Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132372e302f32342d3234203d3e20323638343038.roa
File:                     34352e3136302e3132372e302f32342d3234203d3e20323638343038.roa (raw, json)
Hash identifier:          aynUQ7Uu34e10XW6ZHwLvcDxU7taNw2epSwkPyTd6Do=
Subject key identifier:   97:90:12:74:99:23:C0:69:2A:BE:BA:13:F5:98:27:D7:D8:A9:E0:41
Certificate issuer:       /CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
Certificate serial:       6B52AC61C02511F534D025CB6AA226F4F9A15AED
Authority key identifier: BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132372e302f32342d3234203d3e20323638343038.roa
Signing time:             Mon 08 Jan 2024 15:07:55 +0000
ROA not before:           Mon 08 Jan 2024 15:02:55 +0000
ROA not after:            Mon 06 Jan 2025 15:07:55 +0000
asID:                     268408
IP address blocks:        45.160.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:52:ac:61:c0:25:11:f5:34:d0:25:cb:6a:a2:26:f4:f9:a1:5a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
        Validity
            Not Before: Jan  8 15:02:55 2024 GMT
            Not After : Jan  6 15:07:55 2025 GMT
        Subject: CN=979012749923C0692ABEBA13F59827D7D8A9E041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:22:2b:06:02:73:92:22:18:ff:d8:7f:96:b9:
                    2e:e8:3e:a1:f8:f3:70:42:21:94:82:f9:56:7a:81:
                    28:91:b9:bc:5b:06:2e:dc:11:a0:f4:f0:38:cc:65:
                    84:fd:b0:07:fa:d5:88:05:f4:57:38:53:6c:81:33:
                    04:4d:e9:1c:87:7d:f2:c6:ac:1a:78:d0:3a:8d:35:
                    69:da:9e:31:22:09:e2:23:8d:41:14:63:4c:db:d1:
                    5d:6e:68:87:77:ca:c5:88:79:dd:62:23:30:a3:f5:
                    95:9c:fb:f9:96:cb:6a:37:15:3c:8f:2d:22:ba:42:
                    a8:01:17:3a:38:76:3c:ce:16:98:6c:bb:88:68:f5:
                    7b:75:55:4b:08:7f:04:d1:33:82:ca:49:91:34:97:
                    18:4f:ef:68:15:cc:a1:0d:40:3d:14:95:d1:16:59:
                    c7:9a:0f:a1:57:c8:4c:8b:56:59:45:65:e4:38:c6:
                    3e:93:64:06:00:4e:5f:c5:22:c3:02:70:d3:c7:c0:
                    3c:6b:24:a2:3e:ba:51:8a:6b:be:b1:be:11:1e:f2:
                    c2:62:b7:b8:fd:59:67:96:4b:63:1c:4b:89:79:ab:
                    a2:b0:0b:f2:f3:7b:82:61:4e:46:97:e7:9d:2d:66:
                    3f:16:4e:31:ff:df:d1:35:dc:82:9a:ac:ff:59:c9:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:90:12:74:99:23:C0:69:2A:BE:BA:13:F5:98:27:D7:D8:A9:E0:41
            X509v3 Authority Key Identifier:
                keyid:BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132372e302f32342d3234203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:da:61:70:76:e0:6c:6b:2d:6d:db:3c:d0:14:40:8e:7b:39:
         ee:3a:e5:78:e4:69:fc:d8:f8:ce:e4:3b:94:24:7e:23:12:cb:
         b7:ae:77:24:f5:af:1d:68:a4:c6:73:54:5b:20:70:88:5c:2e:
         ca:73:eb:d8:49:86:c8:5b:4c:50:12:df:95:b4:73:8f:e4:77:
         25:54:42:57:5f:ca:2b:bb:03:f6:ca:7e:03:9e:45:94:27:82:
         db:cc:3d:6c:50:2e:7c:24:68:50:11:4e:a6:71:5f:d8:19:88:
         58:1b:0e:4f:2b:33:5f:d7:4a:9f:34:7d:8d:1c:ac:fb:70:47:
         1b:1e:41:a7:50:3e:14:80:f7:3b:bf:6c:3d:4d:69:8d:4f:bd:
         03:13:01:ae:7e:af:07:d8:bb:67:e7:0e:c6:44:4f:a3:61:e1:
         bc:99:d5:8c:0a:1a:16:6e:33:61:92:12:66:8d:5e:ea:38:23:
         9d:d5:4b:02:f0:97:42:28:fe:11:80:1a:00:19:3e:ac:e0:b8:
         92:32:da:f3:94:13:98:0a:9e:65:4b:c6:75:31:1d:63:79:7c:
         21:f4:87:e9:f1:79:cb:18:22:ef:6a:27:22:b9:4b:8b:3a:18:
         97:1e:65:2f:20:82:c8:57:3c:70:a5:5c:19:5f:87:0f:56:e0:
         6f:49:bc:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa1KsYcAlEfU00CXLaqIm9PmhWu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzNDU5N0I3QUJGNzZFRjIwRDIxNEQ0M0YyNUUyNTc5
RjU2MEU3ODAeFw0yNDAxMDgxNTAyNTVaFw0yNTAxMDYxNTA3NTVaMDMxMTAvBgNV
BAMTKDk3OTAxMjc0OTkyM0MwNjkyQUJFQkExM0Y1OTgyN0Q3RDhBOUUwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmIisGAnOSIhj/2H+WuS7oPqH4
83BCIZSC+VZ6gSiRubxbBi7cEaD08DjMZYT9sAf61YgF9Fc4U2yBMwRN6RyHffLG
rBp40DqNNWnanjEiCeIjjUEUY0zb0V1uaId3ysWIed1iIzCj9ZWc+/mWy2o3FTyP
LSK6QqgBFzo4djzOFphsu4ho9Xt1VUsIfwTRM4LKSZE0lxhP72gVzKENQD0UldEW
WceaD6FXyEyLVllFZeQ4xj6TZAYATl/FIsMCcNPHwDxrJKI+ulGKa76xvhEe8sJi
t7j9WWeWS2McS4l5q6KwC/Lze4JhTkaX550tZj8WTjH/39E13IKarP9Zyf9jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUl5ASdJkjwGkqvroT9Zgn19ip4EEwHwYDVR0j
BBgwFoAUvjRZe3q/du8g0hTUPyXiV59WDngwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNld2t2NkJWSlVGelhIOWsyNVg1alczaWFYRHRaQVF4Z1V0dUd5RGlQ
UWsvMC9CRTM0NTk3QjdBQkY3NkVGMjBEMjE0RDQzRjI1RTI1NzlGNTYwRTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFMzQ1OTdCN0FCRjc2RUYy
MEQyMTRENDNGMjVFMjU3OUY1NjBFNzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZXdrdjZCVkpVRnpYSDlrMjVYNWpXM2lhWER0WkFReGdVdHVHeURpUFFrLzAv
MzQzNTJlMzEzNjMwMmUzMTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtoH8wDQYJKoZIhvcNAQELBQADggEBAA/aYXB2
4GxrLW3bPNAUQI57Oe465XjkafzY+M7kO5QkfiMSy7eudyT1rx1opMZzVFsgcIhc
Lspz69hJhshbTFAS35W0c4/kdyVUQldfyiu7A/bKfgOeRZQngtvMPWxQLnwkaFAR
TqZxX9gZiFgbDk8rM1/XSp80fY0crPtwRxseQadQPhSA9zu/bD1NaY1PvQMTAa5+
rwfYu2fnDsZET6Nh4byZ1YwKGhZuM2GSEmaNXuo4I53VSwLwl0Io/hGAGgAZPqzg
uJIy2vOUE5gKnmVLxnUxHWN5fCH0h+nxecsYIu9qJyK5S4s6GJceZS8ggshXPHCl
XBlfhw9W4G9JvDU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org