Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3136362e3132342e302f32322d3232203d3e203238353830.roa
File:                     34352e3136362e3132342e302f32322d3232203d3e203238353830.roa (raw, json)
Hash identifier:          GtDxmK4CV1vfggLjTEAEqA8MA/0cmlsB5pgeRZBT9yM=
Subject key identifier:   CF:92:6A:48:5E:1B:48:02:FA:CB:51:DE:96:2C:7C:3F:FB:6F:21:7A
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       70FC2B8C75C15E3290C817FD1366685F2914B503
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3136362e3132342e302f32322d3232203d3e203238353830.roa
Signing time:             Thu 02 Mar 2023 11:30:46 +0000
ROA not before:           Thu 02 Mar 2023 11:25:46 +0000
ROA not after:            Thu 29 Feb 2024 11:30:46 +0000
asID:                     28580
IP address blocks:        45.166.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fc:2b:8c:75:c1:5e:32:90:c8:17:fd:13:66:68:5f:29:14:b5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Mar  2 11:25:46 2023 GMT
            Not After : Feb 29 11:30:46 2024 GMT
        Subject: CN=CF926A485E1B4802FACB51DE962C7C3FFB6F217A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:f2:28:53:cb:79:e0:a1:f7:9d:e6:84:78:
                    26:08:f7:f6:c9:2c:1f:d7:5f:29:70:75:c0:cb:e5:
                    95:17:af:06:3f:20:f4:87:6c:3f:c4:db:b6:c2:09:
                    d1:0b:0d:54:1b:10:25:28:db:a1:b1:84:af:74:d7:
                    99:1c:ca:54:e8:b1:df:17:ea:ad:1f:a7:82:f7:a5:
                    d1:20:be:0c:48:fb:b1:89:89:9d:33:11:b0:10:ce:
                    d6:ad:f2:ab:c4:e9:2d:f5:7b:4f:ee:2d:2e:94:38:
                    7f:0b:c4:cd:01:a5:eb:7f:a8:58:47:ff:30:9b:63:
                    e0:2b:04:4a:77:8f:b2:dc:ef:7a:53:7a:00:e1:ff:
                    14:49:24:92:1d:ed:44:4d:21:b4:7d:db:f9:e2:d8:
                    87:17:19:3b:fc:6d:a0:1a:1f:cd:af:c4:43:32:4d:
                    af:fc:67:29:11:52:8e:37:c2:28:20:5f:bf:aa:cf:
                    57:79:07:7a:ba:6d:05:1a:88:21:05:bb:26:76:ff:
                    71:91:3c:a0:5f:2c:65:47:c7:db:d8:2e:c9:85:96:
                    fa:87:d8:eb:e2:25:76:04:c0:74:b7:8a:11:f6:e4:
                    fb:a4:9a:d3:f9:ed:bb:f5:5b:ea:68:aa:88:fc:5c:
                    86:fb:06:ed:e1:a3:39:91:bb:39:74:c0:62:a5:f2:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:92:6A:48:5E:1B:48:02:FA:CB:51:DE:96:2C:7C:3F:FB:6F:21:7A
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3136362e3132342e302f32322d3232203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:2c:18:08:09:58:17:c5:0d:31:39:3e:9b:14:9a:40:ff:7b:
