Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231362e302f32342d3234203d3e203532353830.roa
File:                     34352e3137382e3231362e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          FhPpwPxN12uNii5N8MCFS/8hjAtAHsxCcpGvHd9Npes=
Subject key identifier:   AE:04:22:93:9B:09:FD:FD:A9:7B:61:98:3B:39:0C:1F:29:D7:14:09
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       4761827BF5EACF875902E24602E9E8D25A9697D8
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231362e302f32342d3234203d3e203532353830.roa
Signing time:             Mon 23 Oct 2023 20:04:32 +0000
ROA not before:           Mon 23 Oct 2023 19:59:32 +0000
ROA not after:            Mon 21 Oct 2024 20:04:32 +0000
asID:                     52580
IP address blocks:        45.178.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:61:82:7b:f5:ea:cf:87:59:02:e2:46:02:e9:e8:d2:5a:96:97:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Oct 23 19:59:32 2023 GMT
            Not After : Oct 21 20:04:32 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:cb:83:24:26:5c:95:b9:8a:e0:4d:6f:cd:
                    34:7c:d2:d3:4c:fe:e7:b3:23:e9:07:07:9b:08:24:
                    e6:c3:88:90:6c:59:0c:46:35:66:c1:3d:68:c0:76:
                    2b:11:6d:42:fb:dc:64:ef:67:4e:91:c3:47:ff:8d:
                    99:0c:25:32:b3:d4:ec:cc:9e:6c:72:c2:d5:0e:75:
                    56:a3:01:27:53:f0:f5:d1:21:89:62:75:ae:a9:37:
                    40:a9:cc:47:fe:de:39:86:d4:2f:c6:11:92:52:0a:
                    23:73:00:a9:7d:c5:ec:df:aa:14:f1:98:6c:08:7d:
                    9f:0f:5e:26:0a:03:71:6a:3b:7a:fa:cd:83:97:7e:
                    c7:ca:0f:5c:51:d9:61:72:95:1d:79:8b:ac:d2:fd:
                    d4:08:bd:df:28:9f:41:50:b5:33:f6:2d:a5:ad:ed:
                    51:2f:e8:cf:bd:a8:b8:49:50:4e:28:47:88:47:8e:
                    a6:63:83:01:a9:5a:c9:34:d1:32:33:95:84:23:88:
                    f1:e9:7f:27:c7:c6:13:6d:34:30:1a:2f:00:97:30:
                    71:9d:f5:7c:17:a7:fd:25:b7:92:ac:bf:1b:7d:6d:
                    be:67:43:49:c7:86:87:e2:7e:e3:51:a5:66:c1:87:
                    4f:76:e3:46:91:97:46:b9:90:ec:ce:4e:c2:0c:c1:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:04:22:93:9B:09:FD:FD:A9:7B:61:98:3B:39:0C:1F:29:D7:14:09
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231362e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:94:c8:9e:28:4c:b0:a1:34:6e:1d:6c:44:1c:37:62:7a:e8:
         00:f3:00:93:58:34:09:f7:34:88:5e:b0:84:30:25:83:68:56:
         06:06:a5:94:2f:f6:b6:28:4a:b3:fd:a1:f9:72:58:f5:b6:9b:
         dd:49:99:54:55:ef:d0:4e:22:b6:fd:10:58:ba:35:b8:cd:2c:
         bc:6b:85:80:00:32:88:b1:8f:40:73:05:f2:5f:cd:fb:70:a7:
         ad:80:e8:75:93:0c:45:f5:0e:1e:73:e6:34:41:3b:bf:29:f1:
         f1:5b:46:45:93:19:49:7b:06:be:41:f4:06:36:5c:58:3c:a8:
         83:e7:30:df:9e:56:9f:11:fd:d2:74:2b:c8:99:81:9b:d0:4b:
         b3:f9:96:dc:c2:e2:13:95:cc:9c:93:9a:2a:06:56:d4:74:16:
         c6:f6:99:86:f2:bb:e6:d8:63:32:37:45:56:73:43:96:ba:c9:
         ba:8b:ec:18:78:a6:b8:03:02:c1:44:7f:d1:d6:08:f6:b7:75:
         d3:f1:2b:09:2d:71:16:16:54:74:85:ff:d4:42:80:b5:51:71:
         ff:f5:a5:3c:74:81:8b:e8:dc:c2:8e:94:1d:10:df:c2:80:87:
         73:6a:3b:2e:29:10:7d:de:99:cd:cf:60:1f:b5:f8:e6:a0:b6:
         60:42:17:a1
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUR2GCe/Xqz4dZAuJGAuno0lqWl9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGQzExMzU1MjdBRjk2NDVBNzNDOUFFMDI4MkFFNzdB
REM5RTI1QzAeFw0yMzEwMjMxOTU5MzJaFw0yNDEwMjEyMDA0MzJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc5RENCODMyNDI2NUM5NUI5
OEFFMDRENkZDRDM0N0NEMkQzNENGRUU3QjMyM0U5MDcwNzlCMDgyNEU2QzM4ODkw
NkM1OTBDNDYzNTY2QzEzRDY4QzA3NjJCMTE2RDQyRkJEQzY0RUY2NzRFOTFDMzQ3
RkY4RDk5MEMyNTMyQjNENEVDQ0M5RTZDNzJDMkQ1MEU3NTU2QTMwMTI3NTNGMEY1
RDEyMTg5NjI3NUFFQTkzNzQwQTlDQzQ3RkVERTM5ODZENDJGQzYxMTkyNTIwQTIz
NzMwMEE5N0RDNUVDREZBQTE0RjE5ODZDMDg3RDlGMEY1RTI2MEEwMzcxNkEzQjdB
RkFDRDgzOTc3RUM3Q0EwRjVDNTFEOTYxNzI5NTFENzk4QkFDRDJGREQ0MDhCRERG
Mjg5RjQxNTBCNTMzRjYyREE1QURFRDUxMkZFOENGQkRBOEI4NDk1MDRFMjg0Nzg4
NDc4RUE2NjM4MzAxQTk1QUM5MzREMTMyMzM5NTg0MjM4OEYxRTk3RjI3QzdDNjEz
NkQzNDMwMUEyRjAwOTczMDcxOURGNTdDMTdBN0ZEMjVCNzkyQUNCRjFCN0Q2REJF
Njc0MzQ5Qzc4Njg3RTI3RUUzNTFBNTY2QzE4NzRGNzZFMzQ2OTE5NzQ2Qjk5MEVD
Q0U0RUMyMENDMUIyMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA153LgyQmXJW5iuBNb800fNLTTP7nsyPpBwebCCTmw4iQbFkMRjVm
wT1owHYrEW1C+9xk72dOkcNH/42ZDCUys9TszJ5scsLVDnVWowEnU/D10SGJYnWu
qTdAqcxH/t45htQvxhGSUgojcwCpfcXs36oU8ZhsCH2fD14mCgNxajt6+s2Dl37H
yg9cUdlhcpUdeYus0v3UCL3fKJ9BULUz9i2lre1RL+jPvai4SVBOKEeIR46mY4MB
qVrJNNEyM5WEI4jx6X8nx8YTbTQwGi8AlzBxnfV8F6f9JbeSrL8bfW2+Z0NJx4aH
4n7jUaVmwYdPduNGkZdGuZDszk7CDMGyHwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FK4EIpObCf39qXthmDs5DB8p1xQJMB8GA1UdIwQYMBaAFOL8ETVSevlkWnPJrgKC
rnetyeJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwVDhqaUJXbXlOM1J4
bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvRTJGQzExMzU1MjdBRjk2
NDVBNzNDOUFFMDI4MkFFNzdBREM5RTI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkZDMTEzNTUyN0FGOTY0NUE3M0M5QUUwMjgyQUU3N0FEQzlF
MjVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcFQ4amlCV215TjNSeG5qR29Q
Y1lHcFZSd3VWRjNkTVZ3UmV2M0ZOenRpMS8wLzM0MzUyZTMxMzczODJlMzIzMTM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM1MzgzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2y
2DANBgkqhkiG9w0BAQsFAAOCAQEAOJTInihMsKE0bh1sRBw3YnroAPMAk1g0Cfc0
iF6whDAlg2hWBgallC/2tihKs/2h+XJY9bab3UmZVFXv0E4itv0QWLo1uM0svGuF
gAAyiLGPQHMF8l/N+3CnrYDodZMMRfUOHnPmNEE7vynx8VtGRZMZSXsGvkH0BjZc
WDyog+cw355WnxH90nQryJmBm9BLs/mW3MLiE5XMnJOaKgZW1HQWxvaZhvK75thj
MjdFVnNDlrrJuovsGHimuAMCwUR/0dYI9rd10/ErCS1xFhZUdIX/1EKAtVFx//Wl
PHSBi+jcwo6UHRDfwoCHc2o7LikQfd6Zzc9gH7X45qC2YEIXoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org