Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45EM2KuJCxUqV3FNZktUM3ZxaqkPdrG2tsmo2ze3HNTu/1/3137392e3130392e3132312e302f32342d3234203d3e20323730373731.roa
File:                     3137392e3130392e3132312e302f32342d3234203d3e20323730373731.roa (raw, json)
Hash identifier:          kOk7nyU9g6u+UeTlrLJXIFZBy8jYH1S2r3GFWKgNOXk=
Subject key identifier:   74:39:81:63:45:50:91:7A:81:5A:58:D5:02:87:FB:72:FC:E6:57:DB
Certificate issuer:       /CN=69250002F2E1D855A06C021E9997D0E063B84D7D
Certificate serial:       3A81FED21C92F752F3F8BB741E24D02B11CC8FF2
Authority key identifier: 69:25:00:02:F2:E1:D8:55:A0:6C:02:1E:99:97:D0:E0:63:B8:4D:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69250002F2E1D855A06C021E9997D0E063B84D7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45EM2KuJCxUqV3FNZktUM3ZxaqkPdrG2tsmo2ze3HNTu/1/3137392e3130392e3132312e302f32342d3234203d3e20323730373731.roa
Signing time:             Mon 09 Jan 2023 16:20:00 +0000
ROA not before:           Mon 09 Jan 2023 16:15:00 +0000
ROA not after:            Mon 08 Jan 2024 16:20:00 +0000
asID:                     270771
IP address blocks:        179.109.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:81:fe:d2:1c:92:f7:52:f3:f8:bb:74:1e:24:d0:2b:11:cc:8f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69250002F2E1D855A06C021E9997D0E063B84D7D
        Validity
            Not Before: Jan  9 16:15:00 2023 GMT
            Not After : Jan  8 16:20:00 2024 GMT
        Subject: CN=743981634550917A815A58D50287FB72FCE657DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:d1:48:7a:63:7e:ba:27:77:e2:f3:d0:1f:
                    4f:4a:4e:1f:89:79:d8:da:e4:77:18:a0:ff:6d:93:
                    f7:24:58:5b:49:a1:0b:7e:26:47:8b:b2:63:10:41:
                    1a:0d:e2:10:bd:fb:ee:f0:bb:15:9e:38:07:fa:84:
                    df:1a:7c:82:36:0a:0a:d0:e1:5f:82:b4:38:f1:87:
                    5d:a2:31:04:33:76:96:45:e7:e1:30:25:c7:17:2f:
                    74:37:59:89:a4:19:3c:b8:f4:ad:c9:6f:09:bb:c7:
                    f7:61:4d:b9:e4:18:1e:1f:18:30:40:20:de:e1:aa:
                    35:0a:b0:04:86:bd:35:10:2b:4a:88:71:84:83:bf:
                    bf:10:8f:54:80:17:84:b0:12:ee:1f:ea:0e:db:4d:
                    b0:ec:29:0d:3a:23:01:91:fb:78:a2:82:4e:b7:34:
                    24:92:ce:cb:76:21:33:dd:9c:fd:59:6c:f2:07:18:
                    d1:0a:87:f9:61:5f:aa:96:0e:b7:39:05:3c:5b:81:
                    6a:00:2d:a5:6c:b9:bf:73:5e:23:16:a2:02:67:33:
                    56:46:ac:e0:57:c4:3f:b0:76:41:49:e8:4e:de:5f:
                    e4:cc:33:64:e0:d1:15:95:b1:10:1b:3e:7a:e1:e1:
                    15:e6:f4:fe:8c:86:63:d7:42:bd:8e:52:8e:92:ea:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:39:81:63:45:50:91:7A:81:5A:58:D5:02:87:FB:72:FC:E6:57:DB
            X509v3 Authority Key Identifier:
                keyid:69:25:00:02:F2:E1:D8:55:A0:6C:02:1E:99:97:D0:E0:63:B8:4D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45EM2KuJCxUqV3FNZktUM3ZxaqkPdrG2tsmo2ze3HNTu/1/69250002F2E1D855A06C021E9997D0E063B84D7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69250002F2E1D855A06C021E9997D0E063B84D7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45EM2KuJCxUqV3FNZktUM3ZxaqkPdrG2tsmo2ze3HNTu/1/3137392e3130392e3132312e302f32342d3234203d3e20323730373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:34:1a:86:64:30:4a:f8:aa:2b:8a:20:1b:3a:8c:b4:e4:81:
         47:09:da:e1:c6:d5:9d:ed:fc:e1:b2:62:cc:2f:dc:54:25:d2:
         af:3b:16:2c:7a:21:7d:c0:a9:dc:54:ac:1c:c4:b3:9e:7a:c1:
         a8:45:4e:75:2d:e8:2c:9a:9a:f1:79:90:47:8d:4b:3a:55:22:
         b0:37:73:d2:11:53:b7:55:38:35:2c:55:5a:ff:b8:40:d5:39:
         5e:a2:1f:20:7f:4d:98:34:d0:e4:2e:33:40:f0:71:69:c5:cf:
         65:18:a7:c3:40:36:47:ad:84:07:04:0a:9a:fe:be:79:08:ac:
         04:82:15:f6:c4:6a:58:05:a2:05:ed:b5:ce:94:02:5b:06:ef:
         67:50:a9:d5:ed:01:23:54:c1:96:7c:2e:7d:2b:20:d0:61:88:
         cb:75:30:d4:4c:ab:6b:59:15:7f:14:38:b3:66:e7:34:4b:37:
         5d:67:60:48:e4:f7:a0:aa:b0:b7:20:ed:cf:01:e4:99:89:48:
         c3:24:4f:bb:d4:e5:8a:85:7c:06:7c:18:34:9e:e9:66:12:f9:
         11:42:d1:0e:a9:c8:50:9b:5e:f3:d6:59:12:f5:f4:49:a8:95:
         92:4a:88:05:fd:27:40:22:0f:c3:ce:76:b5:14:97:df:f1:b5:
         41:a1:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org