Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131322e302f32342d3234203d3e20323639313139.roa
File:                     34352e3137392e3131322e302f32342d3234203d3e20323639313139.roa (raw, json)
Hash identifier:          Q3WGFK6ogn9Xty5Lo5D1IKT+t5r2LBUWMH/6bzS+gLE=
Subject key identifier:   35:C9:1C:D1:C3:1D:ED:8D:B0:74:13:10:2B:3E:E3:2A:B2:F2:71:51
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       77714FD17C3423B34AEFF0693DF57EBC78D069F1
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131322e302f32342d3234203d3e20323639313139.roa
Signing time:             Fri 22 Mar 2024 17:00:00 +0000
ROA not before:           Fri 22 Mar 2024 16:55:00 +0000
ROA not after:            Sat 22 Mar 2025 17:00:00 +0000
asID:                     269119
IP address blocks:        45.179.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:71:4f:d1:7c:34:23:b3:4a:ef:f0:69:3d:f5:7e:bc:78:d0:69:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: Mar 22 16:55:00 2024 GMT
            Not After : Mar 22 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:e9:2a:a6:b7:92:38:94:40:cb:4b:2e:d1:
                    44:d4:1c:2d:af:69:40:22:66:61:97:c3:a1:47:51:
                    b5:9a:fb:c1:4b:b7:81:65:c9:a5:af:22:eb:dd:dc:
                    95:e9:73:31:22:76:26:7a:93:ff:b8:e1:5e:cb:a2:
                    b5:da:08:d3:93:d4:c8:c5:49:18:ca:f0:db:41:f1:
                    0d:0c:2c:6e:49:b3:97:f1:95:60:52:9f:95:6c:41:
                    8f:3f:11:ce:9b:e6:52:ea:80:65:6a:97:28:c4:7a:
                    8e:b1:1c:36:1d:a4:c1:3a:db:e6:5b:1c:c9:c8:be:
                    eb:cf:38:1e:db:fd:c1:ee:04:64:24:40:b7:91:ba:
                    03:76:c4:06:1c:1f:07:56:13:d9:52:ec:a6:ac:b2:
                    fd:3c:02:68:77:a3:92:58:ed:50:5f:76:96:ee:4f:
                    ab:75:dd:5a:5b:8d:32:23:a8:9a:ff:95:10:a4:03:
                    3b:25:08:3f:21:e1:9f:56:9a:e6:a5:b9:b3:75:06:
                    a5:52:06:25:71:e1:e3:fd:7d:b0:4f:aa:8f:63:91:
                    36:e7:ec:da:38:dc:20:e0:44:ca:2a:52:7f:8d:21:
                    6e:87:40:07:45:4d:5b:e2:f9:66:b0:32:01:8a:02:
                    1c:2a:d2:2e:f0:c4:c5:9b:89:76:29:2b:e8:e0:db:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C9:1C:D1:C3:1D:ED:8D:B0:74:13:10:2B:3E:E3:2A:B2:F2:71:51
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131322e302f32342d3234203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:fc:64:30:80:71:3b:80:52:ce:16:13:80:02:c9:a1:3e:67:
         d8:db:9f:48:02:5f:fb:ce:cf:c5:71:a0:ef:25:c9:fb:65:40:
         af:22:20:df:b9:ce:73:8d:c2:35:26:15:49:bb:70:d4:06:21:
         d3:16:6a:2f:7d:8e:82:e5:ed:ac:3c:ae:67:85:9d:40:dc:1e:
         8e:5f:a1:b8:57:d6:5e:c0:a0:84:0a:a8:7e:92:07:32:3f:69:
         6a:d5:7f:e8:0c:96:64:0d:8d:11:75:38:df:47:46:55:41:f9:
         74:99:c8:88:4f:46:84:c4:86:bc:5d:4e:cd:5a:7e:09:ae:84:
         6e:a2:9f:46:5d:73:a5:13:d7:8e:39:bb:f5:b6:a7:02:39:d3:
         f2:35:22:dd:b1:92:a1:a8:86:d9:83:4d:dd:bc:8d:75:90:34:
         d8:b4:0b:8e:68:77:56:8f:0d:10:f2:42:fc:12:82:d4:14:c3:
         8a:4e:b5:11:78:2d:37:43:87:4a:e8:9e:f0:fd:08:a5:76:de:
         17:a6:62:9c:8e:1c:47:ba:3c:a8:96:fd:ce:59:40:87:8e:48:
         aa:0d:ad:9b:4e:2a:b8:00:27:b1:6c:a5:cd:7a:a7:a4:6e:75:
         85:95:08:ab:aa:1b:96:cb:ff:94:a0:ea:b7:37:a9:3e:c3:81:
         92:e7:e4:59
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUd3FP0Xw0I7NK7/BpPfV+vHjQafEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNFQjU4QzExREE0REEyNEQxQ0UzNThGQ0Y3REM5RTVG
Rjg5MUNFODAeFw0yNDAzMjIxNjU1MDBaFw0yNTAzMjIxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTdFNUU5MkFBNkI3OTIzODk0
NDBDQjRCMkVEMTQ0RDQxQzJEQUY2OTQwMjI2NjYxOTdDM0ExNDc1MUI1OUFGQkMx
NEJCNzgxNjVDOUE1QUYyMkVCREREQzk1RTk3MzMxMjI3NjI2N0E5M0ZGQjhFMTVF
Q0JBMkI1REEwOEQzOTNENEM4QzU0OTE4Q0FGMERCNDFGMTBEMEMyQzZFNDlCMzk3
RjE5NTYwNTI5Rjk1NkM0MThGM0YxMUNFOUJFNjUyRUE4MDY1NkE5NzI4QzQ3QThF
QjExQzM2MURBNEMxM0FEQkU2NUIxQ0M5QzhCRUVCQ0YzODFFREJGREMxRUUwNDY0
MjQ0MEI3OTFCQTAzNzZDNDA2MUMxRjA3NTYxM0Q5NTJFQ0E2QUNCMkZEM0MwMjY4
NzdBMzkyNThFRDUwNUY3Njk2RUU0RkFCNzVERDVBNUI4RDMyMjNBODlBRkY5NTEw
QTQwMzNCMjUwODNGMjFFMTlGNTY5QUU2QTVCOUIzNzUwNkE1NTIwNjI1NzFFMUUz
RkQ3REIwNEZBQThGNjM5MTM2RTdFQ0RBMzhEQzIwRTA0NENBMkE1MjdGOEQyMTZF
ODc0MDA3NDU0RDVCRTJGOTY2QjAzMjAxOEEwMjFDMkFEMjJFRjBDNEM1OUI4OTc2
MjkyQkU4RTBEQjg2QUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAl+XpKqa3kjiUQMtLLtFE1Bwtr2lAImZhl8OhR1G1mvvBS7eBZcml
ryLr3dyV6XMxInYmepP/uOFey6K12gjTk9TIxUkYyvDbQfENDCxuSbOX8ZVgUp+V
bEGPPxHOm+ZS6oBlapcoxHqOsRw2HaTBOtvmWxzJyL7rzzge2/3B7gRkJEC3kboD
dsQGHB8HVhPZUuymrLL9PAJod6OSWO1QX3aW7k+rdd1aW40yI6ia/5UQpAM7JQg/
IeGfVprmpbmzdQalUgYlceHj/X2wT6qPY5E25+zaONwg4ETKKlJ/jSFuh0AHRU1b
4vlmsDIBigIcKtIu8MTFm4l2KSvo4NuGqwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDXJHNHDHe2NsHQTECs+4yqy8nFRMB8GA1UdIwQYMBaAFJPrWMEdpNok0c41j899
yeX/iRzoMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhrZ3RpZWZ5YUI3bzNk
RUZVbVJTdjNMaTdYTEhoamtxUjRiV1JmTVVyeEFFLzAvOTNFQjU4QzExREE0REEy
NEQxQ0UzNThGQ0Y3REM5RTVGRjg5MUNFOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85M0VCNThDMTFEQTREQTI0RDFDRTM1OEZDRjdEQzlFNUZGODkx
Q0U4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84a2d0aWVmeWFCN28zZEVGVW1S
U3YzTGk3WExIaGprcVI0YldSZk1VcnhBRS8wLzM0MzUyZTMxMzczOTJlMzEzMTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzEzMTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LbNwMA0GCSqGSIb3DQEBCwUAA4IBAQC8/GQwgHE7gFLOFhOAAsmhPmfY259IAl/7
zs/FcaDvJcn7ZUCvIiDfuc5zjcI1JhVJu3DUBiHTFmovfY6C5e2sPK5nhZ1A3B6O
X6G4V9ZewKCECqh+kgcyP2lq1X/oDJZkDY0RdTjfR0ZVQfl0mciIT0aExIa8XU7N
Wn4JroRuop9GXXOlE9eOObv1tqcCOdPyNSLdsZKhqIbZg03dvI11kDTYtAuOaHdW
jw0Q8kL8EoLUFMOKTrUReC03Q4dK6J7w/Qildt4XpmKcjhxHujyolv3OWUCHjkiq
Da2bTiq4ACexbKXNeqekbnWFlQirqhuWy/+UoOq3N6k+w4GS5+RZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org