Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/0/34352e36352e3232302e302f32322d3234203d3e20323636353339.roa
File:                     34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (raw, json)
Hash identifier:          AtXBQ3b+5Z8YNzEFfeVwB8nlSm22Re5SSYnhWMQCAbg=
Subject key identifier:   00:BD:DF:88:11:76:7B:37:D2:87:32:DE:7F:19:4D:A6:4B:F6:82:E9
Certificate issuer:       /CN=B7EA781400D109998DCFCE31A390705056EBEEAE
Certificate serial:       2FDDE112235BF2A4A7CFCF5D50952C8194B8B2EB
Authority key identifier: B7:EA:78:14:00:D1:09:99:8D:CF:CE:31:A3:90:70:50:56:EB:EE:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EA781400D109998DCFCE31A390705056EBEEAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/0/34352e36352e3232302e302f32322d3234203d3e20323636353339.roa
Signing time:             Wed 16 Nov 2022 14:22:08 +0000
ROA not before:           Wed 16 Nov 2022 14:17:08 +0000
ROA not after:            Wed 15 Nov 2023 14:22:08 +0000
asID:                     266539
IP address blocks:        45.65.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:dd:e1:12:23:5b:f2:a4:a7:cf:cf:5d:50:95:2c:81:94:b8:b2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7EA781400D109998DCFCE31A390705056EBEEAE
        Validity
            Not Before: Nov 16 14:17:08 2022 GMT
            Not After : Nov 15 14:22:08 2023 GMT
        Subject: CN=00BDDF8811767B37D28732DE7F194DA64BF682E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:37:5b:1c:8c:d3:3d:f8:63:73:20:84:22:
                    a5:66:d4:bd:e7:25:27:7c:89:d8:8e:6a:04:e6:1f:
                    41:36:80:e2:83:47:cf:56:af:42:53:eb:0f:4c:ce:
                    b6:23:41:51:2d:f8:8b:ec:34:d7:9a:6b:d0:69:96:
                    7d:84:df:14:ab:9a:ee:f8:9a:e1:01:a2:05:5f:25:
                    4e:35:cf:ce:b2:49:99:8d:6b:c5:94:d0:8e:d2:fd:
                    49:24:07:09:66:98:d2:cc:9d:03:07:d1:17:0e:00:
                    fe:cf:39:dd:8f:ae:c0:13:b6:bb:0d:09:0c:9c:a4:
                    16:5c:51:18:3c:30:5e:83:0f:ce:5c:45:fd:51:6a:
                    81:1a:80:2b:06:83:30:24:4d:f6:0c:17:86:8d:5a:
                    c5:47:6e:8a:30:89:ce:50:4f:07:a2:bb:b6:3a:a7:
                    17:0e:a7:72:3f:75:35:40:e6:28:a9:e0:dd:ea:41:
                    0a:63:02:ed:d7:7e:d1:36:bd:b2:f7:ee:41:23:1d:
                    0b:68:94:7a:59:41:b7:a9:ca:20:98:63:6f:28:a8:
                    c8:c5:3f:6a:c4:82:a9:6a:bf:3c:10:a2:6f:77:ab:
                    b2:dd:00:ed:d3:b8:2b:58:a9:0c:e2:2b:d4:93:65:
                    f5:19:69:6f:7c:79:e7:b7:94:fa:11:2e:57:2c:97:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BD:DF:88:11:76:7B:37:D2:87:32:DE:7F:19:4D:A6:4B:F6:82:E9
            X509v3 Authority Key Identifier:
                keyid:B7:EA:78:14:00:D1:09:99:8D:CF:CE:31:A3:90:70:50:56:EB:EE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/0/B7EA781400D109998DCFCE31A390705056EBEEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EA781400D109998DCFCE31A390705056EBEEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/0/34352e36352e3232302e302f32322d3234203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:ed:28:93:45:3e:eb:dc:f7:27:38:40:bb:53:64:4a:20:14:
         5c:17:a9:01:d0:70:5a:da:e1:0c:f7:d5:09:33:ad:84:46:bc:
         b6:2a:7f:7c:3d:24:62:b4:87:be:ed:50:42:c4:ea:0b:5c:af:
         ad:b8:47:94:53:8d:1a:5f:af:0b:f8:a7:ad:43:8a:c5:6d:34:
         a3:17:60:0d:33:8a:d8:cb:c4:79:7e:be:b6:8b:d9:2f:6a:d9:
         6f:99:76:61:04:7a:4c:48:7e:9c:99:fc:32:ca:66:70:32:ff:
         44:6f:5c:50:55:9d:01:59:eb:cd:38:e8:50:2a:6b:d7:db:7a:
         24:b0:3c:68:38:ac:0d:f7:33:51:ea:af:77:bf:5f:01:53:bd:
         d0:26:a0:21:d5:d0:d5:bb:ef:81:20:28:c9:9e:73:be:f5:f5:
         4b:46:4c:ce:70:de:ef:cf:da:67:e2:a5:2a:be:5d:1b:7d:89:
         1c:fc:ba:18:74:52:92:a1:de:f1:d6:d0:c4:9f:75:5e:f3:6a:
         f8:42:0d:17:89:d0:62:80:96:d5:88:aa:39:f8:af:4c:af:4b:
         d1:a4:15:4c:a7:99:51:48:89:f8:63:e8:3c:5e:cd:b6:0a:53:
         ea:84:0f:8d:49:9a:6d:41:73:7b:32:f1:a6:9a:af:19:30:80:
         83:40:7f:fd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL93hEiNb8qSnz89dUJUsgZS4suswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdFQTc4MTQwMEQxMDk5OThEQ0ZDRTMxQTM5MDcwNTA1
NkVCRUVBRTAeFw0yMjExMTYxNDE3MDhaFw0yMzExMTUxNDIyMDhaMDMxMTAvBgNV
BAMTKDAwQkRERjg4MTE3NjdCMzdEMjg3MzJERTdGMTk0REE2NEJGNjgyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJjdbHIzTPfhjcyCEIqVm1L3n
JSd8idiOagTmH0E2gOKDR89Wr0JT6w9MzrYjQVEt+IvsNNeaa9Bpln2E3xSrmu74
muEBogVfJU41z86ySZmNa8WU0I7S/UkkBwlmmNLMnQMH0RcOAP7POd2PrsATtrsN
CQycpBZcURg8MF6DD85cRf1RaoEagCsGgzAkTfYMF4aNWsVHboowic5QTweiu7Y6
pxcOp3I/dTVA5iip4N3qQQpjAu3XftE2vbL37kEjHQtolHpZQbepyiCYY28oqMjF
P2rEgqlqvzwQom93q7LdAO3TuCtYqQziK9STZfUZaW98eee3lPoRLlcslxcpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAL3fiBF2ezfShzLefxlNpkv2gukwHwYDVR0j
BBgwFoAUt+p4FADRCZmNz84xo5BwUFbr7q4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1mSmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYy
blovMC9CN0VBNzgxNDAwRDEwOTk5OERDRkNFMzFBMzkwNzA1MDU2RUJFRUFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3RUE3ODE0MDBEMTA5OTk4
RENGQ0UzMUEzOTA3MDUwNTZFQkVFQUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htZkppVTh1UnZqbzVpSllRcFJ4SzFlWjZrNHh4SjVXMnNRTUY4MUhmMm5aLzAv
MzQzNTJlMzYzNTJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzUzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUHcMA0GCSqGSIb3DQEBCwUAA4IBAQBz7SiTRT7r
3PcnOEC7U2RKIBRcF6kB0HBa2uEM99UJM62ERry2Kn98PSRitIe+7VBCxOoLXK+t
uEeUU40aX68L+KetQ4rFbTSjF2ANM4rYy8R5fr62i9kvatlvmXZhBHpMSH6cmfwy
ymZwMv9Eb1xQVZ0BWevNOOhQKmvX23oksDxoOKwN9zNR6q93v18BU73QJqAh1dDV
u++BICjJnnO+9fVLRkzOcN7vz9pn4qUqvl0bfYkc/LoYdFKSod7x1tDEn3Ve82r4
Qg0XidBigJbViKo5+K9Mr0vRpBVMp5lRSIn4Y+g8Xs22ClPqhA+NSZptQXN7MvGm
mq8ZMICDQH/9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org