Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35352e302f32342d3234203d3e20323638373038.roa
File:                     34352e3137312e35352e302f32342d3234203d3e20323638373038.roa (raw, json)
Hash identifier:          ++cX+8gUfT5d1mDGsMKbBVwErE0mgDREANCwstWuY7A=
Subject key identifier:   2E:E8:79:02:C8:76:70:25:2E:66:73:3A:72:A6:80:F4:E9:23:A7:34
Certificate issuer:       /CN=0F2CCFC527502386B95CBF037663832D454D8363
Certificate serial:       452AA5C8AFF14497D7A08E9743782289F3169F0B
Authority key identifier: 0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35352e302f32342d3234203d3e20323638373038.roa
Signing time:             Mon 04 Dec 2023 18:03:02 +0000
ROA not before:           Mon 04 Dec 2023 17:58:02 +0000
ROA not after:            Mon 02 Dec 2024 18:03:02 +0000
asID:                     268708
IP address blocks:        45.171.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2a:a5:c8:af:f1:44:97:d7:a0:8e:97:43:78:22:89:f3:16:9f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2CCFC527502386B95CBF037663832D454D8363
        Validity
            Not Before: Dec  4 17:58:02 2023 GMT
            Not After : Dec  2 18:03:02 2024 GMT
        Subject: CN=2EE87902C87670252E66733A72A680F4E923A734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:85:7d:2c:dc:2b:7f:7e:0f:c5:dd:04:88:
                    2b:f7:64:e2:c0:da:48:3a:76:ba:5c:c4:18:ca:cd:
                    2c:ab:92:89:59:55:bb:28:a1:be:05:31:eb:d1:a7:
                    8c:a9:ea:c9:76:dc:ce:68:6c:93:9d:ad:39:ec:2d:
                    06:46:63:6c:22:95:f9:2a:24:6b:df:7b:43:ba:02:
                    66:bb:e9:1f:13:52:ba:75:6b:b9:3d:34:47:bb:c5:
                    2e:d9:64:b3:bb:ed:00:6f:4f:cc:2e:0d:77:7a:d8:
                    c8:bd:40:ef:87:89:69:3a:09:e6:66:64:f2:00:39:
                    f3:40:1f:be:ab:0d:59:0d:1a:d5:85:1f:85:e1:e0:
                    1e:60:b8:f6:15:68:7f:32:2c:b4:90:c8:fe:bc:1f:
                    63:91:f9:a6:aa:17:95:3d:c2:9c:4b:97:67:80:d2:
                    c0:36:16:06:18:dd:c0:34:71:1d:23:a8:29:c7:c3:
                    ef:48:50:c2:73:6c:0f:d6:87:9d:e3:9a:55:4e:6c:
                    00:6c:0f:6a:be:48:c6:bd:17:fc:e8:0e:df:9b:59:
                    88:1f:12:48:1e:a7:5e:e5:80:4c:a0:1b:e2:a7:65:
                    ea:3e:35:be:53:c5:6e:f7:dc:98:e9:bb:0f:e2:4c:
                    ae:d6:9a:87:a8:b5:75:3e:c2:d4:3f:38:94:cf:1e:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:79:02:C8:76:70:25:2E:66:73:3A:72:A6:80:F4:E9:23:A7:34
            X509v3 Authority Key Identifier:
                keyid:0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/0F2CCFC527502386B95CBF037663832D454D8363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35352e302f32342d3234203d3e20323638373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ff:eb:aa:7b:e6:61:29:58:e1:29:73:bd:e7:6e:60:b8:cc:
