Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32342e302f32322d3232203d3e20323637343538.roa
File:                     34352e3138352e32342e302f32322d3232203d3e20323637343538.roa (raw, json)
Hash identifier:          hw4NRzoW2RkGPENacO/LCcffRCEI2sWIETogqn+nXbg=
Subject key identifier:   C7:3C:FB:1A:F7:13:20:B7:4B:48:08:C0:E1:6A:68:DC:68:CA:50:09
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       6C0865050F7538925D6CCD63DBF3C2DB97699C76
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32342e302f32322d3232203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:27:47 +0000
ROA not before:           Fri 08 Mar 2024 18:22:47 +0000
ROA not after:            Fri 07 Mar 2025 18:27:47 +0000
asID:                     267458
IP address blocks:        45.185.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:08:65:05:0f:75:38:92:5d:6c:cd:63:db:f3:c2:db:97:69:9c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:22:47 2024 GMT
            Not After : Mar  7 18:27:47 2025 GMT
        Subject: CN=C73CFB1AF71320B74B4808C0E16A68DC68CA5009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f1:e3:fe:8b:b1:cc:6b:d7:ef:43:76:42:c6:
                    dc:2a:fa:7b:cd:b5:f3:bc:8e:94:e5:ef:60:62:ba:
                    e3:26:3e:55:20:d7:d0:f0:72:75:3f:a8:6e:24:dd:
                    95:ea:12:89:e1:d8:a7:d2:12:7a:95:92:e3:1d:9d:
                    59:31:23:72:e8:3e:31:67:7c:50:0a:75:d0:60:2a:
                    18:90:55:74:89:dc:89:13:64:9a:48:9f:2e:cf:d1:
                    2d:27:5a:3f:09:3e:62:a1:fc:ce:b0:19:26:b8:44:
                    c1:4a:4b:cb:8c:05:90:4b:9f:c3:00:43:61:0a:e5:
                    58:2c:43:f3:12:ca:6b:58:bb:cf:ff:fd:71:da:5f:
                    f7:aa:74:ec:63:8f:b7:00:c0:68:d7:af:e1:13:a3:
                    50:a6:f9:ef:4a:89:6d:92:ff:b2:4e:19:31:34:fa:
                    17:02:c9:30:7f:22:38:51:99:27:cc:c8:dd:b8:38:
                    f7:49:61:44:ac:38:26:80:b2:c2:f9:78:1e:a0:55:
                    03:e2:79:f1:cd:0c:a4:3a:00:e6:51:df:79:6d:be:
                    28:96:61:86:6f:90:93:2f:9f:12:a5:97:c4:db:4d:
                    f5:9d:ad:34:7c:b8:c6:b6:04:78:91:a7:7d:c2:f0:
                    bf:4c:05:f1:2d:40:c8:37:99:48:4f:4a:2f:6d:73:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3C:FB:1A:F7:13:20:B7:4B:48:08:C0:E1:6A:68:DC:68:CA:50:09
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32342e302f32322d3232203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:3d:f5:a8:c0:84:d9:d5:60:0b:4d:e6:e2:9b:96:ab:2e:58:
         e8:79:5f:c9:25:e9:2c:d7:df:a9:30:2a:85:85:29:4b:5e:dd:
         51:6b:13:23:72:af:74:6d:6f:0c:2b:c7:54:61:94:5b:23:23:
         fb:29:fa:61:f2:96:90:1f:97:41:7d:a7:7b:d6:a5:46:d7:bf:
         f2:33:53:3a:be:0f:04:1c:c7:e8:4f:b4:cc:97:7f:b8:26:57:
         11:1f:c1:06:f9:0f:bb:32:02:30:b3:55:a1:bd:c7:b1:9e:73:
         50:a2:d5:b9:e8:b1:46:7f:c0:b3:25:8d:01:0d:4c:c6:4a:df:
         75:63:92:20:57:c3:b2:a2:9f:34:24:d9:80:ef:c6:39:bb:24:
         c6:f3:7b:25:01:a4:df:68:2d:d4:f2:e1:41:07:0d:2e:ad:7c:
         65:1f:51:33:3a:0f:79:8d:9b:8f:43:02:a8:99:49:8d:10:06:
         f2:8f:4b:42:94:8a:37:d4:6e:5d:f5:c2:32:01:e4:97:76:05:
         47:69:ef:43:8b:e9:71:45:06:63:20:0b:d1:bf:85:f9:1a:e1:
         d3:7e:ef:b5:18:0f:2c:26:58:d8:1d:79:74:e7:de:12:72:44:
         88:6f:81:61:d6:54:87:a7:e4:15:4d:2a:f9:fd:8c:52:f8:bc:
         af:66:42:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbAhlBQ91OJJdbM1j2/PC25dpnHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyRDY4MDEwRDc1OUEwRjQ0Rjk5RDgzOTc1NDE4MjRB
RDlEOTc4MTAeFw0yNDAzMDgxODIyNDdaFw0yNTAzMDcxODI3NDdaMDMxMTAvBgNV
BAMTKEM3M0NGQjFBRjcxMzIwQjc0QjQ4MDhDMEUxNkE2OERDNjhDQTUwMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8eP+i7HMa9fvQ3ZCxtwq+nvN
tfO8jpTl72BiuuMmPlUg19DwcnU/qG4k3ZXqEonh2KfSEnqVkuMdnVkxI3LoPjFn
fFAKddBgKhiQVXSJ3IkTZJpIny7P0S0nWj8JPmKh/M6wGSa4RMFKS8uMBZBLn8MA
Q2EK5VgsQ/MSymtYu8///XHaX/eqdOxjj7cAwGjXr+ETo1Cm+e9KiW2S/7JOGTE0
+hcCyTB/IjhRmSfMyN24OPdJYUSsOCaAssL5eB6gVQPiefHNDKQ6AOZR33ltviiW
YYZvkJMvnxKll8TbTfWdrTR8uMa2BHiRp33C8L9MBfEtQMg3mUhPSi9tc+hDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxzz7GvcTILdLSAjA4Wpo3GjKUAkwHwYDVR0j
BBgwFoAUfy1oAQ11mg9E+Z2Dl1QYJK2dl4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMC83RjJENjgwMTBENzU5QTBGNDRGOTlEODM5NzU0MTgyNEFEOUQ5NzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGMkQ2ODAxMEQ3NTlBMEY0
NEY5OUQ4Mzk3NTQxODI0QUQ5RDk3ODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzAv
MzQzNTJlMzEzODM1MmUzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzQzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbkYMA0GCSqGSIb3DQEBCwUAA4IBAQB6PfWowITZ
1WALTebim5arLljoeV/JJeks19+pMCqFhSlLXt1RaxMjcq90bW8MK8dUYZRbIyP7
Kfph8paQH5dBfad71qVG17/yM1M6vg8EHMfoT7TMl3+4JlcRH8EG+Q+7MgIws1Wh
vcexnnNQotW56LFGf8CzJY0BDUzGSt91Y5IgV8Oyop80JNmA78Y5uyTG83slAaTf
aC3U8uFBBw0urXxlH1EzOg95jZuPQwKomUmNEAbyj0tClIo31G5d9cIyAeSXdgVH
ae9Di+lxRQZjIAvRv4X5GuHTfu+1GA8sJljYHXl0594SckSIb4Fh1lSHp+QVTSr5
/YxS+LyvZkJu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org