Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa
File:                     34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa (raw, json)
Hash identifier:          mL1LzK3Q+aQb3hRqUdw8SNfpvfF7XJZBoB9xYpNw1NY=
Subject key identifier:   99:66:19:1A:1F:08:66:A5:D7:58:28:2C:07:9E:7B:A8:79:AA:8D:B5
Certificate issuer:       /CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
Certificate serial:       55457BEA8C72A664034C9DFF2D13B23D7046D968
Authority key identifier: 97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa
Signing time:             Fri 09 Feb 2024 19:00:01 +0000
ROA not before:           Fri 09 Feb 2024 18:55:01 +0000
ROA not after:            Fri 07 Feb 2025 19:00:01 +0000
asID:                     269195
IP address blocks:        45.179.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:45:7b:ea:8c:72:a6:64:03:4c:9d:ff:2d:13:b2:3d:70:46:d9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
        Validity
            Not Before: Feb  9 18:55:01 2024 GMT
            Not After : Feb  7 19:00:01 2025 GMT
        Subject: CN=9966191A1F0866A5D758282C079E7BA879AA8DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:46:ee:f7:ae:3c:0d:d0:7d:81:fc:f3:85:
                    e2:d7:6b:1d:d8:a4:53:b9:45:0f:8c:88:db:c3:53:
                    ef:0b:db:5c:ad:43:ec:ef:65:dc:57:78:a7:e1:0b:
                    7b:eb:f1:f4:c0:1d:2f:9d:31:00:72:bc:db:9f:6e:
                    66:4c:fa:33:cd:6a:45:ba:29:bd:58:4b:ce:9c:6d:
                    ec:11:c6:08:43:ed:ca:93:38:19:8d:11:0b:b5:58:
                    8c:af:e7:de:26:4e:56:44:56:ad:83:ac:10:d8:c3:
                    35:b0:9c:d8:e8:b1:68:b8:bb:59:98:31:af:36:96:
                    ba:55:f8:a2:89:89:a3:e5:7c:c7:13:84:55:4b:de:
                    66:27:a7:76:e3:2b:fd:a7:3d:2a:74:a2:2e:c7:98:
                    88:f2:90:d0:0b:03:32:c4:64:26:24:d7:c6:49:70:
                    63:6c:86:39:d4:fd:23:94:66:ea:d9:1d:07:93:86:
                    e1:ef:37:bc:20:e3:0f:5f:48:c0:dd:c6:28:0a:59:
                    64:18:9e:ae:01:cf:41:f9:9b:01:5c:9b:cc:60:24:
                    30:3d:5c:7e:b8:00:8f:72:95:06:8b:3d:c4:53:a8:
                    c6:e4:11:67:63:c8:d4:6e:bc:e2:60:7a:8b:95:0b:
                    22:0a:01:15:ac:7f:33:b8:12:10:e3:62:a6:bc:89:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:66:19:1A:1F:08:66:A5:D7:58:28:2C:07:9E:7B:A8:79:AA:8D:B5
            X509v3 Authority Key Identifier:
                keyid:97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:bf:b4:fe:64:90:cd:98:6a:1a:6c:e5:ba:55:56:cb:23:0b:
         c6:ff:69:c8:d0:43:70:5a:62:99:60:e3:10:46:70:2e:28:11:
         c7:07:a4:60:b2:c1:13:a4:96:3e:c0:a7:2b:dd:6a:fd:31:12:
         0f:80:ef:0b:4d:7a:dd:d1:82:6d:4e:d3:d4:6d:df:82:04:95:
         76:1d:b3:d8:9f:ce:6f:57:49:22:61:b3:d4:66:de:40:9f:62:
         37:5b:40:0c:16:25:b6:c9:9e:06:b4:72:04:aa:fa:ea:1a:a7:
         94:d8:58:c1:a8:f0:15:fd:1b:28:1f:27:8a:77:b4:e6:16:2c:
         67:98:c1:0d:ac:6c:57:d8:a3:e8:21:1c:6c:62:5e:b0:48:c5:
         47:86:63:92:c9:f4:1a:49:d1:14:c7:c7:3b:ca:1b:54:0c:a0:
         3c:11:bd:3a:df:fd:f6:ac:cb:2a:36:82:24:6b:ff:46:34:89:
         01:ee:53:ff:d7:d5:44:de:e4:01:0a:39:11:92:18:4b:48:ad:
         1e:d1:b8:ef:ce:9f:9a:71:30:30:fa:b9:20:e0:bc:a7:b5:e6:
         06:77:c6:4e:54:c9:e0:39:33:79:8b:62:e7:f4:11:23:56:5d:
         c0:40:c2:ab:02:cd:ec:b4:1d:5d:9a:28:fe:6c:b5:0e:ce:ca:
         14:08:e8:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVUV76oxypmQDTJ3/LROyPXBG2WgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5OUIxNzBDRTA1ODhEREE0NzVDNDJEMEZCNTc2NUFC
NjlBQjY0OTAeFw0yNDAyMDkxODU1MDFaFw0yNTAyMDcxOTAwMDFaMDMxMTAvBgNV
BAMTKDk5NjYxOTFBMUYwODY2QTVENzU4MjgyQzA3OUU3QkE4NzlBQThEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNEbu9648DdB9gfzzheLXax3Y
pFO5RQ+MiNvDU+8L21ytQ+zvZdxXeKfhC3vr8fTAHS+dMQByvNufbmZM+jPNakW6
Kb1YS86cbewRxghD7cqTOBmNEQu1WIyv594mTlZEVq2DrBDYwzWwnNjosWi4u1mY
Ma82lrpV+KKJiaPlfMcThFVL3mYnp3bjK/2nPSp0oi7HmIjykNALAzLEZCYk18ZJ
cGNshjnU/SOUZurZHQeThuHvN7wg4w9fSMDdxigKWWQYnq4Bz0H5mwFcm8xgJDA9
XH64AI9ylQaLPcRTqMbkEWdjyNRuvOJgeouVCyIKARWsfzO4EhDjYqa8ibxxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmWYZGh8IZqXXWCgsB557qHmqjbUwHwYDVR0j
BBgwFoAUl5mxcM4FiN2kdcQtD7V2WraatkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOURBUWQyeTNHZ2FpOFJKRXNMZnRGdHJVYTladkdyeTM5Rk1WWVFQSGtu
TG4vMC85Nzk5QjE3MENFMDU4OEREQTQ3NUM0MkQwRkI1NzY1QUI2OUFCNjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3OTlCMTcwQ0UwNTg4RERB
NDc1QzQyRDBGQjU3NjVBQjY5QUI2NDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlEQVFkMnkzR2dhaThSSkVzTGZ0RnRyVWE5WnZHcnkzOUZNVllRUEhrbkxuLzAv
MzQzNTJlMzEzNzM5MmUzMTM5MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAts78wDQYJKoZIhvcNAQELBQADggEBADi/tP5k
kM2Yahps5bpVVssjC8b/acjQQ3BaYplg4xBGcC4oEccHpGCywROklj7Apyvdav0x
Eg+A7wtNet3Rgm1O09Rt34IElXYds9ifzm9XSSJhs9Rm3kCfYjdbQAwWJbbJnga0
cgSq+uoap5TYWMGo8BX9GygfJ4p3tOYWLGeYwQ2sbFfYo+ghHGxiXrBIxUeGY5LJ
9BpJ0RTHxzvKG1QMoDwRvTrf/fasyyo2giRr/0Y0iQHuU//X1UTe5AEKORGSGEtI
rR7RuO/On5pxMDD6uSDgvKe15gZ3xk5UyeA5M3mLYuf0ESNWXcBAwqsCzey0HV2a
KP5stQ7OyhQI6Iw=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org