Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa
File:                     34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa (raw, json)
Hash identifier:          xZndhwI3sYdoDPLykGtK8bI9knI9OvF0aoQA3lcuO6w=
Subject key identifier:   F7:25:B3:E9:82:28:24:ED:04:AE:E3:76:4B:51:91:D9:4D:A1:D4:C8
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       43CB8F3868A5AB34F57B6E8A17152183EDCB6CAC
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 18:00:00 +0000
ROA not before:           Wed 17 Jan 2024 17:55:00 +0000
ROA not after:            Wed 15 Jan 2025 18:00:00 +0000
asID:                     268568
IP address blocks:        45.163.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cb:8f:38:68:a5:ab:34:f5:7b:6e:8a:17:15:21:83:ed:cb:6c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:55:00 2024 GMT
            Not After : