Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/34352e3138392e3136362e302f32332d3233203d3e20323730323337.roa
File:                     34352e3138392e3136362e302f32332d3233203d3e20323730323337.roa (raw, json)
Hash identifier:          iYGMAaQyHh5IpPO81KDVGxq/vd6Wu/3JfVpkK0nP8l4=
Subject key identifier:   82:EB:F0:78:B0:0F:DA:74:D5:C6:D3:22:DF:9C:B8:AA:24:71:41:A3
Certificate issuer:       /CN=8BD58EAA788072D3207F242B97B2464A28E29772
Certificate serial:       388B1AAAB4E2AAB6DB79A76052EA5CDF25028963
Authority key identifier: 8B:D5:8E:AA:78:80:72:D3:20:7F:24:2B:97:B2:46:4A:28:E2:97:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD58EAA788072D3207F242B97B2464A28E29772.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/34352e3138392e3136362e302f32332d3233203d3e20323730323337.roa
Signing time:             Thu 04 Apr 2024 02:54:44 +0000
ROA not before:           Thu 04 Apr 2024 02:49:44 +0000
ROA not after:            Thu 03 Apr 2025 02:54:44 +0000
asID:                     270237
IP address blocks:        45.189.166.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8b:1a:aa:b4:e2:aa:b6:db:79:a7:60:52:ea:5c:df:25:02:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD58EAA788072D3207F242B97B2464A28E29772
        Validity
            Not Before: Apr  4 02:49:44 2024 GMT
            Not After : Apr  3 02:54:44 2025 GMT
        Subject: CN=82EBF078B00FDA74D5C6D322DF9CB8AA247141A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:89:75:22:bb:26:e0:e7:f5:5a:1a:fb:2c:
                    67:df:44:77:f6:5d:ae:25:e3:b2:10:85:6c:50:22:
                    64:4c:9c:8f:68:26:55:4a:35:93:af:03:ae:e6:fd:
                    ca:1e:68:7f:e2:16:fe:70:6a:7b:ec:f6:8a:2e:62:
                    5a:a1:a4:77:33:6d:4e:5f:d9:5b:a4:da:20:3b:3d:
                    8d:10:ee:88:fb:c9:50:a9:a3:65:ed:6f:fc:ea:88:
                    1c:9f:3c:5a:60:6e:64:a0:17:cf:fe:8b:04:14:e3:
                    94:c0:02:72:c1:73:30:68:30:40:11:c8:27:fd:20:
                    4b:3c:dc:d5:22:89:7c:48:fd:47:85:8e:09:7c:4e:
                    77:a9:88:c0:42:35:4a:29:75:f5:6c:09:ce:65:c2:
                    7c:e1:b7:78:ca:70:05:1b:e0:96:00:a2:28:2f:b2:
                    01:7b:db:73:32:e2:fd:8a:21:d5:83:25:b6:a4:94:
                    a0:d5:8a:2d:be:46:52:37:7f:f5:a9:43:4a:51:c0:
                    40:a5:00:b7:6a:0d:11:4b:2f:5b:cd:27:35:f2:e6:
                    05:8f:59:82:b3:67:02:68:66:c1:b9:fb:29:c4:45:
                    a9:26:36:57:57:6c:63:23:26:7d:c4:9f:24:c9:9d:
                    68:e7:87:70:c8:8d:33:23:e2:e7:9c:e1:3f:08:b9:
                    be:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EB:F0:78:B0:0F:DA:74:D5:C6:D3:22:DF:9C:B8:AA:24:71:41:A3
            X509v3 Authority Key Identifier:
