Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234392e302f32342d3234203d3e20323638373239.roa
File:                     34352e3137312e3234392e302f32342d3234203d3e20323638373239.roa (raw, json)
Hash identifier:          fqWUMlvvqY4AHAbwPl829LFUz4kI13b6rJykMdvzTJM=
Subject key identifier:   BA:2D:11:83:EE:53:D9:53:E8:3F:3A:77:AD:49:45:DF:06:DA:E3:EE
Certificate issuer:       /CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
Certificate serial:       6F70E3868E5B3B7FAA8893870B4BB156E42367F5
Authority key identifier: 8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234392e302f32342d3234203d3e20323638373239.roa
Signing time:             Tue 26 Dec 2023 16:59:33 +0000
ROA not before:           Tue 26 Dec 2023 16:54:33 +0000
ROA not after:            Tue 24 Dec 2024 16:59:33 +0000
asID:                     268729
IP address blocks:        45.171.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:70:e3:86:8e:5b:3b:7f:aa:88:93:87:0b:4b:b1:56:e4:23:67:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
        Validity
            Not Before: Dec 26 16:54:33 2023 GMT
            Not After : Dec 24 16:59:33 2024 GMT
        Subject: CN=BA2D1183EE53D953E83F3A77AD4945DF06DAE3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:60:8d:97:3a:90:e6:48:72:93:8b:f7:72:
                    4d:f8:47:22:ea:90:29:88:11:13:fb:fc:b5:1a:56:
                    dc:bb:e7:1e:cb:84:d8:aa:9b:17:46:7d:1b:89:99:
                    f4:be:cc:bf:da:eb:5e:bc:f9:8e:b7:1d:d2:30:97:
                    a8:ea:d4:94:5f:94:87:d6:dc:ba:fc:31:7b:d2:a4:
                    82:35:f5:94:6a:b6:6c:45:25:e6:f0:ed:6f:4b:8d:
                    78:ad:19:3f:10:51:cb:1d:a0:dd:58:eb:b9:71:f6:
                    60:8b:f1:55:5f:6d:fc:03:50:6f:57:ee:f1:40:f4:
                    d8:d2:68:18:11:f9:d3:0b:32:9c:2a:11:68:10:99:
                    49:90:36:82:11:56:7e:c4:69:1e:30:fc:f0:81:d7:
                    d9:81:94:dc:9a:8d:0c:39:61:b9:77:02:8a:f1:3e:
                    f3:ed:9c:ed:6d:49:f2:3e:47:6f:e2:5c:78:20:e0:
                    78:14:4b:37:76:92:05:63:4d:42:46:aa:34:fb:9e:
                    08:f6:66:ea:be:e6:a5:b9:c4:a1:82:f0:17:2a:63:
                    c7:9c:3a:6d:e7:38:0e:eb:ab:f7:96:09:19:6e:a8:
                    6c:e7:3b:67:51:c1:7b:14:c8:0e:24:36:14:60:68:
                    d4:1b:45:75:bd:77:f7:44:cb:4d:05:40:be:1a:28:
                    04:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2D:11:83:EE:53:D9:53:E8:3F:3A:77:AD:49:45:DF:06:DA:E3:EE
            X509v3 Authority Key Identifier:
                keyid:8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234392e302f32342d3234203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:f1:61:ee:2f:a6:ca:f8:15:28:10:5b:33:61:3c:4d:44:
