Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138302e302f32322d3232203d3e20323636323636.roa
File:                     34352e36352e3138302e302f32322d3232203d3e20323636323636.roa (raw, json)
Hash identifier:          RDKuSfhVVT6QSfoXbZ1jKs1gDXHVOjlrQgvd5SSXHAE=
Subject key identifier:   B7:9D:39:31:3A:59:F0:0B:5E:8B:D5:8E:B4:70:D9:6E:26:89:8A:EB
Certificate issuer:       /CN=CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1
Certificate serial:       6ADC249DE03E17FBE7E156BC1AFF81A09ED2A305
Authority key identifier: CE:3E:8E:6F:88:4C:4D:12:1D:23:7C:D7:FF:88:F7:D4:8A:21:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138302e302f32322d3232203d3e20323636323636.roa
Signing time:             Tue 26 Sep 2023 20:46:54 +0000
ROA not before:           Tue 26 Sep 2023 20:41:54 +0000
ROA not after:            Tue 24 Sep 2024 20:46:54 +0000
asID:                     266266
IP address blocks:        45.65.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:dc:24:9d:e0:3e:17:fb:e7:e1:56:bc:1a:ff:81:a0:9e:d2:a3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1
        Validity
            Not Before: Sep 26 20:41:54 2023 GMT
            Not After : Sep 24 20:46:54 2024 GMT
        Subject: CN=B79D39313A59F00B5E8BD58EB470D96E26898AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:32:5e:94:c4:86:25:1a:55:97:d6:8f:98:
                    dc:30:4b:82:78:36:0b:fc:bf:83:07:d4:ff:a5:ba:
                    82:a7:60:23:7e:71:2e:2a:be:aa:01:0d:e8:e1:87:
                    75:e0:f5:83:9a:a6:bd:9a:c2:0b:07:27:13:e9:b7:
                    65:87:fd:33:aa:b2:e9:a3:37:b2:b1:ae:90:64:c0:
                    eb:82:03:91:7f:a0:9b:59:db:2e:42:4c:09:fa:50:
                    75:0e:d4:f3:99:21:4c:34:80:7a:3a:44:46:b8:4c:
                    49:c3:c8:40:6c:dd:a9:2e:28:30:e4:cb:c2:8b:ae:
                    2e:ff:c0:06:e5:82:4d:0b:00:4a:1e:1b:39:f1:1b:
                    4a:7f:a0:76:6f:7e:59:0f:e2:69:1b:63:9c:23:94:
                    de:8e:e2:1f:39:a7:1f:42:16:69:ad:98:cc:ff:e7:
                    a9:2f:e2:d3:9a:6e:8f:89:b0:ea:15:b6:64:f0:66:
                    65:ea:a1:70:ba:f3:65:ca:27:97:ef:75:b8:ec:6a:
                    f0:87:ee:47:69:4a:90:53:b7:e9:1f:4c:1c:55:9c:
                    eb:70:15:b6:3a:bc:d6:bc:26:d2:f2:0b:f0:16:f9:
                    b8:f0:4e:9a:a4:8c:6f:ea:ca:14:ed:2a:d6:89:af:
                    15:46:6b:2a:8b:26:34:f5:c5:0c:c2:ac:28:4c:2a:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9D:39:31:3A:59:F0:0B:5E:8B:D5:8E:B4:70:D9:6E:26:89:8A:EB
            X509v3 Authority Key Identifier:
                keyid:CE:3E:8E:6F:88:4C:4D:12:1D:23:7C:D7:FF:88:F7:D4:8A:21:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138302e302f32322d3232203d3e20323636323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:86:ca:83:2e:4a:a6:44:53:a2:44:ba:6c:3a:7d:5d:2f:d6:
         25:ec:28:15:ff:ba:6b:49:ae:c2:84:f7:b9:64:b5:d3:73:93:
         9d:3a:54:6b:f7:4f:36:a0:11:73:61:c1:5d:11:a6:91:6a:d3:
         85:eb:4a:78:b5:c6:47:23:cc:52:2a:32:b7:cd:6f:23:a3:7d:
         00:17:7c:ba:67:67:bd:be:99:2b:4b:b7:db:f4:37:a3:1d:4a:
         04:dd:3d:7a:42:cc:fd:ce:dd:9d:2d:78:e5:0a:f2:61:55:62:
         8a:96:b1:6e:3d:c5:5c:13:2c:30:74:9d:58:a2:88:c1:df:4c:
         7f:3d:7b:34:73:eb:27:e1:3c:93:8c:53:1f:4c:20:1d:02:79:
         84:d8:94:5a:b1:ff:6b:02:38:2e:ee:5e:ff:66:bc:f8:db:f0:
         d6:66:2b:b0:4b:92:49:db:f4:5f:94:44:b3:03:a7:ca:98:80:
         c8:a4:b3:8d:b9:37:a5:8f:7b:e2:94:ad:f4:d4:77:d3:18:d6:
         7c:6b:8d:8f:cc:d3:e2:34:d4:5f:3e:b0:1b:8c:ff:9a:71:a5:
         cb:50:eb:b4:07:c4:4d:28:8f:67:5c:90:d9:73:b6:3b:b2:b8:
         6f:63:6b:4f:4b:9c:56:9a:ef:d5:2c:f5:6d:7f:90:40:d6:4d:
         73:0b:7f:ca
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUatwkneA+F/vn4Va8Gv+BoJ7SowUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UzRThFNkY4ODRDNEQxMjFEMjM3Q0Q3RkY4OEY3RDQ4
QTIxNjZGMTAeFw0yMzA5MjYyMDQxNTRaFw0yNDA5MjQyMDQ2NTRaMDMxMTAvBgNV
BAMTKEI3OUQzOTMxM0E1OUYwMEI1RThCRDU4RUI0NzBEOTZFMjY4OThBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxDJelMSGJRpVl9aPmNwwS4J4
Ngv8v4MH1P+luoKnYCN+cS4qvqoBDejhh3Xg9YOapr2awgsHJxPpt2WH/TOqsumj
N7KxrpBkwOuCA5F/oJtZ2y5CTAn6UHUO1POZIUw0gHo6REa4TEnDyEBs3akuKDDk
y8KLri7/wAblgk0LAEoeGznxG0p/oHZvflkP4mkbY5wjlN6O4h85px9CFmmtmMz/
56kv4tOabo+JsOoVtmTwZmXqoXC682XKJ5fvdbjsavCH7kdpSpBTt+kfTBxVnOtw
FbY6vNa8JtLyC/AW+bjwTpqkjG/qyhTtKtaJrxVGayqLJjT1xQzCrChMKmA1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUt505MTpZ8Atei9WOtHDZbiaJiuswHwYDVR0j
BBgwFoAUzj6Ob4hMTRIdI3zX/4j31IohZvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3FjeExHWUZnS2FOSkZuMTFIajI1RTZENmEyeHB5cHBpV212SlI3Snhx
czcvMC9DRTNFOEU2Rjg4NEM0RDEyMUQyMzdDRDdGRjg4RjdENDhBMjE2NkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFM0U4RTZGODg0QzREMTIx
RDIzN0NEN0ZGODhGN0Q0OEEyMTY2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dxY3hMR1lGZ0thTkpGbjExSGoyNUU2RDZhMnhweXBwaVdtdkpSN0p4cXM3LzAv
MzQzNTJlMzYzNTJlMzEzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzIzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUG0MA0GCSqGSIb3DQEBCwUAA4IBAQAnhsqDLkqm
RFOiRLpsOn1dL9Yl7CgV/7prSa7ChPe5ZLXTc5OdOlRr9082oBFzYcFdEaaRatOF
60p4tcZHI8xSKjK3zW8jo30AF3y6Z2e9vpkrS7fb9DejHUoE3T16Qsz9zt2dLXjl
CvJhVWKKlrFuPcVcEywwdJ1YoojB30x/PXs0c+sn4TyTjFMfTCAdAnmE2JRasf9r
Ajgu7l7/Zrz42/DWZiuwS5JJ2/RflESzA6fKmIDIpLONuTelj3vilK301HfTGNZ8
a42PzNPiNNRfPrAbjP+acaXLUOu0B8RNKI9nXJDZc7Y7srhvY2tPS5xWmu/VLPVt
f5BA1k1zC3/K
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org