                keyid:8B:D5:8E:AA:78:80:72:D3:20:7F:24:2B:97:B2:46:4A:28:E2:97:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/8BD58EAA788072D3207F242B97B2464A28E29772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD58EAA788072D3207F242B97B2464A28E29772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/34352e3138392e3136362e302f32332d3233203d3e20323730323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:3d:18:ab:d3:66:0d:0e:33:22:71:92:82:48:df:9e:b6:a3:
         ae:f1:00:8f:e8:32:e0:08:cb:e2:ae:6b:2e:3c:74:77:06:ee:
         70:5b:24:4a:08:7b:76:d1:86:f3:04:49:01:97:f9:dd:d1:4d:
         2e:c2:91:b1:5d:aa:99:b4:1e:77:08:f6:5f:8d:74:1b:55:d8:
         cc:70:25:d3:cb:4a:fd:6f:49:61:5b:15:81:d2:5d:c8:8d:26:
         b6:d2:17:81:38:52:00:9b:23:4e:72:dc:fe:17:10:07:a1:5c:
         f4:03:5a:c1:4b:1a:23:26:ad:50:8e:d7:59:3d:d1:4f:0f:01:
         08:d4:58:5f:9a:13:63:c7:dc:b8:8d:0e:11:09:58:50:ec:13:
         20:88:6a:2e:48:eb:09:6f:37:e4:a7:cb:48:8c:e0:55:31:0e:
         28:d4:54:04:e3:69:10:c0:82:75:13:44:91:64:7d:12:2a:b0:
         4c:a3:c0:da:35:57:54:c6:72:f7:32:71:04:1c:5b:ad:eb:a5:
         12:e3:5e:de:e5:7a:3a:78:8f:50:8f:70:8d:45:d4:38:a6:12:
         3e:f0:98:8e:c7:65:23:8d:f5:7a:24:fa:dd:de:8b:ae:26:6b:
         8d:ae:9f:08:36:a6:10:4c:9a:b6:76:68:e1:b0:08:02:5d:25:
         98:7a:2f:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOIsaqrTiqrbbeadgUupc3yUCiWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJENThFQUE3ODgwNzJEMzIwN0YyNDJCOTdCMjQ2NEEy
OEUyOTc3MjAeFw0yNDA0MDQwMjQ5NDRaFw0yNTA0MDMwMjU0NDRaMDMxMTAvBgNV
BAMTKDgyRUJGMDc4QjAwRkRBNzRENUM2RDMyMkRGOUNCOEFBMjQ3MTQxQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzYl1Irsm4Of1Whr7LGffRHf2
Xa4l47IQhWxQImRMnI9oJlVKNZOvA67m/coeaH/iFv5wanvs9oouYlqhpHczbU5f
2Vuk2iA7PY0Q7oj7yVCpo2Xtb/zqiByfPFpgbmSgF8/+iwQU45TAAnLBczBoMEAR
yCf9IEs83NUiiXxI/UeFjgl8TnepiMBCNUopdfVsCc5lwnzht3jKcAUb4JYAoigv
sgF723My4v2KIdWDJbaklKDVii2+RlI3f/WpQ0pRwEClALdqDRFLL1vNJzXy5gWP
WYKzZwJoZsG5+ynERakmNldXbGMjJn3EnyTJnWjnh3DIjTMj4uec4T8Iub5dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUguvweLAP2nTVxtMi35y4qiRxQaMwHwYDVR0j
BBgwFoAUi9WOqniActMgfyQrl7JGSijil3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3MycDV1S0FMWGllaWpKdk5pZDJ5Tlg3R1R0d0NndU5STGhoZENWempx
aUovMS84QkQ1OEVBQTc4ODA3MkQzMjA3RjI0MkI5N0IyNDY0QTI4RTI5NzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCRDU4RUFBNzg4MDcyRDMy
MDdGMjQyQjk3QjI0NjRBMjhFMjk3NzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzMnA1dUtBTFhpZWlqSnZOaWQyeU5YN0dUdHdDZ3VOUkxoaGRDVnpqcWlKLzEv
MzQzNTJlMzEzODM5MmUzMTM2MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzMjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtvaYwDQYJKoZIhvcNAQELBQADggEBAJA9GKvT
Zg0OMyJxkoJI3562o67xAI/oMuAIy+Kuay48dHcG7nBbJEoIe3bRhvMESQGX+d3R
TS7CkbFdqpm0HncI9l+NdBtV2MxwJdPLSv1vSWFbFYHSXciNJrbSF4E4UgCbI05y
3P4XEAehXPQDWsFLGiMmrVCO11k90U8PAQjUWF+aE2PH3LiNDhEJWFDsEyCIai5I
6wlvN+Sny0iM4FUxDijUVATjaRDAgnUTRJFkfRIqsEyjwNo1V1TGcvcycQQcW63r
pRLjXt7lejp4j1CPcI1F1DimEj7wmI7HZSON9Xok+t3ei64ma42unwg2phBMmrZ2
aOGwCAJdJZh6LwA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org