Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37342e302f32342d3234203d3e203631353931.roa
File:                     34352e3233372e37342e302f32342d3234203d3e203631353931.roa (raw, json)
Hash identifier:          cbSkrP1pA46rA9f6BGU97kbCBWB9ufmeVqCTWBSPTc0=
Subject key identifier:   99:BB:32:B2:B1:05:F6:5B:B5:0D:63:10:3E:14:BC:22:01:FA:A8:2B
Certificate issuer:       /CN=177534573015FFF667FEFF6833F132D1839610DB
Certificate serial:       2D00BB94781E5FDBBAA7401F601C203DAAEBCE59
Authority key identifier: 17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37342e302f32342d3234203d3e203631353931.roa
Signing time:             Wed 29 Nov 2023 19:00:00 +0000
ROA not before:           Wed 29 Nov 2023 18:55:00 +0000
ROA not after:            Wed 27 Nov 2024 19:00:00 +0000
asID:                     61591
IP address blocks:        45.237.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:00:bb:94:78:1e:5f:db:ba:a7:40:1f:60:1c:20:3d:aa:eb:ce:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177534573015FFF667FEFF6833F132D1839610DB
        Validity
            Not Before: Nov 29 18:55:00 2023 GMT
            Not After : Nov 27 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:98:c6:00:dc:ca:5a:ff:ee:74:45:7a:b1:
                    d1:07:d3:10:85:e2:9c:59:bd:bf:a3:8a:6a:5a:78:
                    75:23:ed:31:b2:74:77:c8:9e:2e:ed:24:c2:6d:96:
                    5f:b2:57:dd:bf:38:54:e3:d0:ff:94:04:6a:3f:b8:
                    e0:39:49:c7:86:2f:76:68:b6:1c:f3:5e:24:a2:24:
                    ac:c4:8f:f8:6e:06:92:87:47:0d:3f:dd:79:37:19:
                    15:ee:18:e6:dc:0d:fb:d2:2f:8a:f0:3b:9c:f3:88:
                    65:cc:ca:fa:15:88:ac:e4:e5:3e:18:67:d8:a9:d1:
                    33:47:51:7c:94:58:fc:24:81:64:c0:01:0d:3e:f7:
                    f9:ed:bb:ab:d1:d3:d3:56:2b:93:98:9e:64:fa:ea:
                    56:f6:fa:00:8f:f2:31:d9:10:40:22:21:a9:77:7d:
                    a2:50:5d:a4:39:d7:a1:a4:db:8d:6d:1a:4d:6e:d4:
                    ca:29:6d:0c:fa:be:6d:4b:55:3a:30:17:fd:e2:5f:
                    01:dd:00:6b:1f:5b:d4:f3:5a:ba:37:3d:c2:37:87:
                    e2:38:d2:3a:a9:49:9b:d3:01:b0:18:73:4c:48:9b:
                    a2:80:47:10:24:8c:65:db:ec:bf:fe:2f:dd:6f:b0:
                    75:31:80:02:36:4c:52:54:28:27:e9:33:27:28:df:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BB:32:B2:B1:05:F6:5B:B5:0D:63:10:3E:14:BC:22:01:FA:A8:2B
            X509v3 Authority Key Identifier:
                keyid:17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/177534573015FFF667FEFF6833F132D1839610DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37342e302f32342d3234203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:8b:a1:e0:a7:c3:26:db:78:ad:12:1b:a2:05:17:ce:f3:0c:
         db:2c:12:39:13:aa:d4:62:20:ec:d1:98:7e:69:57:74:62:9b:
         ba:01:f4:46:e7:d4:06:92:68:7b:c6:ad:05:14:c4:fa:22:7e:
         a4:ec:14:bb:30:f2:09:8b:2c:67:a8:bc:91:ee:25:a9:1f:ec:
         ad:60:40:b5:ca:27:89:aa:e3:4b:bf:82:62:0f:ce:b3:db:36:
         67:46:a8:fc:90:77:31:d2:1a:87:71:d2:ac:46:d8:9e:de:8f:
         09:9b:1a:31:33:ac:90:03:37:b8:6c:1a:04:65:69:9d:63:de:
         a6:5c:db:35:61:67:e9:0d:59:12:44:2a:45:a0:bf:68:78:28:
         71:75:58:35:a3:c4:2f:15:d1:16:b9:ea:ab:b8:37:be:69:e1:
         ed:6c:89:4c:f7:48:75:64:d7:5f:53:20:ee:2f:a5:80:19:e9:
         61:e8:d3:8c:53:ab:24:92:4f:e2:f1:37:de:81:0f:b7:c9:ce:
         c8:c6:86:2a:95:f2:65:e1:b8:56:4f:54:70:36:57:4a:c4:2b:
         99:97:ce:0a:9e:63:53:82:55:c4:7b:a8:e9:0c:fe:ef:36:c0:
         4a:38:ba:3c:36:91:1f:2b:e4:7d:27:9c:e0:9a:f4:7a:8a:fc:
         bf:ac:22:c2
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIULQC7lHgeX9u6p0AfYBwgParrzlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3NTM0NTczMDE1RkZGNjY3RkVGRjY4MzNGMTMyRDE4
Mzk2MTBEQjAeFw0yMzExMjkxODU1MDBaFw0yNDExMjcxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDUwNDk4QzYwMERDQ0E1QUZG
RUU3NDQ1N0FCMUQxMDdEMzEwODVFMjlDNTlCREJGQTM4QTZBNUE3ODc1MjNFRDMx
QjI3NDc3Qzg5RTJFRUQyNEMyNkQ5NjVGQjI1N0REQkYzODU0RTNEMEZGOTQwNDZB
M0ZCOEUwMzk0OUM3ODYyRjc2NjhCNjFDRjM1RTI0QTIyNEFDQzQ4RkY4NkUwNjky
ODc0NzBEM0ZERDc5MzcxOTE1RUUxOEU2REMwREZCRDIyRjhBRjAzQjlDRjM4ODY1
Q0NDQUZBMTU4OEFDRTRFNTNFMTg2N0Q4QTlEMTMzNDc1MTdDOTQ1OEZDMjQ4MTY0
QzAwMTBEM0VGN0Y5RURCQkFCRDFEM0QzNTYyQjkzOTg5RTY0RkFFQTU2RjZGQTAw
OEZGMjMxRDkxMDQwMjIyMUE5Nzc3REEyNTA1REE0MzlEN0ExQTREQjhENkQxQTRE
NkVENENBMjk2RDBDRkFCRTZENEI1NTNBMzAxN0ZERTI1RjAxREQwMDZCMUY1QkQ0
RjM1QUJBMzczREMyMzc4N0UyMzhEMjNBQTk0OTlCRDMwMUIwMTg3MzRDNDg5QkEy
ODA0NzEwMjQ4QzY1REJFQ0JGRkUyRkRENkZCMDc1MzE4MDAyMzY0QzUyNTQyODI3
RTkzMzI3MjhERjkxNzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1QSYxgDcylr/7nRFerHRB9MQheKcWb2/o4pqWnh1I+0xsnR3yJ4u
7STCbZZfslfdvzhU49D/lARqP7jgOUnHhi92aLYc814koiSsxI/4bgaSh0cNP915
NxkV7hjm3A370i+K8Duc84hlzMr6FYis5OU+GGfYqdEzR1F8lFj8JIFkwAENPvf5
7bur0dPTViuTmJ5k+upW9voAj/Ix2RBAIiGpd32iUF2kOdehpNuNbRpNbtTKKW0M
+r5tS1U6MBf94l8B3QBrH1vU81q6Nz3CN4fiONI6qUmb0wGwGHNMSJuigEcQJIxl
2+y//i/db7B1MYACNkxSVCgn6TMnKN+RdQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FJm7MrKxBfZbtQ1jED4UvCIB+qgrMB8GA1UdIwQYMBaAFBd1NFcwFf/2Z/7/aDPx
MtGDlhDbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzAvMTc3NTM0NTczMDE1RkZG
NjY3RkVGRjY4MzNGMTMyRDE4Mzk2MTBEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzc1MzQ1NzMwMTVGRkY2NjdGRUZGNjgzM0YxMzJEMTgzOTYx
MERCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8wLzM0MzUyZTMyMzMzNzJlMzczNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzNTM5MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt7Uow
DQYJKoZIhvcNAQELBQADggEBANyLoeCnwybbeK0SG6IFF87zDNssEjkTqtRiIOzR
mH5pV3Rim7oB9Ebn1AaSaHvGrQUUxPoifqTsFLsw8gmLLGeovJHuJakf7K1gQLXK
J4mq40u/gmIPzrPbNmdGqPyQdzHSGodx0qxG2J7ejwmbGjEzrJADN7hsGgRlaZ1j
3qZc2zVhZ+kNWRJEKkWgv2h4KHF1WDWjxC8V0Ra56qu4N75p4e1siUz3SHVk119T
IO4vpYAZ6WHo04xTqySST+LxN96BD7fJzsjGhiqV8mXhuFZPVHA2V0rEK5mXzgqe
Y1OCVcR7qOkM/u82wEo4ujw2kR8r5H0nnOCa9HqK/L+sIsI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org