Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234302e302f32342d3234203d3e20323638393630.roa
File:                     34352e3137362e3234302e302f32342d3234203d3e20323638393630.roa (raw, json)
Hash identifier:          2C9A+XZqj1BzhG+IIyhzyW0xhTdXKebbPJq8CkZuvK4=
Subject key identifier:   D9:2F:DE:D3:25:15:01:A9:2C:0B:62:9D:3D:5A:1D:BB:8B:BC:08:1A
Certificate issuer:       /CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
Certificate serial:       206C4A10B9B9A8DC4F142771B4F4FB062BC89FFB
Authority key identifier: E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234302e302f32342d3234203d3e20323638393630.roa
Signing time:             Thu 29 Jun 2023 18:44:00 +0000
ROA not before:           Thu 29 Jun 2023 18:39:00 +0000
ROA not after:            Thu 27 Jun 2024 18:44:00 +0000
asID:                     268960
IP address blocks:        45.176.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6c:4a:10:b9:b9:a8:dc:4f:14:27:71:b4:f4:fb:06:2b:c8:9f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
        Validity
            Not Before: Jun 29 18:39:00 2023 GMT
            Not After : Jun 27 18:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e5:a0:b7:a2:12:e2:c7:b4:5c:36:ad:c5:1c:
                    36:9a:92:40:4d:4a:8f:f7:cd:9c:e9:e5:a9:4a:be:
                    a8:26:4a:29:45:ec:69:b8:95:fd:39:7f:aa:ad:a6:
                    77:00:99:1b:f5:6a:ab:da:7c:6a:c7:87:3b:6f:f5:
                    75:76:f6:0a:f5:a5:f5:7e:26:aa:05:a4:41:c6:e9:
                    95:18:ab:f4:c3:c6:0d:b3:6d:a1:85:2f:e9:64:38:
                    fa:1a:91:79:0d:e9:75:4d:df:db:de:2b:0a:6d:3d:
                    ed:37:ef:f0:ef:05:a9:5b:89:18:68:d8:3e:db:55:
                    9e:a4:6c:06:74:36:2d:87:a7:aa:b9:a6:54:34:f7:
                    93:cc:46:6d:8f:4a:14:15:52:7b:12:41:fb:95:bd:
                    70:fd:75:26:d0:72:5f:8a:7a:12:75:33:a1:98:98:
                    97:23:21:9f:ae:13:a4:77:8c:34:50:39:76:72:39:
                    97:3b:e4:5a:45:23:9d:b3:c2:47:09:53:7b:6f:4e:
                    4e:97:03:e8:4f:0b:2b:a0:d1:1d:98:62:36:ab:14:
                    87:a0:45:c5:48:0a:20:a1:9b:d9:a2:ec:14:6d:dd:
                    a6:7d:9b:45:ea:4d:9b:8b:bf:de:4c:30:de:35:29:
                    5d:08:16:fb:ca:d0:2b:35:54:09:69:66:59:87:ee:
                    61:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2F:DE:D3:25:15:01:A9:2C:0B:62:9D:3D:5A:1D:BB:8B:BC:08:1A
            X509v3 Authority Key Identifier:
                keyid:E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234302e302f32342d3234203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:33:e9:26:f4:ae:1e:64:9e:5f:e2:73:42:4f:0d:80:1d:
         68:8d:9e:6b:73:1d:ce:6a:19:65:b1:82:57:2c:38:10:74:66:
         79:50:47:37:d0:61:80:10:a8:73:5a:71:48:ed:7e:e5:8d:6c:
         aa:5e:02:b5:89:07:fe:bd:db:46:83:0c:43:bb:15:91:b8:69:
         76:a5:a5:06:c7:5b:ed:85:98:0c:bb:c0:3e:50:b2:5e:a9:a7:
         9a:d3:3f:51:3e:65:4d:ec:0f:4d:d0:15:f1:cb:e7:d1:8d:5a:
         3c:46:9a:85:23:3e:6a:53:b5:f5:c1:bd:c6:6b:de:fd:0f:fe:
         74:5f:12:f4:58:25:8d:03:f0:e9:c4:97:97:9f:3c:e8:04:8e:
         3b:38:1b:bb:8f:5a:d5:29:de:2b:56:31:0d:56:6b:c5:0d:18:
         f1:00:55:9a:46:00:b2:cc:0d:9c:98:8a:5b:d7:8c:85:1e:33:
         95:df:92:1e:5e:ac:9a:df:bf:a4:c5:fc:9c:f8:02:f8:45:9b:
         15:77:07:cb:79:71:2e:6a:5a:6f:7d:9d:ce:d6:21:85:06:6b:
         57:cb:0a:72:2f:5b:b0:e4:00:df:6a:9a:88:2c:1c:dd:c2:cf:
         c1:28:84:09:12:00:53:ae:e2:65:fb:6d:11:b4:e5:71:ce:46:
         11:76:0c:c9
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUIGxKELm5qNxPFCdxtPT7BivIn/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNBRDU3MUQzMDMzOTMxODM4RjZCRThDRUVGMzgzN0Iw
RkVFRTc1NzAeFw0yMzA2MjkxODM5MDBaFw0yNDA2MjcxODQ0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDlFNUEwQjdBMjEyRTJDN0I0
NUMzNkFEQzUxQzM2OUE5MjQwNEQ0QThGRjdDRDlDRTlFNUE5NEFCRUE4MjY0QTI5
NDVFQzY5Qjg5NUZEMzk3RkFBQURBNjc3MDA5OTFCRjU2QUFCREE3QzZBQzc4NzNC
NkZGNTc1NzZGNjBBRjVBNUY1N0UyNkFBMDVBNDQxQzZFOTk1MThBQkY0QzNDNjBE
QjM2REExODUyRkU5NjQzOEZBMUE5MTc5MERFOTc1NERERkRCREUyQjBBNkQzREVE
MzdFRkYwRUYwNUE5NUI4OTE4NjhEODNFREI1NTlFQTQ2QzA2NzQzNjJEODdBN0FB
QjlBNjU0MzRGNzkzQ0M0NjZEOEY0QTE0MTU1MjdCMTI0MUZCOTVCRDcwRkQ3NTI2
RDA3MjVGOEE3QTEyNzUzM0ExOTg5ODk3MjMyMTlGQUUxM0E0Nzc4QzM0NTAzOTc2
NzIzOTk3M0JFNDVBNDUyMzlEQjNDMjQ3MDk1MzdCNkY0RTRFOTcwM0U4NEYwQjJC
QTBEMTFEOTg2MjM2QUIxNDg3QTA0NUM1NDgwQTIwQTE5QkQ5QTJFQzE0NkREREE2
N0Q5QjQ1RUE0RDlCOEJCRkRFNEMzMERFMzUyOTVEMDgxNkZCQ0FEMDJCMzU1NDA5
Njk2NjU5ODdFRTYxNTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2eWgt6IS4se0XDatxRw2mpJATUqP982c6eWpSr6oJkopRexpuJX9
OX+qraZ3AJkb9Wqr2nxqx4c7b/V1dvYK9aX1fiaqBaRBxumVGKv0w8YNs22hhS/p
ZDj6GpF5Del1Td/b3isKbT3tN+/w7wWpW4kYaNg+21WepGwGdDYth6equaZUNPeT
zEZtj0oUFVJ7EkH7lb1w/XUm0HJfinoSdTOhmJiXIyGfrhOkd4w0UDl2cjmXO+Ra
RSOds8JHCVN7b05OlwPoTwsroNEdmGI2qxSHoEXFSAogoZvZouwUbd2mfZtF6k2b
i7/eTDDeNSldCBb7ytArNVQJaWZZh+5hVwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNkv3tMlFQGpLAtinT1aHbuLvAgaMB8GA1UdIwQYMBaAFOOtVx0wM5MYOPa+jO7z
g3sP7udXMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dpY29ZcmlobWtUMXha
QjZ2RGlpWGgyQWhEZDFRd1A3eGlRaFZBRFMzN1ZlLzAvRTNBRDU3MUQzMDMzOTMx
ODM4RjZCRThDRUVGMzgzN0IwRkVFRTc1Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FM0FENTcxRDMwMzM5MzE4MzhGNkJFOENFRUYzODM3QjBGRUVF
NzU3LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HaWNvWXJpaG1rVDF4WkI2dkRp
aVhoMkFoRGQxUXdQN3hpUWhWQURTMzdWZS8wLzM0MzUyZTMxMzczNjJlMzIzNDMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzkzNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LbDwMA0GCSqGSIb3DQEBCwUAA4IBAQCeITPpJvSuHmSeX+JzQk8NgB1ojZ5rcx3O
ahllsYJXLDgQdGZ5UEc30GGAEKhzWnFI7X7ljWyqXgK1iQf+vdtGgwxDuxWRuGl2
paUGx1vthZgMu8A+ULJeqaea0z9RPmVN7A9N0BXxy+fRjVo8RpqFIz5qU7X1wb3G
a979D/50XxL0WCWNA/DpxJeXnzzoBI47OBu7j1rVKd4rVjENVmvFDRjxAFWaRgCy
zA2cmIpb14yFHjOV35IeXqya37+kxfyc+AL4RZsVdwfLeXEualpvfZ3O1iGFBmtX
ywpyL1uw5ADfapqILBzdws/BKIQJEgBTruJl+20RtOVxzkYRdgzJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org