         9e:63:3c:f4:7a:69:89:5c:19:2d:3f:ef:e0:87:8c:fb:c6:24:
         93:f1:69:03:04:20:60:6d:ca:12:9b:c2:d7:f7:1b:0c:33:e3:
         a1:52:75:c8:b3:ab:ae:2e:e2:3c:0f:90:b8:cd:12:70:b9:ad:
         af:4a:2a:37:ca:76:7b:ad:5e:66:82:df:86:3e:75:55:d7:3c:
         fd:b7:77:c3:68:60:1d:cd:bc:01:9f:42:97:0a:c5:b7:97:2d:
         b1:8f:3b:52:88:81:15:61:12:4d:12:aa:bd:9c:7f:10:42:f3:
         08:f9:67:a2:3a:8d:b1:6e:6b:12:dd:b2:e3:26:b6:b3:9a:98:
         cc:2d:cd:4b:41:7c:3e:3c:b0:c3:ad:16:e9:66:c9:15:cb:5f:
         82:de:8f:66:c3:89:88:33:38:a8:4a:a8:30:7b:01:78:50:86:
         83:42:e1:6e:67:52:e8:d5:86:9c:35:ce:ab:01:36:e2:88:ec:
         53:2d:67:e7:ba:70:cb:b6:26:6d:eb:a6:1d:bc:6e:bb:5b:89:
         3b:81:49:fa:6a:0b:e9:aa:e2:6d:e1:07:0b:c1:69:ce:43:0c:
         a1:5d:2e:79:0e:70:02:d8:21:d3:32:7b:f1:4a:98:e5:2d:63:
         a4:53:1c:2e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcPwrjHXBXjKQyBf9E2ZoXykUtQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZFQUQ3OUVCM0M0RTMzRkI0OTQ4QUE4OEJGOUIzRURD
NTUxMUU2RDAeFw0yMzAzMDIxMTI1NDZaFw0yNDAyMjkxMTMwNDZaMDMxMTAvBgNV
BAMTKENGOTI2QTQ4NUUxQjQ4MDJGQUNCNTFERTk2MkM3QzNGRkI2RjIxN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzfIoU8t54KH3neaEeCYI9/bJ
LB/XXylwdcDL5ZUXrwY/IPSHbD/E27bCCdELDVQbECUo26GxhK9015kcylTosd8X
6q0fp4L3pdEgvgxI+7GJiZ0zEbAQztat8qvE6S31e0/uLS6UOH8LxM0Bpet/qFhH
/zCbY+ArBEp3j7Lc73pTegDh/xRJJJId7URNIbR92/ni2IcXGTv8baAaH82vxEMy
Ta/8ZykRUo43wiggX7+qz1d5B3q6bQUaiCEFuyZ2/3GRPKBfLGVHx9vYLsmFlvqH
2OviJXYEwHS3ihH25PukmtP57bv1W+poqoj8XIb7Bu3hozmRuzl0wGKl8pmzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUz5JqSF4bSAL6y1Helix8P/tvIXowHwYDVR0j
BBgwFoAUz+rXnrPE4z+0lIqoi/mz7cVRHm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlFuSlkzN3FkY1pyWUFhbWtTeUpoZ0tSM1BTcGp4a3FrWnA0cW5BNDlO
TVEvMC9DRkVBRDc5RUIzQzRFMzNGQjQ5NDhBQTg4QkY5QjNFREM1NTExRTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGRUFENzlFQjNDNEUzM0ZC
NDk0OEFBODhCRjlCM0VEQzU1MTFFNkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRbkpZMzdxZGNacllBYW1rU3lKaGdLUjNQU3BqeGtxa1pwNHFuQTQ5Tk1RLzAv
MzQzNTJlMzEzNjM2MmUzMTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaZ8MA0GCSqGSIb3DQEBCwUAA4IBAQADLBgICVgX
xQ0xOT6bFJpA/3ueYzz0emmJXBktP+/gh4z7xiST8WkDBCBgbcoSm8LX9xsMM+Oh
UnXIs6uuLuI8D5C4zRJwua2vSio3ynZ7rV5mgt+GPnVV1zz9t3fDaGAdzbwBn0KX
CsW3ly2xjztSiIEVYRJNEqq9nH8QQvMI+WeiOo2xbmsS3bLjJrazmpjMLc1LQXw+
PLDDrRbpZskVy1+C3o9mw4mIMzioSqgwewF4UIaDQuFuZ1Lo1YacNc6rATbiiOxT
LWfnunDLtiZt66YdvG67W4k7gUn6agvpquJt4QcLwWnOQwyhXS55DnAC2CHTMnvx
SpjlLWOkUxwu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org