Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37322e302f32332d3233203d3e203631353931.roa
File:                     34352e3233372e37322e302f32332d3233203d3e203631353931.roa (raw, json)
Hash identifier:          UvY2khgqE3VdmVRT9H+l2wap/2isQM7rxwutPv7O2CQ=
Subject key identifier:   73:EE:0F:09:8A:CA:E2:FB:66:27:57:08:5D:97:0D:B6:8D:6A:14:10
Certificate issuer:       /CN=177534573015FFF667FEFF6833F132D1839610DB
Certificate serial:       661DB98F76F8DD6A89E566E46EB3E76627F2B507
Authority key identifier: 17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37322e302f32332d3233203d3e203631353931.roa
Signing time:             Sun 26 Nov 2023 19:00:00 +0000
ROA not before:           Sun 26 Nov 2023 18:55:00 +0000
ROA not after:            Sun 24 Nov 2024 19:00:00 +0000
asID:                     61591
IP address blocks:        45.237.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1d:b9:8f:76:f8:dd:6a:89:e5:66:e4:6e:b3:e7:66:27:f2:b5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177534573015FFF667FEFF6833F132D1839610DB
        Validity
            Not Before: Nov 26 18:55:00 2023 GMT
            Not After : Nov 24 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:06:1b:b1:50:ca:20:f0:a1:ce:0d:ba:dc:
                    c8:a5:ed:9e:6c:07:dc:b4:81:30:07:bc:55:cd:ae:
                    0c:96:2a:a9:c6:03:8f:7f:42:10:cb:71:7b:e9:20:
                    e6:96:37:97:93:30:6f:cf:8b:34:f7:6f:a0:8c:33:
                    24:ef:81:c3:be:51:74:55:3f:4f:94:4c:af:41:3b:
                    b2:f7:b3:9f:4c:e2:6e:fb:89:57:67:74:9d:9b:1f:
                    d8:eb:ed:63:f4:5e:59:c9:56:a4:f1:26:59:72:48:
                    da:6c:bc:5d:0b:9b:f4:35:49:e3:df:79:56:b9:3f:
                    6b:5a:7f:4a:b3:ac:0c:03:a5:3e:88:8d:18:bb:5d:
                    c0:65:56:66:30:3e:3d:b9:ab:48:40:e0:17:e2:41:
                    8f:f2:35:a9:1d:26:d1:a6:49:d8:08:d4:69:86:01:
                    fa:3a:2e:93:54:d0:f8:32:25:81:da:c1:63:70:86:
                    cc:b5:e5:d0:fc:e5:67:6c:71:0e:1d:ae:59:e0:60:
                    15:37:af:8a:bc:29:54:78:48:6a:3a:b1:ff:b1:09:
                    59:2a:14:b1:33:5f:60:ce:d0:79:81:47:b0:e3:62:
                    28:fb:8f:bc:7e:7e:ea:28:09:74:12:3b:ef:28:d8:
                    6c:8e:e5:e9:98:48:cd:25:1c:9d:2e:5b:f6:c1:f6:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:0F:09:8A:CA:E2:FB:66:27:57:08:5D:97:0D:B6:8D:6A:14:10
            X509v3 Authority Key Identifier:
                keyid:17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/177534573015FFF667FEFF6833F132D1839610DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37322e302f32332d3233203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:01:8f:48:6d:00:eb:a8:b6:08:e9:9c:d0:5d:5e:af:b8:54:
         29:b4:9e:63:bd:2f:4f:76:73:78:09:59:11:43:26:fd:50:a9:
         a8:9a:b5:85:15:b2:7e:74:45:f2:3f:c3:29:a8:36:c2:9b:b9:
         51:86:e6:2e:5f:2f:a7:0b:94:10:57:76:4f:c9:d3:94:a4:4e:
         0a:e5:91:8a:3c:4d:3e:4b:b7:9b:54:6e:dc:c4:f3:a3:80:c2:
         35:2f:b3:94:50:f7:f3:f8:ac:46:31:41:7b:51:fc:05:04:77:
         40:c7:8c:1f:d6:08:ba:d4:55:df:d3:d3:b1:0d:80:51:48:18:
         82:3a:66:8b:72:a2:1b:3b:a6:50:d4:3f:77:4f:44:d8:a5:08:
         48:6a:0e:8c:d2:ab:f6:f3:ab:ae:80:a4:1d:65:cc:f1:bc:78:
         11:07:40:9f:4a:60:3d:5e:4d:e2:f2:57:59:7d:52:39:64:2a:
         b9:99:a7:7b:b9:f4:df:21:a6:e5:c5:e4:d4:09:65:99:4e:93:
         c5:bb:b7:3b:1e:79:2f:d1:bc:f6:eb:c9:90:81:01:95:0c:ac:
         09:eb:45:f4:7b:86:a8:0b:5f:24:ce:69:3f:f1:90:f5:75:81:
         71:81:a4:21:ce:c6:db:2c:1f:9f:c9:5a:df:4b:f3:38:e2:fa:
         3b:68:17:72
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUZh25j3b43WqJ5WbkbrPnZifytQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3NTM0NTczMDE1RkZGNjY3RkVGRjY4MzNGMTMyRDE4
Mzk2MTBEQjAeFw0yMzExMjYxODU1MDBaFw0yNDExMjQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTExOTA2MUJCMTUwQ0EyMEYw
QTFDRTBEQkFEQ0M4QTVFRDlFNkMwN0RDQjQ4MTMwMDdCQzU1Q0RBRTBDOTYyQUE5
QzYwMzhGN0Y0MjEwQ0I3MTdCRTkyMEU2OTYzNzk3OTMzMDZGQ0Y4QjM0Rjc2RkEw
OEMzMzI0RUY4MUMzQkU1MTc0NTUzRjRGOTQ0Q0FGNDEzQkIyRjdCMzlGNENFMjZF
RkI4OTU3Njc3NDlEOUIxRkQ4RUJFRDYzRjQ1RTU5Qzk1NkE0RjEyNjU5NzI0OERB
NkNCQzVEMEI5QkY0MzU0OUUzREY3OTU2QjkzRjZCNUE3RjRBQjNBQzBDMDNBNTNF
ODg4RDE4QkI1REMwNjU1NjY2MzAzRTNEQjlBQjQ4NDBFMDE3RTI0MThGRjIzNUE5
MUQyNkQxQTY0OUQ4MDhENDY5ODYwMUZBM0EyRTkzNTREMEY4MzIyNTgxREFDMTYz
NzA4NkNDQjVFNUQwRkNFNTY3NkM3MTBFMURBRTU5RTA2MDE1MzdBRjhBQkMyOTU0
Nzg0ODZBM0FCMUZGQjEwOTU5MkExNEIxMzM1RjYwQ0VEMDc5ODE0N0IwRTM2MjI4
RkI4RkJDN0U3RUVBMjgwOTc0MTIzQkVGMjhEODZDOEVFNUU5OTg0OENEMjUxQzlE
MkU1QkY2QzFGNjNBRDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoRkGG7FQyiDwoc4NutzIpe2ebAfctIEwB7xVza4MliqpxgOPf0IQ
y3F76SDmljeXkzBvz4s092+gjDMk74HDvlF0VT9PlEyvQTuy97OfTOJu+4lXZ3Sd
mx/Y6+1j9F5ZyVak8SZZckjabLxdC5v0NUnj33lWuT9rWn9Ks6wMA6U+iI0Yu13A
ZVZmMD49uatIQOAX4kGP8jWpHSbRpknYCNRphgH6Oi6TVND4MiWB2sFjcIbMteXQ
/OVnbHEOHa5Z4GAVN6+KvClUeEhqOrH/sQlZKhSxM19gztB5gUew42Io+4+8fn7q
KAl0EjvvKNhsjuXpmEjNJRydLlv2wfY61wIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FHPuDwmKyuL7ZidXCF2XDbaNahQQMB8GA1UdIwQYMBaAFBd1NFcwFf/2Z/7/aDPx
MtGDlhDbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzAvMTc3NTM0NTczMDE1RkZG
NjY3RkVGRjY4MzNGMTMyRDE4Mzk2MTBEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzc1MzQ1NzMwMTVGRkY2NjdGRUZGNjgzM0YxMzJEMTgzOTYx
MERCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8wLzM0MzUyZTMyMzMzNzJlMzczMjJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2MzEzNTM5MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEt7Ugw
DQYJKoZIhvcNAQELBQADggEBABYBj0htAOuotgjpnNBdXq+4VCm0nmO9L092c3gJ
WRFDJv1QqaiatYUVsn50RfI/wymoNsKbuVGG5i5fL6cLlBBXdk/J05SkTgrlkYo8
TT5Lt5tUbtzE86OAwjUvs5RQ9/P4rEYxQXtR/AUEd0DHjB/WCLrUVd/T07ENgFFI
GII6Zotyohs7plDUP3dPRNilCEhqDozSq/bzq66ApB1lzPG8eBEHQJ9KYD1eTeLy
V1l9UjlkKrmZp3u59N8hpuXF5NQJZZlOk8W7tzseeS/RvPbryZCBAZUMrAnrRfR7
hqgLXyTOaT/xkPV1gXGBpCHOxtssH5/JWt9L8zji+jtoF3I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org