Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137322e302f32342d3234203d3e20323638333733.roa
File:                     34352e3233392e3137322e302f32342d3234203d3e20323638333733.roa (raw, json)
Hash identifier:          D7LijtR2rqEmdsszSZXYbbGHGaffUxIOfN5uUzO4lUw=
Subject key identifier:   74:8A:47:D7:F2:6A:76:8F:89:A6:38:3A:71:0B:31:C2:F5:2C:DC:4D
Certificate issuer:       /CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
Certificate serial:       7D23975DDD5692C04744FAF295B2CBB424846AC5
Authority key identifier: 70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137322e302f32342d3234203d3e20323638333733.roa
Signing time:             Thu 22 Feb 2024 13:04:31 +0000
ROA not before:           Thu 22 Feb 2024 12:59:31 +0000
ROA not after:            Thu 20 Feb 2025 13:04:31 +0000
asID:                     268373
IP address blocks:        45.239.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:23:97:5d:dd:56:92:c0:47:44:fa:f2:95:b2:cb:b4:24:84:6a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
        Validity
            Not Before: Feb 22 12:59:31 2024 GMT
            Not After : Feb 20 13:04:31 2025 GMT
        Subject: CN=748A47D7F26A768F89A6383A710B31C2F52CDC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:a2:34:20:b4:3b:27:f2:ed:ec:58:59:f2:
                    71:ef:32:3b:97:0a:32:5c:df:d1:e5:50:77:ca:5a:
                    06:63:f3:a5:e6:f0:37:3c:52:bb:39:85:f7:eb:ca:
                    b3:df:5b:df:f9:85:ea:80:5c:23:e9:4e:65:2a:f1:
                    42:20:b7:65:a5:90:22:f8:15:f2:55:15:76:86:b9:
                    f8:4d:0d:39:f3:94:0e:ae:97:e9:14:65:41:69:4d:
                    eb:49:4f:e6:93:2a:72:1b:71:d9:6a:87:58:b1:a3:
                    f7:d9:db:bb:1a:fe:44:9f:c2:23:c4:e8:ab:7c:be:
                    2c:09:ef:40:a2:48:94:76:da:73:3f:25:30:f4:c8:
                    e0:a8:97:dd:14:d3:c3:11:4a:76:ba:4b:4f:f6:2b:
                    67:95:9e:e7:03:81:63:4d:78:af:9a:5b:29:6e:9d:
                    1b:aa:ee:c6:11:1f:92:13:f9:12:f7:d1:18:49:87:
                    25:0f:59:34:cb:83:39:5a:8a:a8:83:2e:8d:25:d8:
                    95:e5:23:73:2e:aa:12:5f:26:62:b7:a0:a5:7c:c7:
                    20:ac:47:12:12:7b:e3:45:e1:67:26:cc:37:9e:a3:
                    27:ae:94:df:84:4d:0c:f2:ca:38:dd:89:88:3f:b8:
                    a3:08:0c:da:8b:d7:2d:fa:29:0e:10:95:e1:7e:22:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8A:47:D7:F2:6A:76:8F:89:A6:38:3A:71:0B:31:C2:F5:2C:DC:4D
            X509v3 Authority Key Identifier:
                keyid:70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137322e302f32342d3234203d3e20323638333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:08:fd:b8:71:ef:60:df:fd:66:2c:26:57:f5:33:e0:62:68:
         a6:4a:e9:d8:49:7c:33:e2:b4:71:4a:ca:fd:57:2c:56:2a:e0:
         83:ab:7b:44:08:4e:ad:7e:63:98:b1:f3:7b:84:1c:92:90:5a:
         42:7f:da:68:50:1f:45:b5:4b:7c:a1:ac:f2:93:4b:4f:82:08:
         65:c2:7f:d2:3e:8d:6c:40:c8:6e:3a:9f:34:98:a4:c9:2f:db:
         81:af:98:62:cd:af:ea:ae:bd:94:ff:47:fd:15:1c:ae:17:3c:
         55:a3:d6:08:2d:e9:c1:34:eb:d7:51:a9:79:cf:00:46:e6:80:
         6f:39:f6:b0:a7:57:a1:1e:af:e1:98:73:dc:b6:3c:4d:0b:af:
         92:d9:54:83:73:0f:5a:f7:2a:40:82:de:cd:04:27:d1:26:3d:
         42:a8:a8:60:7e:8b:5a:83:ca:39:3f:c7:9e:a0:1c:a6:f5:ac:
         e5:6a:fa:5e:3e:ae:48:4e:72:bc:15:19:99:b9:58:0d:32:cf:
         fe:b1:0f:bf:e5:47:e5:bb:42:27:38:da:e7:cd:3c:ce:bf:7a:
         10:f7:f0:76:fe:e2:94:2c:6b:b6:02:cb:f0:6b:cc:5d:af:70:
         44:da:48:e2:bf:6e:ee:68:fd:f2:b2:06:a1:3e:f5:f5:36:43:
         5b:d8:9a:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfSOXXd1WksBHRPrylbLLtCSEasUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBENzk4QjY5N0UyREFCRTc2RjI5MjU4OENCRTFCMkZC
RUIyMkM5RTAeFw0yNDAyMjIxMjU5MzFaFw0yNTAyMjAxMzA0MzFaMDMxMTAvBgNV
BAMTKDc0OEE0N0Q3RjI2QTc2OEY4OUE2MzgzQTcxMEIzMUMyRjUyQ0RDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBoaI0ILQ7J/Lt7FhZ8nHvMjuX
CjJc39HlUHfKWgZj86Xm8Dc8Urs5hffryrPfW9/5heqAXCPpTmUq8UIgt2WlkCL4
FfJVFXaGufhNDTnzlA6ul+kUZUFpTetJT+aTKnIbcdlqh1ixo/fZ27sa/kSfwiPE
6Kt8viwJ70CiSJR22nM/JTD0yOCol90U08MRSna6S0/2K2eVnucDgWNNeK+aWylu
nRuq7sYRH5IT+RL30RhJhyUPWTTLgzlaiqiDLo0l2JXlI3MuqhJfJmK3oKV8xyCs
RxISe+NF4WcmzDeeoyeulN+ETQzyyjjdiYg/uKMIDNqL1y36KQ4QleF+Io2PAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdIpH1/Jqdo+Jpjg6cQsxwvUs3E0wHwYDVR0j
BBgwFoAUcNeYtpfi2r528pJYjL4bL76yLJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFyeW95SjM0bkdHR2NmRTFXbkdDRWNpVWNrOFJkaDFnWDJBdUZGaUR0
djQvMC83MEQ3OThCNjk3RTJEQUJFNzZGMjkyNTg4Q0JFMUIyRkJFQjIyQzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwRDc5OEI2OTdFMkRBQkU3
NkYyOTI1ODhDQkUxQjJGQkVCMjJDOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBcnlveUozNG5HR0djZkUxV25HQ0VjaVVjazhSZGgxZ1gyQXVGRmlEdHY0LzAv
MzQzNTJlMzIzMzM5MmUzMTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt76wwDQYJKoZIhvcNAQELBQADggEBAEgI/bhx
72Df/WYsJlf1M+BiaKZK6dhJfDPitHFKyv1XLFYq4IOre0QITq1+Y5ix83uEHJKQ
WkJ/2mhQH0W1S3yhrPKTS0+CCGXCf9I+jWxAyG46nzSYpMkv24GvmGLNr+quvZT/
R/0VHK4XPFWj1ggt6cE069dRqXnPAEbmgG859rCnV6Eer+GYc9y2PE0Lr5LZVINz
D1r3KkCC3s0EJ9EmPUKoqGB+i1qDyjk/x56gHKb1rOVq+l4+rkhOcrwVGZm5WA0y
z/6xD7/lR+W7Qic42ufNPM6/ehD38Hb+4pQsa7YCy/BrzF2vcETaSOK/bu5o/fKy
BqE+9fU2Q1vYmhA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org