Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/34352e3233382e3230302e302f32342d3234203d3e20323638333630.roa
File:                     34352e3233382e3230302e302f32342d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          ERSwOLXRnutvG0+NRgLJED5eTdWXscULcozojiQ2TeQ=
Subject key identifier:   B2:23:5E:05:39:D4:89:04:C7:DC:05:E8:47:B9:67:2F:EA:F8:CE:5E
Certificate issuer:       /CN=7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6
Certificate serial:       3BCBF8BABBDEC2E0D4059D1B9A73B44405FD04D7
Authority key identifier: 7A:2B:EE:AA:0E:27:59:59:36:9C:F7:B5:5C:1B:20:5A:D0:C3:CE:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/34352e3233382e3230302e302f32342d3234203d3e20323638333630.roa
Signing time:             Wed 03 Apr 2024 21:57:56 +0000
ROA not before:           Wed 03 Apr 2024 21:52:56 +0000
ROA not after:            Wed 02 Apr 2025 21:57:56 +0000
asID:                     268360
IP address blocks:        45.238.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cb:f8:ba:bb:de:c2:e0:d4:05:9d:1b:9a:73:b4:44:05:fd:04:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6
        Validity
            Not Before: Apr  3 21:52:56 2024 GMT
            Not After : Apr  2 21:57:56 2025 GMT
        Subject: CN=B2235E0539D48904C7DC05E847B9672FEAF8CE5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:31:0c:3e:5b:97:3d:4b:30:33:2d:f9:ec:
                    9b:b1:04:50:93:b7:d4:db:04:d6:aa:d7:55:3f:26:
                    33:82:61:bc:b4:d7:5c:6e:53:cf:60:34:d1:a3:5d:
                    ed:2a:2b:56:c9:ac:7c:26:d8:d0:49:af:ab:99:d2:
                    3e:f0:c7:6a:e1:25:de:c4:3d:93:a9:34:e7:ae:35:
                    52:f9:e1:cb:8c:2d:a9:8e:5f:da:3a:04:9b:71:c3:
                    a4:35:0d:29:ef:f3:14:5f:5c:48:39:d1:94:5a:b3:
                    e8:10:64:dc:10:5a:33:7d:00:a8:25:a7:3f:ef:cd:
                    b1:84:f0:a1:ac:78:57:4a:fe:76:1d:47:11:b8:bd:
                    f8:98:f7:02:69:0d:e8:c5:38:15:8a:9a:d1:e9:d5:
                    e5:4a:c6:0b:d8:3d:d0:71:58:e4:fa:94:17:1f:ca:
                    7c:df:81:47:73:3c:b9:57:19:02:88:c4:ab:b0:f0:
                    6f:fe:6a:24:9e:1b:90:02:5a:ec:87:7e:dd:2b:3a:
                    77:1e:b8:dd:98:31:33:2a:e5:4f:67:c8:e1:d6:96:
                    61:21:9e:41:d3:46:96:13:2b:51:3c:96:d1:e0:ee:
                    54:f4:4e:fd:d5:e3:7d:6f:92:e7:c6:a5:ed:c4:c9:
                    42:2b:d7:cf:8f:06:49:b7:e7:df:df:8b:5e:35:bf:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:23:5E:05:39:D4:89:04:C7:DC:05:E8:47:B9:67:2F:EA:F8:CE:5E
            X509v3 Authority Key Identifier:
                keyid:7A:2B:EE:AA:0E:27:59:59:36:9C:F7:B5:5C:1B:20:5A:D0:C3:CE:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/34352e3233382e3230302e302f32342d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:01:3f:c6:3c:12:a4:be:bc:2e:98:17:bc:42:c3:af:a5:
         a1:62:4d:52:cd:4b:d1:e3:aa:5b:32:4a:dd:00:eb:91:09:fe:
         15:d7:d8:ed:3a:89:66:0f:83:c0:82:24:4c:b7:8a:1c:2c:36:
         8b:be:0d:6b:8a:ae:27:ec:64:fd:e0:48:fd:c4:9c:ff:03:1b:
         37:f1:c0:dc:bf:cf:b6:5c:a1:79:09:ee:63:ca:61:1a:45:df:
         76:90:74:85:66:d6:a7:10:cc:a6:ee:4b:1f:5e:03:d7:b0:ce:
         33:8c:e3:b9:56:0c:23:73:d7:a6:b1:0c:0d:bc:78:b2:21:d7:
         45:41:81:16:1e:70:cc:d2:94:4b:9a:6d:3a:9e:83:96:5d:61:
         fb:14:cd:5f:88:2c:3e:68:3c:08:0e:94:e0:90:22:47:d9:7b:
         a2:60:58:a7:fa:04:87:6e:70:f0:55:0d:a3:e1:6a:c8:8b:50:
         e6:ee:df:28:61:fa:93:5b:17:d3:28:ab:1a:58:47:d9:3d:0a:
         d8:b0:34:59:04:c6:b0:e1:0b:01:83:b6:ea:a3:c3:e6:72:96:
         8e:84:6a:98:72:04:d4:08:79:87:54:b9:b8:06:c9:cf:65:ad:
         76:ed:d6:e2:75:f4:db:55:83:87:45:3a:36:b3:4d:ea:b2:d3:
         a0:a2:0f:a1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUO8v4urvewuDUBZ0bmnO0RAX9BNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EyQkVFQUEwRTI3NTk1OTM2OUNGN0I1NUMxQjIwNUFE
MEMzQ0VGNjAeFw0yNDA0MDMyMTUyNTZaFw0yNTA0MDIyMTU3NTZaMDMxMTAvBgNV
BAMTKEIyMjM1RTA1MzlENDg5MDRDN0RDMDVFODQ3Qjk2NzJGRUFGOENFNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCddDEMPluXPUswMy357JuxBFCT
t9TbBNaq11U/JjOCYby011xuU89gNNGjXe0qK1bJrHwm2NBJr6uZ0j7wx2rhJd7E
PZOpNOeuNVL54cuMLamOX9o6BJtxw6Q1DSnv8xRfXEg50ZRas+gQZNwQWjN9AKgl
pz/vzbGE8KGseFdK/nYdRxG4vfiY9wJpDejFOBWKmtHp1eVKxgvYPdBxWOT6lBcf
ynzfgUdzPLlXGQKIxKuw8G/+aiSeG5ACWuyHft0rOnceuN2YMTMq5U9nyOHWlmEh
nkHTRpYTK1E8ltHg7lT0Tv3V431vkufGpe3EyUIr18+PBkm359/fi141v7ExAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUsiNeBTnUiQTH3AXoR7lnL+r4zl4wHwYDVR0j
BBgwFoAUeivuqg4nWVk2nPe1XBsgWtDDzvYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QekRvUHBlVENLcmFGS1RWNms2TUV3NmFnRURpRGRmdVBGSEZwb0pIc0t2
LzIvN0EyQkVFQUEwRTI3NTk1OTM2OUNGN0I1NUMxQjIwNUFEMEMzQ0VGNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QTJCRUVBQTBFMjc1OTU5MzY5
Q0Y3QjU1QzFCMjA1QUQwQzNDRUY2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Q
ekRvUHBlVENLcmFGS1RWNms2TUV3NmFnRURpRGRmdVBGSEZwb0pIc0t2LzIvMzQz
NTJlMzIzMzM4MmUzMjMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt7sgwDQYJKoZIhvcNAQELBQADggEBAC4MAT/GPBKk
vrwumBe8QsOvpaFiTVLNS9HjqlsySt0A65EJ/hXX2O06iWYPg8CCJEy3ihwsNou+
DWuKrifsZP3gSP3EnP8DGzfxwNy/z7ZcoXkJ7mPKYRpF33aQdIVm1qcQzKbuSx9e
A9ewzjOM47lWDCNz16axDA28eLIh10VBgRYecMzSlEuabTqeg5ZdYfsUzV+ILD5o
PAgOlOCQIkfZe6JgWKf6BIducPBVDaPhasiLUObu3yhh+pNbF9MoqxpYR9k9Ctiw
NFkExrDhCwGDtuqjw+Zylo6EaphyBNQIeYdUubgGyc9lrXbt1uJ19NtVg4dFOjaz
Teqy06CiD6E=
-----END CERTIFICATE-----
Generated at Mon Nov 11 20:58:35 2024 by rpki-client on console-fra.rpki-client.org