb:eb:8d:e2:44:59:54:51:
         29:ed:5f:01:81:60:d0:1c:2e:29:f4:8d:e4:c6:20:4a:cc:0a:
         ba:f7:99:e6:bf:fe:d9:45:17:87:25:54:ef:ee:4c:39:bb:56:
         96:ba:c9:a3:ae:17:38:1b:a1:77:a8:25:a7:5a:6f:e9:6f:9d:
         bf:17:c5:7a
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUEgbZgdwLKQXAMzeeaZOyFeLMvtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY3RUE4QTBBNjlGNzhFNjI2RUY1QjQ1MTgwMDE4OTU4
QzNDQTE2NzAeFw0yNDAxMzAxNjMxMTBaFw0yNTAxMjgxNjM2MTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjhCOTQ1NjBFOTM2MTNCODg5
MTZFQzdBRTQzOUJEN0NERDlDMTVFOEVERUQyRDgxRjQ2QTIyRUNFOUI0MjA0QjhD
MTY0NDRCMEQzQkQyN0FCMDc1RTM4MDUyNDZDQTRFRUZDQzMwMkQ2MDVDNjIwODNC
QjBEQjI4REU0Q0Y1Qjg2OTBGNjAxRERFMzQ3RjdBOTBFODJDMDY4MDA1NzIwM0U0
N0Q1QjU0QjVGRUVGQzZFOEEyNTQ2RkIzMDlCMjM3MkRBNzgzRjFEM0FDNDE0RjIw
MEYyRjA4MzRFQjlFRjE3N0U0QzUyRkFGNzYyNjAxNDU3QUJGNDhFQTk3MjVBMzAx
MjQ2NDBGRjg4QTNGN0Y5MEIyRjRCQTAxMjBCN0U3MTcyQ0RBNUFDQzkxQjU1ODdF
MEYxMEEyRjdBNkQxQkMyNkREMjFDRjgyNDIzNTBGOUU3QTNDNTFGODU1MDczNTE0
MTIwNDJFRTNFMzAyODA4NTQ4NzAyOTkxMTBGREQ4MTk0QjdBMkU3REVGQzI2M0ND
QzIxMDk3QzZBMDAwODU4MkNDRTdDQTkxNTVBN0JBODk1RkRBMzlDOTNBMDY2MTQ3
OEY3NjA2Mjc1MjZDQzM5MDdDQkY0NDc0RkU0NDM0MkExQ0M4MDk0OTgxMjhBREVB
OTFGOEI2QUZCRjlFRUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuLlFYOk2E7iJFux65Dm9fN2cFejt7S2B9Goi7Om0IEuMFkRLDTvS
erB144BSRspO78wwLWBcYgg7sNso3kz1uGkPYB3eNH96kOgsBoAFcgPkfVtUtf7v
xuiiVG+zCbI3LaeD8dOsQU8gDy8INOue8XfkxS+vdiYBRXq/SOqXJaMBJGQP+Io/
f5Cy9LoBILfnFyzaWsyRtVh+DxCi96bRvCbdIc+CQjUPnno8UfhVBzUUEgQu4+MC
gIVIcCmREP3YGUt6Ln3vwmPMwhCXxqAAhYLM58qRVae6iV/aOck6BmFHj3YGJ1Js
w5B8v0R0/kQ0KhzICUmBKK3qkfi2r7+e6wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJDrF1n27VdOYVXapnjQcr06ixlxMB8GA1UdIwQYMBaAFIZ+qKCmn3jmJu9bRRgA
GJWMPKFnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzAvODY3RUE4QTBBNjlGNzhF
NjI2RUY1QjQ1MTgwMDE4OTU4QzNDQTE2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84NjdFQThBMEE2OUY3OEU2MjZFRjVCNDUxODAwMTg5NThDM0NB
MTY3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8wLzM0MzUyZTMyMzMzNDJlMzgzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzMzMzQzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3q
UTANBgkqhkiG9w0BAQsFAAOCAQEAl75cBQkop4r5pMdQyVGKN5FJrRvfDw7ywfUu
4OR6NLkkEOYDK46byPrflxIGJGPedouhUS4JN/SL2/XrlwI3YA1W3lhAbxVFHkNr
5z4iUJnGnj/gvI8CyiMjviqQxY+s+M4N3ldMrPBI7C6Q6rDd16sR/kw8Zyvt1UUu
C2tjee8AdILM3jSpLO8aTY3AwtDOnv15W2KL0g2CfcSeSCBTLIzdS7uJC+bWYhIb
/7Y2OoxPpZYyMMtpKOjb2Zz1MvvrjeJEWVRRKe1fAYFg0BwuKfSN5MYgSswKuveZ
5r/+2UUXhyVU7+5MObtWlrrJo64XOBuhd6glp1pv6W+dvxfFeg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org