         78:bc:b6:ad:e8:6a:bf:03:72:00:aa:9e:f2:4c:02:4d:93:34:
         55:10:98:28:e8:77:4d:39:43:4f:a0:dd:c5:ad:7b:46:79:82:
         7d:44:39:6e:e9:b4:f6:79:2c:b5:bd:9b:32:8f:b4:f1:40:7e:
         b2:86:d3:a0:3e:4d:65:10:33:33:ac:d2:ba:ec:96:e3:ab:3a:
         c1:8a:c0:fe:09:bc:54:61:a3:b4:82:58:91:5e:4d:3b:16:08:
         df:1f:1b:ac:8b:cf:29:b7:50:80:04:9e:0e:90:d1:61:15:c5:
         d2:7f:ec:f8:66:93:4e:31:0e:0d:0d:be:a4:51:39:87:2e:9f:
         fd:61:51:f3:18:5d:19:0a:1a:29:41:53:77:39:a3:d4:7e:4c:
         70:c4:6a:be:32:20:46:ed:ae:46:4f:59:d9:dd:31:f6:11:5e:
         11:3a:a0:dd:a1:f1:f7:40:e3:6d:22:b8:0f:1f:78:5c:23:aa:
         8a:90:c7:d2:6b:8f:1c:14:73:1d:16:e2:bb:a5:ea:7e:19:19:
         40:dc:38:29:54:ef:64:bc:a1:fd:10:54:1d:ea:df:fb:21:f6:
         b9:ac:54:cd:fc:43:b8:a6:ab:23:be:67:8e:78:29:7c:54:f4:
         45:f6:71:75
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURSqlyK/xRJfXoI6XQ3giifMWnwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyQ0NGQzUyNzUwMjM4NkI5NUNCRjAzNzY2MzgzMkQ0
NTREODM2MzAeFw0yMzEyMDQxNzU4MDJaFw0yNDEyMDIxODAzMDJaMDMxMTAvBgNV
BAMTKDJFRTg3OTAyQzg3NjcwMjUyRTY2NzMzQTcyQTY4MEY0RTkyM0E3MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVJ4V9LNwrf34Pxd0EiCv3ZOLA
2kg6drpcxBjKzSyrkolZVbsoob4FMevRp4yp6sl23M5obJOdrTnsLQZGY2wilfkq
JGvfe0O6Ama76R8TUrp1a7k9NEe7xS7ZZLO77QBvT8wuDXd62Mi9QO+HiWk6CeZm
ZPIAOfNAH76rDVkNGtWFH4Xh4B5guPYVaH8yLLSQyP68H2OR+aaqF5U9wpxLl2eA
0sA2FgYY3cA0cR0jqCnHw+9IUMJzbA/Wh53jmlVObABsD2q+SMa9F/zoDt+bWYgf
Ekgep17lgEygG+KnZeo+Nb5TxW733Jjpuw/iTK7WmoeotXU+wtQ/OJTPHpsLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULuh5Ash2cCUuZnM6cqaA9OkjpzQwHwYDVR0j
BBgwFoAUDyzPxSdQI4a5XL8DdmODLUVNg2MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTFDTTFNRDYxUXdEcUpVeHhNREJWeW1FUVl2elZMZVI2UndNSld2WE01
TXQvMC8wRjJDQ0ZDNTI3NTAyMzg2Qjk1Q0JGMDM3NjYzODMyRDQ1NEQ4MzYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBGMkNDRkM1Mjc1MDIzODZC
OTVDQkYwMzc2NjM4MzJENDU0RDgzNjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxQ00xTUQ2MVF3RHFKVXh4TURCVnltRVFZdnpWTGVSNlJ3TUpXdlhNNU10LzAv
MzQzNTJlMzEzNzMxMmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzczMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALas3MA0GCSqGSIb3DQEBCwUAA4IBAQCu/+uqe+Zh
KVjhKXO9525guMx4vLat6Gq/A3IAqp7yTAJNkzRVEJgo6HdNOUNPoN3FrXtGeYJ9
RDlu6bT2eSy1vZsyj7TxQH6yhtOgPk1lEDMzrNK67JbjqzrBisD+CbxUYaO0gliR
Xk07FgjfHxusi88pt1CABJ4OkNFhFcXSf+z4ZpNOMQ4NDb6kUTmHLp/9YVHzGF0Z
ChopQVN3OaPUfkxwxGq+MiBG7a5GT1nZ3TH2EV4ROqDdofH3QONtIrgPH3hcI6qK
kMfSa48cFHMdFuK7pep+GRlA3DgpVO9kvKH9EFQd6t/7Ifa5rFTN/EO4pqsjvmeO
eCl8VPRF9nF1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org