Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa
File:                     34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa (raw, json)
Hash identifier:          KMZ0aVe9NtwVOO6O8iJLH0rGvpn9sYNDl/K1YWLc09k=
Subject key identifier:   DB:2F:67:62:BA:A7:15:40:70:FF:3F:4B:F3:84:37:D5:61:4A:7D:66
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       3C7765E4608E68FD04F9643F6A61BC155F995E05
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:48 +0000
ROA not before:           Fri 23 Jun 2023 20:01:48 +0000
ROA not after:            Fri 21 Jun 2024 20:06:48 +0000
asID:                     264996
IP address blocks:        45.179.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:77:65:e4:60:8e:68:fd:04:f9:64:3f:6a:61:bc:15:5f:99:5e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:48 2023 GMT
            Not After : Jun 21 20:06:48 2024 GMT
        Subject: CN=DB2F6762BAA7154070FF3F4BF38437D5614A7D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:38:d0:20:4c:24:58:31:5b:ac:84:15:ee:
                    8c:74:08:9f:cf:04:a7:9b:c4:23:5f:b9:0b:40:ef:
                    81:3f:1a:a7:f0:3b:43:79:f6:06:b9:25:30:78:0d:
                    cc:09:14:e8:c6:d5:90:0e:95:d1:d0:95:8b:e7:b8:
                    8a:44:cc:d1:e9:07:cb:a3:8c:96:75:da:d6:1b:34:
                    20:e2:e2:4f:9a:ce:46:7e:86:df:d1:7e:e1:ea:b9:
                    6f:69:66:d0:d6:39:5b:f9:54:49:52:fa:c9:65:87:
                    44:4b:ee:e7:bc:88:9a:9a:55:ae:82:01:7b:67:16:
                    21:a0:83:ab:d3:99:83:c6:5a:46:21:76:d3:b5:1c:
                    65:54:5f:8e:9a:89:34:ca:11:1a:ec:8f:b8:d5:25:
                    90:7f:64:ea:94:ee:58:f1:56:b7:1c:8b:dd:5d:a1:
                    7c:d7:0d:12:aa:bd:2a:40:82:b5:1d:b5:e7:b2:08:
                    cf:21:c6:2c:c4:a4:70:27:05:cb:ed:41:91:3f:78:
                    67:64:c4:e5:93:ee:2f:7a:1c:27:58:ac:89:80:2c:
                    09:c7:3e:30:a5:00:92:d9:67:dc:1f:ad:a3:c9:83:
                    e9:60:9a:d3:58:fb:f9:2c:9b:d4:8d:50:d9:38:38:
                    cd:5e:7d:ac:33:a5:b7:eb:c9:88:7b:92:6c:5c:af:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2F:67:62:BA:A7:15:40:70:FF:3F:4B:F3:84:37:D5:61:4A:7D:66
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:74:57:f0:93:5d:c4:e1:d0:cb:7c:a4:1c:aa:20:39:21:63:
         ba:cf:8d:14:09:df:0e:29:0d:9c:e1:82:54:f8:4b:86:c4:36:
         bb:15:ac:cc:f2:a6:8f:50:18:8a:5d:b3:86:55:d4:00:a7:2e:
         98:3f:79:d3:31:49:3f:2f:7d:1e:26:d6:e5:ee:01:82:e8:1e:
         2e:c2:de:da:cd:a6:ff:2a:69:71:ff:33:02:99:b2:cb:8a:53:
         dd:da:3b:1e:d7:0e:0f:7e:6a:4a:3e:61:f2:02:b5:44:42:52:
         08:18:35:3a:17:a7:52:63:51:c3:2e:f3:9f:15:e1:6b:ed:11:
         36:ac:b6:f5:8a:7a:16:2f:f4:46:10:c6:f4:fa:7d:f3:24:60:
         7d:a0:25:d5:6c:e6:b8:33:94:1a:fb:20:6b:c4:62:a5:d7:e4:
         3c:d2:d6:85:ce:36:a6:22:8e:a0:69:46:e1:d0:65:3f:68:d4:
         bc:c2:8c:c1:da:8f:e2:95:8e:8b:8e:ce:87:af:ad:da:ae:ce:
         f8:d8:44:db:70:f8:af:53:8c:2e:69:74:14:9a:9c:d1:c5:ad:
         af:95:51:02:23:31:bf:f2:02:7b:88:ef:58:ed:b7:58:e8:50:
         e3:5d:99:c6:77:ce:61:f0:5f:d0:b4:a1:1c:ef:c7:41:e0:91:
         7b:e3:c4:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPHdl5GCOaP0E+WQ/amG8FV+ZXgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE3REYxNjE3RTZEMkVBNUQ1MDE3QkEwMDBDQTREMURE
NkQ2MkY4RTAeFw0yMzA2MjMyMDAxNDhaFw0yNDA2MjEyMDA2NDhaMDMxMTAvBgNV
BAMTKERCMkY2NzYyQkFBNzE1NDA3MEZGM0Y0QkYzODQzN0Q1NjE0QTdENjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDppzjQIEwkWDFbrIQV7ox0CJ/P
BKebxCNfuQtA74E/GqfwO0N59ga5JTB4DcwJFOjG1ZAOldHQlYvnuIpEzNHpB8uj
jJZ12tYbNCDi4k+azkZ+ht/RfuHquW9pZtDWOVv5VElS+sllh0RL7ue8iJqaVa6C
AXtnFiGgg6vTmYPGWkYhdtO1HGVUX46aiTTKERrsj7jVJZB/ZOqU7ljxVrcci91d
oXzXDRKqvSpAgrUdteeyCM8hxizEpHAnBcvtQZE/eGdkxOWT7i96HCdYrImALAnH
PjClAJLZZ9wfraPJg+lgmtNY+/ksm9SNUNk4OM1efawzpbfryYh7kmxcr91nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2y9nYrqnFUBw/z9L84Q31WFKfWYwHwYDVR0j
BBgwFoAUmn3xYX5tLqXVAXugAMpNHdbWL44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3N2am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5
ZXQvMC85QTdERjE2MTdFNkQyRUE1RDUwMTdCQTAwMENBNEQxREQ2RDYyRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBN0RGMTYxN0U2RDJFQTVE
NTAxN0JBMDAwQ0E0RDFERDZENjJGOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzdmpvZUhHcFJSdExlOHNHeVpOR0xkVHdVeWlEZGNSd25pYmJqeThSOWV0LzAv
MzQzNTJlMzEzNzM5MmUzMTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzOTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEts4AwDQYJKoZIhvcNAQELBQADggEBADV0V/CT
XcTh0Mt8pByqIDkhY7rPjRQJ3w4pDZzhglT4S4bENrsVrMzypo9QGIpds4ZV1ACn
Lpg/edMxST8vfR4m1uXuAYLoHi7C3trNpv8qaXH/MwKZssuKU93aOx7XDg9+ako+
YfICtURCUggYNToXp1JjUcMu858V4WvtETastvWKehYv9EYQxvT6ffMkYH2gJdVs
5rgzlBr7IGvEYqXX5DzS1oXONqYijqBpRuHQZT9o1LzCjMHaj+KVjouOzoevrdqu
zvjYRNtw+K9TjC5pdBSanNHFra+VUQIjMb/yAnuI71jtt1joUONdmcZ3zmHwX9C0
oRzvx0HgkXvjxCQ=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org