Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137332e302f32342d3332203d3e20323639343734.roa
File:                     34352e3138372e3137332e302f32342d3332203d3e20323639343734.roa (raw, json)
Hash identifier:          yZlW4VTLXnqOB3m6fWcEhHVAFZMxbuOOs0cVhF+fqqM=
Subject key identifier:   14:E4:5E:76:AA:13:A7:71:48:3C:4A:76:4A:2D:AA:32:0B:DA:D2:B2
Certificate issuer:       /CN=D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8
Certificate serial:       41A55A11C37330E2AD02BA0196125E097BC13266
Authority key identifier: D7:18:59:E3:E9:A2:DD:D4:A6:FF:C8:04:3C:1A:8F:E3:AE:1E:07:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137332e302f32342d3332203d3e20323639343734.roa
Signing time:             Fri 26 Jan 2024 18:52:12 +0000
ROA not before:           Fri 26 Jan 2024 18:47:12 +0000
ROA not after:            Fri 24 Jan 2025 18:52:12 +0000
asID:                     269474
IP address blocks:        45.187.173.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a5:5a:11:c3:73:30:e2:ad:02:ba:01:96:12:5e:09:7b:c1:32:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8
        Validity
            Not Before: Jan 26 18:47:12 2024 GMT
            Not After : Jan 24 18:52:12 2025 GMT
        Subject: CN=14E45E76AA13A771483C4A764A2DAA320BDAD2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:27:83:57:e7:90:67:23:cc:34:f4:f3:59:ae:
                    0e:6d:18:13:bb:24:df:96:c7:be:3b:19:a4:0e:d7:
                    a4:88:c2:8c:e4:d3:20:10:bd:d5:61:e7:c9:de:d9:
                    1a:d1:f4:ef:92:fc:06:b3:07:b5:5a:0f:0c:b8:a1:
                    b0:d8:6d:5f:56:b4:95:d4:b8:e0:33:41:19:fe:88:
                    87:aa:65:87:4d:d3:e2:de:2b:cc:bd:f6:32:0c:8b:
                    d2:4f:9f:b9:ae:74:ff:15:19:ae:67:af:d4:46:b0:
                    6e:d7:15:94:69:b5:f7:5d:84:12:98:62:41:f7:80:
                    63:91:91:1f:27:c0:3f:2e:50:7b:ec:b6:df:33:d0:
                    da:47:2f:9e:d7:d3:ba:8b:4e:51:8b:95:7f:50:47:
                    ba:2d:d0:da:5c:84:a2:e7:47:0d:82:30:62:eb:f6:
                    0d:4c:c8:66:df:6d:53:e3:d0:9a:90:54:52:d6:d3:
                    36:3c:0a:0f:0d:ef:b3:4e:d0:27:39:43:5a:b6:71:
                    d6:5f:09:68:40:2d:ef:b0:1a:fe:ff:68:14:eb:4b:
                    f6:a1:48:b1:2a:a9:19:db:25:b3:08:be:9c:68:17:
                    cb:ad:0e:01:70:f9:c2:33:bb:c3:70:23:e9:ff:67:
                    a7:fd:78:49:99:1a:e0:71:d8:41:a2:00:41:73:db:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E4:5E:76:AA:13:A7:71:48:3C:4A:76:4A:2D:AA:32:0B:DA:D2:B2
            X509v3 Authority Key Identifier:
                keyid:D7:18:59:E3:E9:A2:DD:D4:A6:FF:C8:04:3C:1A:8F:E3:AE:1E:07:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137332e302f32342d3332203d3e20323639343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:d5:6c:47:cf:11:2b:8a:26:b5:92:35:74:f3:f7:bf:c4:50:
