Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e31302e302f32332d3233203d3e20323638333435.roa
File:                     34352e3233392e31302e302f32332d3233203d3e20323638333435.roa (raw, json)
Hash identifier:          cfYLTpb9B1iA40Lkbsbz5Ommptjx5iD5QEyY0VZvkiI=
Subject key identifier:   C3:C2:66:F3:26:9C:91:D9:32:35:7C:5C:98:F3:56:9A:19:A2:22:BB
Certificate issuer:       /CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
Certificate serial:       3A60FD567BA28C88534AE14E9068A97B454DC70B
Authority key identifier: C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e31302e302f32332d3233203d3e20323638333435.roa
Signing time:             Tue 26 Apr 2022 14:21:06 +0000
ROA not before:           Tue 26 Apr 2022 14:16:06 +0000
ROA not after:            Tue 25 Apr 2023 14:21:06 +0000
asID:                     268345
IP address blocks:        45.239.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:60:fd:56:7b:a2:8c:88:53:4a:e1:4e:90:68:a9:7b:45:4d:c7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
        Validity
            Not Before: Apr 26 14:16:06 2022 GMT
            Not After : Apr 25 14:21:06 2023 GMT
        Subject: CN=C3C266F3269C91D932357C5C98F3569A19A222BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:13:45:bd:78:79:05:96:07:8c:14:da:9d:
                    a6:9f:aa:83:ab:87:e8:9a:f8:bc:6a:f5:a9:fe:13:
                    fd:1a:26:c4:9c:1c:cd:3a:71:c1:38:03:5f:ff:c6:
                    c4:a4:4d:e0:0c:19:e5:52:e3:2d:b7:ac:f9:85:97:
                    b2:eb:46:71:8c:5f:68:fc:84:80:f2:bd:f9:43:7f:
                    80:9a:ac:5c:c6:a7:91:6b:df:c3:c6:54:79:16:eb:
                    89:71:40:68:04:05:da:5e:99:b1:07:06:e2:75:aa:
                    12:a2:4a:b8:6a:8c:a8:93:9c:9d:9c:4d:04:4b:a6:
                    7d:1f:5a:58:47:6c:89:90:a8:bc:74:d5:d7:25:46:
                    c0:cb:7c:70:24:b1:40:df:d7:15:1c:b2:6d:bb:7a:
                    d6:aa:55:42:ec:2c:0f:7f:ba:12:76:8c:e0:42:27:
                    11:e1:d4:cc:cc:35:03:90:b7:c1:40:96:e3:b4:a2:
                    39:43:57:59:13:7e:2d:49:ea:11:c6:fb:89:fe:65:
                    55:b9:81:54:82:aa:d5:47:4d:55:14:03:ed:69:c5:
                    21:ed:21:d7:de:36:91:74:34:38:90:22:53:1c:fa:
                    b7:5b:42:07:e3:07:75:4e:ea:f8:32:86:ee:e1:81:
                    48:53:bd:8b:ab:d7:fc:ed:ef:52:36:fc:4f:36:3d:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C2:66:F3:26:9C:91:D9:32:35:7C:5C:98:F3:56:9A:19:A2:22:BB
            X509v3 Authority Key Identifier:
                keyid:C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e31302e302f32332d3233203d3e20323638333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:2d:55:3f:11:98:02:d8:7f:2e:eb:31:71:0e:a0:3e:83:8f:
