Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32322e302f32342d3234203d3e20323637353936.roa
File:                     34352e37312e32322e302f32342d3234203d3e20323637353936.roa (raw, json)
Hash identifier:          OFSy0RlOdf3oTryX8NicxIL9DfgTdHFUk/SjfQ2mMow=
Subject key identifier:   E0:9D:22:D5:FF:AC:68:6B:22:F3:AC:1B:BB:24:EA:99:A5:80:CE:1E
Certificate issuer:       /CN=61FAAA30490638B45CAC59240695D24F3F9F5A15
Certificate serial:       15BE6BD74FE24EF9F1550CEEA788048A702D6C
Authority key identifier: 61:FA:AA:30:49:06:38:B4:5C:AC:59:24:06:95:D2:4F:3F:9F:5A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32322e302f32342d3234203d3e20323637353936.roa
Signing time:             Wed 29 Mar 2023 21:40:42 +0000
ROA not before:           Wed 29 Mar 2023 21:35:42 +0000
ROA not after:            Wed 27 Mar 2024 21:40:42 +0000
asID:                     267596
IP address blocks:        45.71.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:be:6b:d7:4f:e2:4e:f9:f1:55:0c:ee:a7:88:04:8a:70:2d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61FAAA30490638B45CAC59240695D24F3F9F5A15
        Validity
            Not Before: Mar 29 21:35:42 2023 GMT
            Not After : Mar 27 21:40:42 2024 GMT
        Subject: CN=E09D22D5FFAC686B22F3AC1BBB24EA99A580CE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:b8:e3:81:21:c9:2c:da:4b:b3:aa:b4:5f:
                    f3:81:a6:8a:0f:67:b8:59:d2:a1:d3:f3:70:65:f3:
                    eb:f3:30:d6:1d:48:5f:38:0d:7b:46:ac:11:4c:73:
                    d4:b7:34:c6:39:85:4f:90:68:15:71:ce:ba:17:be:
                    cb:a6:97:85:a3:db:77:dc:ef:cd:f0:cb:0e:b3:46:
                    1b:dd:07:ab:0c:dc:42:ed:11:2b:5a:61:2d:7d:c7:
                    bc:12:4f:c8:95:42:1d:20:d8:80:d8:88:c7:5e:69:
                    6e:ae:a6:3b:ea:4f:4d:13:b2:ae:05:78:24:bb:d5:
                    25:ae:51:99:85:6c:9c:d5:a8:6c:48:88:fb:f5:2c:
                    1f:0a:86:3c:c0:22:91:9f:43:79:5f:b8:c8:02:4f:
                    d3:4e:3b:31:37:f5:2c:f3:8e:d6:4e:47:ca:da:7b:
                    a6:57:ed:75:7d:79:37:2d:56:79:a4:dd:91:ca:31:
                    83:5b:66:4e:40:dc:ac:19:9f:e6:03:09:b1:36:80:
                    5e:1a:1c:2f:43:7e:f3:08:b7:c8:ab:8d:1e:09:53:
                    8e:a5:3b:72:17:bd:1e:ee:d3:26:d3:79:0a:d4:54:
                    ba:6d:66:a1:19:78:99:29:ac:1c:dc:74:d5:22:82:
                    a9:2e:0d:e8:96:ed:ae:5a:1a:8a:74:41:aa:66:dc:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9D:22:D5:FF:AC:68:6B:22:F3:AC:1B:BB:24:EA:99:A5:80:CE:1E
            X509v3 Authority Key Identifier:
                keyid:61:FA:AA:30:49:06:38:B4:5C:AC:59:24:06:95:D2:4F:3F:9F:5A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32322e302f32342d3234203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:55:42:e7:9c:7f:76:94:cc:53:d5:26:a2:d2:af:ea:be:55:
         1a:67:7a:3c:95:61:da:0a:ed:8e:b1:07:8c:e0:46:64:fa:2e:
         bf:b2:b2:08:62:b3:e7:09:9f:7d:c4:0b:be:45:80:db:8c:8f:
         fe:c9:bf:55:c8:27:23:dc:c5:9b:6a:85:b3:74:42:db:ea:13:
         d0:e4:9c:84:fe:10:66:53:7e:e7:31:1b:cc:4f:eb:58:eb:90:
         7e:1b:83:b9:74:66:a1:55:6a:cd:2c:d0:f9:12:bc:25:77:9f:
         8b:22:d0:82:9c:17:ab:99:f2:90:dd:cd:c0:d2:9b:52:fa:52:
         85:0b:3c:5e:05:fb:e5:b5:f6:c8:36:00:f3:cf:96:fe:b0:9b:
         15:b1:eb:71:d9:27:98:1e:b7:5a:65:c4:5b:04:52:b4:89:60:
         77:bf:b8:92:f4:9f:3e:28:a4:25:eb:63:cf:b2:7c:9a:f7:3a:
         5b:4b:d7:f0:17:d8:10:6f:7b:c6:62:d2:98:78:c4:70:34:81:
         20:78:c2:df:50:4e:e9:07:c5:d2:1c:38:91:14:49:04:05:72:
         f2:82:9f:6a:67:da:80:80:2f:89:34:0b:09:c6:4d:1a:1d:0b:
         dc:fb:17:3a:e0:62:18:f5:a1:a1:39:5c:1a:c4:23:6a:ca:3f:
         bf:75:bc:6e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgITFb5r10/iTvnxVQzup4gEinAtbDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2MUZBQUEzMDQ5MDYzOEI0NUNBQzU5MjQwNjk1RDI0RjNG
OUY1QTE1MB4XDTIzMDMyOTIxMzU0MloXDTI0MDMyNzIxNDA0MlowMzExMC8GA1UE
AxMoRTA5RDIyRDVGRkFDNjg2QjIyRjNBQzFCQkIyNEVBOTlBNTgwQ0UxRTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM/EuOOBIcks2kuzqrRf84Gmig9n
uFnSodPzcGXz6/Mw1h1IXzgNe0asEUxz1Lc0xjmFT5BoFXHOuhe+y6aXhaPbd9zv
zfDLDrNGG90HqwzcQu0RK1phLX3HvBJPyJVCHSDYgNiIx15pbq6mO+pPTROyrgV4
JLvVJa5RmYVsnNWobEiI+/UsHwqGPMAikZ9DeV+4yAJP0047MTf1LPOO1k5Hytp7
plftdX15Ny1WeaTdkcoxg1tmTkDcrBmf5gMJsTaAXhocL0N+8wi3yKuNHglTjqU7
che9Hu7TJtN5CtRUum1moRl4mSmsHNx01SKCqS4N6JbtrloainRBqmbc1YECAwEA
AaOCAk0wggJJMB0GA1UdDgQWBBTgnSLV/6xoayLzrBu7JOqZpYDOHjAfBgNVHSME
GDAWgBRh+qowSQY4tFysWSQGldJPP59aFTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KQTVhR2ZQUzVYaDJEelRiWG9NNGhNNnpGMXVZeTZxZlZYVExVakZVNjdz
ei8wLzYxRkFBQTMwNDkwNjM4QjQ1Q0FDNTkyNDA2OTVEMjRGM0Y5RjVBMTUuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvNjFGQUFBMzA0OTA2MzhCNDVD
QUM1OTI0MDY5NUQyNEYzRjlGNUExNS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGX
BggrBgEFBQcwC4aBinJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SkE1YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3c3ovMC8z
NDM1MmUzNzMxMmUzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzUz
OTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALUcWMA0GCSqGSIb3DQEBCwUAA4IBAQCVVULnnH92lMxT
1Sai0q/qvlUaZ3o8lWHaCu2OsQeM4EZk+i6/srIIYrPnCZ99xAu+RYDbjI/+yb9V
yCcj3MWbaoWzdELb6hPQ5JyE/hBmU37nMRvMT+tY65B+G4O5dGahVWrNLND5Erwl
d5+LItCCnBermfKQ3c3A0ptS+lKFCzxeBfvltfbINgDzz5b+sJsVsetx2SeYHrda
ZcRbBFK0iWB3v7iS9J8+KKQl62PPsnya9zpbS9fwF9gQb3vGYtKYeMRwNIEgeMLf
UE7pB8XSHDiRFEkEBXLygp9qZ9qAgC+JNAsJxk0aHQvc+xc64GIY9aGhOVwaxCNq
yj+/dbxu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org