         a7:ef:ab:54:5a:02:b4:87:54:68:31:4a:fd:8f:04:ca:20:cb:
         6b:a7:cd:54:d2:e9:6d:05:39:33:44:e5:a8:c3:a0:36:9e:0b:
         71:02:a1:00:32:23:d4:c7:76:5c:0b:ba:d0:1c:7c:e4:58:31:
         88:d5:46:e2:ba:66:75:1f:21:42:44:c2:fc:73:18:90:d8:ea:
         d2:2a:11:ef:d1:54:3d:fa:a3:1b:7e:22:b0:fe:9b:e6:3f:27:
         e9:09:36:75:d6:7a:5b:c6:48:30:33:d3:d8:d8:a5:8c:a1:c3:
         c0:59:93:99:83:6b:0c:b2:15:77:0c:77:2e:f2:3a:4e:34:e5:
         ae:ad:8c:9f:67:6b:73:8f:52:a8:68:c6:3a:f3:20:f7:42:87:
         e4:98:d6:dd:a7:0a:82:72:71:17:af:ad:c3:59:ba:ac:3b:a5:
         c4:2f:12:cf:ac:9d:24:92:c9:fd:4a:d3:2b:92:62:ce:a0:01:
         1b:eb:e5:02:60:e1:0b:dc:dd:c7:e3:64:dc:ed:22:4d:e8:97:
         cf:bf:62:1b:89:76:8c:62:0b:5d:dc:28:35:6f:4b:9d:44:4d:
         6f:92:5c:24:94:26:d5:bb:38:16:7e:92:93:29:77:ee:f1:cc:
         25:23:30:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQaVaEcNzMOKtAroBlhJeCXvBMmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcxODU5RTNFOUEyRERENEE2RkZDODA0M0MxQThGRTNB
RTFFMDdFODAeFw0yNDAxMjYxODQ3MTJaFw0yNTAxMjQxODUyMTJaMDMxMTAvBgNV
BAMTKDE0RTQ1RTc2QUExM0E3NzE0ODNDNEE3NjRBMkRBQTMyMEJEQUQyQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjJ4NX55BnI8w09PNZrg5tGBO7
JN+Wx747GaQO16SIwozk0yAQvdVh58ne2RrR9O+S/AazB7VaDwy4obDYbV9WtJXU
uOAzQRn+iIeqZYdN0+LeK8y99jIMi9JPn7mudP8VGa5nr9RGsG7XFZRptfddhBKY
YkH3gGORkR8nwD8uUHvstt8z0NpHL57X07qLTlGLlX9QR7ot0NpchKLnRw2CMGLr
9g1MyGbfbVPj0JqQVFLW0zY8Cg8N77NO0Cc5Q1q2cdZfCWhALe+wGv7/aBTrS/ah
SLEqqRnbJbMIvpxoF8utDgFw+cIzu8NwI+n/Z6f9eEmZGuBx2EGiAEFz2yRLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFORedqoTp3FIPEp2Si2qMgva0rIwHwYDVR0j
BBgwFoAU1xhZ4+mi3dSm/8gEPBqP464eB+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWliOVZxNEtQSjllOUZIZFBWU2pjenp4cmhNRzI1Q2Z0TU51RjQ2WGRB
NW0vMC9ENzE4NTlFM0U5QTJEREQ0QTZGRkM4MDQzQzFBOEZFM0FFMUUwN0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3MTg1OUUzRTlBMkRERDRB
NkZGQzgwNDNDMUE4RkUzQUUxRTA3RTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpYjlWcTRLUEo5ZTlGSGRQVlNqY3p6eHJoTUcyNUNmdE1OdUY0NlhkQTVtLzAv
MzQzNTJlMzEzODM3MmUzMTM3MzMyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzkzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtu60wDQYJKoZIhvcNAQELBQADggEBAL3VbEfP
ESuKJrWSNXTz97/EUKfvq1RaArSHVGgxSv2PBMogy2unzVTS6W0FOTNE5ajDoDae
C3ECoQAyI9THdlwLutAcfORYMYjVRuK6ZnUfIUJEwvxzGJDY6tIqEe/RVD36oxt+
IrD+m+Y/J+kJNnXWelvGSDAz09jYpYyhw8BZk5mDawyyFXcMdy7yOk405a6tjJ9n
a3OPUqhoxjrzIPdCh+SY1t2nCoJycRevrcNZuqw7pcQvEs+snSSSyf1K0yuSYs6g
ARvr5QJg4Qvc3cfjZNztIk3ol8+/YhuJdoxiC13cKDVvS51ETW+SXCSUJtW7OBZ+
kpMpd+7xzCUjMJQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org