Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3137392e3234302e302e302f31342d3134203d3e203232303835.roa
File:                     3137392e3234302e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          sZ5cUvWhwNXRhFFpOz+DmBauAGPeq+oJzagsCR+BAf0=
Subject key identifier:   79:70:5F:75:A6:8B:37:D4:D3:0C:86:7B:62:BB:14:D7:CE:22:BE:F6
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       61F76093F01BF6C49173BB7ED99B0F01BF24A7EF
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3137392e3234302e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 14 Feb 2024 20:00:00 +0000
ROA not before:           Wed 14 Feb 2024 19:55:00 +0000
ROA not after:            Wed 12 Feb 2025 20:00:00 +0000
asID:                     22085
IP address blocks:        179.240.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f7:60:93:f0:1b:f6:c4:91:73:bb:7e:d9:9b:0f:01:bf:24:a7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Feb 14 19:55:00 2024 GMT
            Not After : Feb 12 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:6a:3d:89:4a:4f:53:51:39:cb:70:38:fb:
                    2e:26:23:19:13:59:0c:16:9e:e7:e6:aa:27:4c:e6:
                    af:34:8c:5e:5a:aa:86:2d:4a:88:90:f6:71:f7:5d:
                    77:24:ea:a3:a6:48:29:25:15:fa:04:3c:d7:12:ec:
                    12:c6:4f:79:67:45:bd:09:20:1d:b4:23:f0:42:32:
                    9f:f7:92:91:26:5d:f2:20:c2:36:51:a1:3a:b3:78:
                    44:cb:2e:9f:17:e1:03:61:30:16:7c:60:e3:8a:2e:
                    e6:ce:35:62:b2:11:2c:24:a8:5a:00:43:d3:b0:bf:
                    73:33:65:ca:6e:ca:2c:ac:a0:39:33:fc:96:81:29:
                    53:5c:bc:fc:36:f0:3d:7c:d2:1f:95:b1:a7:81:40:
                    a5:aa:bb:09:da:60:57:e1:31:5c:ee:8e:3c:dc:58:
                    49:b5:8c:4b:37:88:be:be:73:88:ae:0c:59:2c:af:
                    49:77:29:e8:7a:41:37:72:34:f2:0f:f6:b1:00:4e:
                    5e:21:9d:34:fa:bd:12:02:2f:ff:0b:fb:e9:29:2e:
                    d1:e9:29:7c:d6:a4:1a:fd:31:58:25:7d:0f:e7:cd:
                    96:ad:e0:15:02:c5:7a:1f:6d:63:c6:bc:8d:9e:ed:
                    95:9c:b2:16:f7:91:f9:16:a6:0b:71:3b:c2:14:1b:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:70:5F:75:A6:8B:37:D4:D3:0C:86:7B:62:BB:14:D7:CE:22:BE:F6
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3137392e3234302e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.240.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         88:bd:0b:ab:0d:44:1c:2f:09:48:a6:e6:a0:0c:df:aa:63:b3:
         71:44:be:4f:14:eb:3a:0f:72:29:a8:e1:d2:df:f3:f4:cb:fd:
         86:a6:c5:29:44:50:9d:94:06:61:07:5d:ff:7a:ea:87:05:a5:
         42:6c:5e:b1:cf:f9:5f:39:90:e8:e1:8d:cb:87:9e:80:94:66:
         b1:07:b1:f1:a2:e1:5b:76:fd:13:98:12:98:c9:2c:d2:43:85:
         e6:64:10:6d:c9:96:82:f6:d0:30:ba:43:54:8f:40:76:43:3e:
         23:86:ab:0d:77:fa:1c:5b:91:48:b9:79:b5:13:71:5b:88:3c:
         80:44:99:62:96:4e:dd:1f:b4:5f:f1:4e:8f:d3:f5:95:25:8a:
         3f:e9:9d:95:03:30:cc:7b:6f:96:ef:e1:e3:13:13:77:f7:88:
         04:93:bd:2a:20:04:2b:83:a6:a9:a5:d7:62:36:a9:3d:04:6a:
         84:29:26:7a:ea:84:14:27:77:83:b6:3f:ac:a7:76:c1:c4:ed:
         96:92:58:13:aa:a5:31:a7:0f:da:9d:f1:78:a7:0a:db:bb:12:
         a1:4b:09:c6:9f:56:e7:a2:8e:7b:8c:78:4a:5b:c5:28:4d:c4:
         fa:05:f6:8d:12:74:70:7e:30:2d:16:9f:6b:c2:6e:6f:9c:96:
         9e:fc:b8:80
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUYfdgk/Ab9sSRc7t+2ZsPAb8kp+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIxNUQwQTI5QkEwMDQxRUI4ODg1OUUxNUE3MDZDOTc4
QjY3NTQ2OTAeFw0yNDAyMTQxOTU1MDBaFw0yNTAyMTIyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDkzMjZBM0Q4OTRBNEY1MzUx
MzlDQjcwMzhGQjJFMjYyMzE5MTM1OTBDMTY5RUU3RTZBQTI3NENFNkFGMzQ4QzVF
NUFBQTg2MkQ0QTg4OTBGNjcxRjc1RDc3MjRFQUEzQTY0ODI5MjUxNUZBMDQzQ0Q3
MTJFQzEyQzY0Rjc5Njc0NUJEMDkyMDFEQjQyM0YwNDIzMjlGRjc5MjkxMjY1REYy
MjBDMjM2NTFBMTNBQjM3ODQ0Q0IyRTlGMTdFMTAzNjEzMDE2N0M2MEUzOEEyRUU2
Q0UzNTYyQjIxMTJDMjRBODVBMDA0M0QzQjBCRjczMzM2NUNBNkVDQTJDQUNBMDM5
MzNGQzk2ODEyOTUzNUNCQ0ZDMzZGMDNEN0NEMjFGOTVCMUE3ODE0MEE1QUFCQjA5
REE2MDU3RTEzMTVDRUU4RTNDREM1ODQ5QjU4QzRCMzc4OEJFQkU3Mzg4QUUwQzU5
MkNBRjQ5NzcyOUU4N0E0MTM3NzIzNEYyMEZGNkIxMDA0RTVFMjE5RDM0RkFCRDEy
MDIyRkZGMEJGQkU5MjkyRUQxRTkyOTdDRDZBNDFBRkQzMTU4MjU3RDBGRTdDRDk2
QURFMDE1MDJDNTdBMUY2RDYzQzZCQzhEOUVFRDk1OUNCMjE2Rjc5MUY5MTZBNjBC
NzEzQkMyMTQxQjA4MjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2TJqPYlKT1NROctwOPsuJiMZE1kMFp7n5qonTOavNIxeWqqGLUqI
kPZx9113JOqjpkgpJRX6BDzXEuwSxk95Z0W9CSAdtCPwQjKf95KRJl3yIMI2UaE6
s3hEyy6fF+EDYTAWfGDjii7mzjVishEsJKhaAEPTsL9zM2XKbsosrKA5M/yWgSlT
XLz8NvA9fNIflbGngUClqrsJ2mBX4TFc7o483FhJtYxLN4i+vnOIrgxZLK9Jdyno
ekE3cjTyD/axAE5eIZ00+r0SAi//C/vpKS7R6Sl81qQa/TFYJX0P582WreAVAsV6
H21jxryNnu2VnLIW95H5FqYLcTvCFBsIIQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FHlwX3WmizfU0wyGe2K7FNfOIr72MB8GA1UdIwQYMBaAFNIV0KKboAQeuIhZ4Vpw
bJeLZ1RpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzAvRDIxNUQwQTI5QkEwMDQx
RUI4ODg1OUUxNUE3MDZDOTc4QjY3NTQ2OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMjE1RDBBMjlCQTAwNDFFQjg4ODU5RTE1QTcwNkM5NzhCNjc1
NDY5LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IRllxY3JMVnYxSkpXenZVRmdS
OHFaenBpZExRVHRrQmtYWnM2Z2VRZHVpZS8wLzMxMzczOTJlMzIzNDMwMmUzMDJl
MzAyZjMxMzQyZDMxMzQyMDNkM2UyMDMyMzIzMDM4MzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwKz8DAN
BgkqhkiG9w0BAQsFAAOCAQEAiL0Lqw1EHC8JSKbmoAzfqmOzcUS+TxTrOg9yKajh
0t/z9Mv9hqbFKURQnZQGYQdd/3rqhwWlQmxesc/5XzmQ6OGNy4eegJRmsQex8aLh
W3b9E5gSmMks0kOF5mQQbcmWgvbQMLpDVI9AdkM+I4arDXf6HFuRSLl5tRNxW4g8
gESZYpZO3R+0X/FOj9P1lSWKP+mdlQMwzHtvlu/h4xMTd/eIBJO9KiAEK4OmqaXX
YjapPQRqhCkmeuqEFCd3g7Y/rKd2wcTtlpJYE6qlMacP2p3xeKcK27sSoUsJxp9W
56KOe4x4SlvFKE3E+gX2jRJ0cH4wLRafa8Jub5yWnvy4gA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org