Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          3UpfABlxj6aZmatStlBLJiPed7UpwnEi1IKvpIbUY9Y=
Subject key identifier:   8F:E6:0C:33:8C:29:93:7E:BE:79:B4:70:29:A5:AE:EF:BA:06:D1:ED
Certificate issuer:       /CN=B776754A2C8B100218B061AA79BE9186F191500D
Certificate serial:       4460B83C8C234DF306C68099042423D5A05FEAA6
Authority key identifier: B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
Signing time:             Sat 11 Nov 2023 20:59:16 +0000
ROA not before:           Sat 11 Nov 2023 20:54:16 +0000
ROA not after:            Sat 09 Nov 2024 20:59:16 +0000
asID:                     267027
IP address blocks:        45.227.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:60:b8:3c:8c:23:4d:f3:06:c6:80:99:04:24:23:d5:a0:5f:ea:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Validity
            Not Before: Nov 11 20:54:16 2023 GMT
            Not After : Nov  9 20:59:16 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:9d:aa:62:64:0f:cf:05:49:40:16:dd:65:
                    53:75:1b:35:26:bf:e6:6c:ec:96:39:d7:55:94:88:
                    d6:b5:44:0d:af:31:00:18:6f:18:ab:b8:5b:19:00:
                    6d:3d:ff:2c:7f:86:84:01:f1:c8:52:38:4a:22:d2:
                    32:48:33:5a:14:47:a9:a6:51:e5:c0:60:61:84:56:
                    e5:38:f0:ae:41:a2:a8:00:70:97:8e:bd:b9:b1:28:
                    22:d4:3a:85:b0:52:1d:a7:2e:57:03:70:8e:aa:dd:
                    a0:66:eb:f4:43:33:88:10:fd:af:fa:6b:83:2e:99:
                    06:3b:0d:a5:af:1a:65:1a:38:46:66:93:bd:84:a7:
                    52:e3:7d:31:c3:49:26:d3:94:86:41:ee:64:16:43:
                    92:11:87:7b:6b:ff:cc:9a:8c:60:eb:d8:3a:97:11:
                    c7:a1:04:2e:0f:eb:52:12:7c:e2:ea:7e:8e:a6:a6:
                    a3:80:e0:ee:0c:c6:2b:8e:e7:1f:d4:fc:6d:45:33:
                    bf:ee:2b:03:e8:02:39:bc:7c:83:99:b2:ec:c3:31:
                    e5:84:89:ca:9f:cf:07:8b:96:6c:2b:cc:80:59:f0:
                    7d:f6:27:46:3e:44:ad:6c:71:2e:06:ba:a0:4b:3b:
                    50:f7:73:1b:83:d3:ee:11:8d:c1:4f:d3:6a:83:53:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E6:0C:33:8C:29:93:7E:BE:79:B4:70:29:A5:AE:EF:BA:06:D1:ED
            X509v3 Authority Key Identifier:
                keyid:B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a3:d2:19:d1:fa:84:7b:70:a9:2e:5c:70:d2:a4:ed:67:6a:
         28:cd:6a:40:e9:59:a6:72:52:9c:47:14:09:b0:46:28:a3:b6:
         09:70:f0:57:38:c6:31:78:29:9c:2f:4c:47:5a:5f:cf:c6:a2:
         58:5f:8c:17:26:b3:05:54:f4:6b:f0:b0:88:c4:c3:e8:a0:27:
         68:ea:65:41:84:37:b2:11:78:57:0a:ab:cd:73:15:a7:8d:43:
         0b:23:a1:24:b8:49:ca:91:37:12:65:08:da:b5:e1:39:29:97:
         2b:f8:12:c8:d4:03:14:92:c4:a9:7f:e6:83:bd:b2:a6:13:73:
         c8:46:e6:92:75:0e:da:86:fc:b5:ef:9b:c2:31:58:c3:be:49:
         db:0d:9e:aa:7b:a1:c9:39:99:1c:a2:d3:8c:89:51:82:69:b8:
         ec:59:e5:2a:df:f2:ee:8d:72:dd:3c:f5:93:e0:be:af:ea:dc:
         57:22:9f:c0:db:aa:95:9c:fd:31:b0:c3:3f:47:d5:f9:e5:12:
         f2:6d:f9:52:4b:64:5a:01:f0:94:44:e7:9c:12:12:2e:eb:83:
         0f:87:2e:3c:c0:19:e6:ab:87:54:3f:99:e7:6b:3c:43:4c:c0:
         23:ba:96:d9:18:5b:01:d6:09:64:8e:0e:da:c5:44:45:1d:68:
         27:52:55:d7
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIURGC4PIwjTfMGxoCZBCQj1aBf6qYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc3Njc1NEEyQzhCMTAwMjE4QjA2MUFBNzlCRTkxODZG
MTkxNTAwRDAeFw0yMzExMTEyMDU0MTZaFw0yNDExMDkyMDU5MTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTI0MjlEQUE2MjY0MEZDRjA1
NDk0MDE2REQ2NTUzNzUxQjM1MjZCRkU2NkNFQzk2MzlENzU1OTQ4OEQ2QjU0NDBE
QUYzMTAwMTg2RjE4QUJCODVCMTkwMDZEM0RGRjJDN0Y4Njg0MDFGMUM4NTIzODRB
MjJEMjMyNDgzMzVBMTQ0N0E5QTY1MUU1QzA2MDYxODQ1NkU1MzhGMEFFNDFBMkE4
MDA3MDk3OEVCREI5QjEyODIyRDQzQTg1QjA1MjFEQTcyRTU3MDM3MDhFQUFEREEw
NjZFQkY0NDMzMzg4MTBGREFGRkE2QjgzMkU5OTA2M0IwREE1QUYxQTY1MUEzODQ2
NjY5M0JEODRBNzUyRTM3RDMxQzM0OTI2RDM5NDg2NDFFRTY0MTY0MzkyMTE4NzdC
NkJGRkNDOUE4QzYwRUJEODNBOTcxMUM3QTEwNDJFMEZFQjUyMTI3Q0UyRUE3RThF
QTZBNkEzODBFMEVFMENDNjJCOEVFNzFGRDRGQzZENDUzM0JGRUUyQjAzRTgwMjM5
QkM3QzgzOTlCMkVDQzMzMUU1ODQ4OUNBOUZDRjA3OEI5NjZDMkJDQzgwNTlGMDdE
RjYyNzQ2M0U0NEFENkM3MTJFMDZCQUEwNEIzQjUwRjc3MzFCODNEM0VFMTE4REMx
NEZEMzZBODM1MzMwNTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4kKdqmJkD88FSUAW3WVTdRs1Jr/mbOyWOddVlIjWtUQNrzEAGG8Y
q7hbGQBtPf8sf4aEAfHIUjhKItIySDNaFEepplHlwGBhhFblOPCuQaKoAHCXjr25
sSgi1DqFsFIdpy5XA3COqt2gZuv0QzOIEP2v+muDLpkGOw2lrxplGjhGZpO9hKdS
430xw0km05SGQe5kFkOSEYd7a//Mmoxg69g6lxHHoQQuD+tSEnzi6n6OpqajgODu
DMYrjucf1PxtRTO/7isD6AI5vHyDmbLswzHlhInKn88Hi5ZsK8yAWfB99idGPkSt
bHEuBrqgSztQ93Mbg9PuEY3BT9Nqg1MwUwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FI/mDDOMKZN+vnm0cCmlru+6BtHtMB8GA1UdIwQYMBaAFLd2dUosixACGLBhqnm+
kYbxkVANMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV1dURacWdMcVlQb3RF
Y2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAvQjc3Njc1NEEyQzhCMTAw
MjE4QjA2MUFBNzlCRTkxODZGMTkxNTAwRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNzc2NzU0QTJDOEIxMDAyMThCMDYxQUE3OUJFOTE4NkYxOTE1
MDBELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81dXVEWnFnTHFZUG90RWNlQnNt
Y1M2U2VNZHdweXFYVnVhaGh2cmFXdEpZei8wLzM0MzUyZTMyMzIzNzJlMzEzNjM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzAzMjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LeOpMA0GCSqGSIb3DQEBCwUAA4IBAQAHo9IZ0fqEe3CpLlxw0qTtZ2oozWpA6Vmm
clKcRxQJsEYoo7YJcPBXOMYxeCmcL0xHWl/PxqJYX4wXJrMFVPRr8LCIxMPooCdo
6mVBhDeyEXhXCqvNcxWnjUMLI6EkuEnKkTcSZQjateE5KZcr+BLI1AMUksSpf+aD
vbKmE3PIRuaSdQ7ahvy175vCMVjDvknbDZ6qe6HJOZkcotOMiVGCabjsWeUq3/Lu
jXLdPPWT4L6v6txXIp/A26qVnP0xsMM/R9X55RLybflSS2RaAfCUROecEhIu64MP
hy48wBnmq4dUP5nnazxDTMAjupbZGFsB1glkjg7axURFHWgnUlXX
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org