         2d:15:a0:ec:94:01:92:21:4e:a4:40:c8:22:12:9e:8d:06:32:
         e1:8b:06:eb:47:f4:7f:9a:49:7b:9a:8d:60:ba:ac:f4:93:78:
         c9:c5:a1:d8:d1:4b:70:f1:55:e8:a7:2e:81:87:88:39:85:73:
         21:89:35:a9:83:52:1b:17:54:4c:c9:8a:47:af:f8:21:f9:80:
         42:ab:5e:c4:49:1b:b7:e7:46:05:a7:9d:ab:ea:5d:a0:5f:c2:
         29:ac:9c:56:e0:f1:2b:4a:62:a2:6d:88:75:24:a4:53:2a:28:
         31:17:96:68:cf:3e:d3:03:6b:78:fd:d8:6e:6a:0d:7e:09:35:
         f5:7e:b0:3e:af:2a:88:13:e6:b7:c7:d9:64:40:05:9b:84:44:
         c3:e1:8f:23:9f:4a:fa:77:8d:fa:78:29:e4:ff:ee:47:fc:62:
         ed:6b:5d:c5:a8:51:62:1e:89:7c:ac:c1:be:48:8a:a0:df:e3:
         a0:38:1b:65:5a:7f:a4:b8:36:8c:4f:e7:4e:f9:eb:ae:fb:89:
         bd:95:e2:e8:6e:90:20:c3:36:d4:08:3d:a7:c2:f3:85:c4:e3:
         ad:86:a1:f5:4d:0c:19:88:1b:c2:d7:8b:0a:2a:db:be:ed:cf:
         5b:9e:7a:0d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOmD9VnuijIhTSuFOkGipe0VNxwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYwNjYxMjI2MjBFOUUxNjYxRUY4QjkwODIzQUY2RDE2
Q0Q3REE5ODAeFw0yMjA0MjYxNDE2MDZaFw0yMzA0MjUxNDIxMDZaMDMxMTAvBgNV
BAMTKEMzQzI2NkYzMjY5QzkxRDkzMjM1N0M1Qzk4RjM1NjlBMTlBMjIyQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQxNFvXh5BZYHjBTanaafqoOr
h+ia+Lxq9an+E/0aJsScHM06ccE4A1//xsSkTeAMGeVS4y23rPmFl7LrRnGMX2j8
hIDyvflDf4CarFzGp5Fr38PGVHkW64lxQGgEBdpembEHBuJ1qhKiSrhqjKiTnJ2c
TQRLpn0fWlhHbImQqLx01dclRsDLfHAksUDf1xUcsm27etaqVULsLA9/uhJ2jOBC
JxHh1MzMNQOQt8FAluO0ojlDV1kTfi1J6hHG+4n+ZVW5gVSCqtVHTVUUA+1pxSHt
IdfeNpF0NDiQIlMc+rdbQgfjB3VO6vgyhu7hgUhTvYur1/zt71I2/E82PRERAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUw8Jm8yackdkyNXxcmPNWmhmiIrswHwYDVR0j
BBgwFoAUxgZhImIOnhZh74uQgjr20WzX2pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFprUVVxQ2RVREhoUnFKR1hzSlB2djJpMlFhejZ5TVVLQ2gzVGNXZzlL
RTkvMC9DNjA2NjEyMjYyMEU5RTE2NjFFRjhCOTA4MjNBRjZEMTZDRDdEQTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2MDY2MTIyNjIwRTlFMTY2
MUVGOEI5MDgyM0FGNkQxNkNEN0RBOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0haa1FVcUNkVURIaFJxSkdYc0pQdnYyaTJRYXo2eU1VS0NoM1RjV2c5S0U5LzAv
MzQzNTJlMzIzMzM5MmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzMzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLe8KMA0GCSqGSIb3DQEBCwUAA4IBAQBPLVU/EZgC
2H8u6zFxDqA+g48tFaDslAGSIU6kQMgiEp6NBjLhiwbrR/R/mkl7mo1guqz0k3jJ
xaHY0Utw8VXopy6Bh4g5hXMhiTWpg1IbF1RMyYpHr/gh+YBCq17ESRu350YFp52r
6l2gX8IprJxW4PErSmKibYh1JKRTKigxF5Zozz7TA2t4/dhuag1+CTX1frA+ryqI
E+a3x9lkQAWbhETD4Y8jn0r6d436eCnk/+5H/GLta13FqFFiHol8rMG+SIqg3+Og
OBtlWn+kuDaMT+dO+euu+4m9leLobpAgwzbUCD2nwvOFxOOthqH1TQwZiBvC14sK
Ktu+7c9bnnoN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org