         01:ca:30:35:68:f9:b8:6a:33:27:db:84:a7:df:2a:be:8a:f3:
         76:a9:7e:f2:67:0d:0e:bd:1a:bd:09:91:5f:3c:64:2a:7d:76:
         8c:14:2f:d2:a7:e6:0c:f4:c6:2f:a3:68:63:1a:ee:2d:8d:6f:
         09:e1:f7:f4:69:2f:60:c8:ad:63:3f:4e:be:4a:2f:aa:da:1a:
         01:6d:e2:c8:7b:b0:37:69:2b:ec:7d:61:0c:16:27:6d:83:53:
         6e:f5:b9:e5:f3:3f:10:67:0d:98:b7:c0:a1:3e:61:d7:18:c8:
         a7:c8:7b:a1:18:0f:b9:cd:04:da:21:49:4a:37:61:b3:f8:4f:
         08:c5:c5:60:83:23:ff:71:74:75:ed:4a:0c:67:93:8b:db:ae:
         57:41:bd:75:31:11:d9:95:3e:54:f5:e9:9a:78:01:55:90:f4:
         7a:27:3c:b5:6b:64:f3:6a:f1:e6:c3:cb:2c:5f:c3:1f:3a:39:
         03:6e:a4:86:12:69:87:52:ed:12:b7:59:f5:17:3d:15:5c:9d:
         fb:46:e0:20:4d:c4:7c:71:8a:fb:c8:f4:8d:0f:ff:b0:79:e6:
         a5:1c:90:2a:1e:f7:a1:b4:ba:3a:a8:83:bf:8f:a4:d7:c1:80:
         d8:c3:34:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb3Djho5bO3+qiJOHC0uxVuQjZ/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVERTlFOEZCRjczQzZEOEZFQzNGN0Q4MkRFRjFFMUIy
QjA0QUVEMTAeFw0yMzEyMjYxNjU0MzNaFw0yNDEyMjQxNjU5MzNaMDMxMTAvBgNV
BAMTKEJBMkQxMTgzRUU1M0Q5NTNFODNGM0E3N0FENDk0NURGMDZEQUUzRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IWCNlzqQ5khyk4v3ck34RyLq
kCmIERP7/LUaVty75x7LhNiqmxdGfRuJmfS+zL/a6168+Y63HdIwl6jq1JRflIfW
3Lr8MXvSpII19ZRqtmxFJebw7W9LjXitGT8QUcsdoN1Y67lx9mCL8VVfbfwDUG9X
7vFA9NjSaBgR+dMLMpwqEWgQmUmQNoIRVn7EaR4w/PCB19mBlNyajQw5Ybl3Aorx
PvPtnO1tSfI+R2/iXHgg4HgUSzd2kgVjTUJGqjT7ngj2Zuq+5qW5xKGC8BcqY8ec
Om3nOA7rq/eWCRluqGznO2dRwXsUyA4kNhRgaNQbRXW9d/dEy00FQL4aKAR/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUui0Rg+5T2VPoPzp3rUlF3wba4+4wHwYDVR0j
BBgwFoAUjt6ej79zxtj+w/fYLe8eGysErtEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZTZ3NiOU53UDJCdmdMZDhhMVlVOUJ2c25UaFVLc1AyYWNKNGVOWXc2
YXkvMC84RURFOUU4RkJGNzNDNkQ4RkVDM0Y3RDgyREVGMUUxQjJCMDRBRUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhFREU5RThGQkY3M0M2RDhG
RUMzRjdEODJERUYxRTFCMkIwNEFFRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGU2dzYjlOd1AyQnZnTGQ4YTFZVTlCdnNuVGhVS3NQMmFjSjRlTll3NmF5LzAv
MzQzNTJlMzEzNzMxMmUzMjM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtq/kwDQYJKoZIhvcNAQELBQADggEBAFP+8WHu
L6bK+BUoEFszYTxNRAHKMDVo+bhqMyfbhKffKr6K83apfvJnDQ69Gr0JkV88ZCp9
dowUL9Kn5gz0xi+jaGMa7i2Nbwnh9/RpL2DIrWM/Tr5KL6raGgFt4sh7sDdpK+x9
YQwWJ22DU271ueXzPxBnDZi3wKE+YdcYyKfIe6EYD7nNBNohSUo3YbP4TwjFxWCD
I/9xdHXtSgxnk4vbrldBvXUxEdmVPlT16Zp4AVWQ9HonPLVrZPNq8ebDyyxfwx86
OQNupIYSaYdS7RK3WfUXPRVcnftG4CBNxHxxivvI9I0P/7B55qUckCoe96G0ujqo
g7+PpNfBgNjDNOU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org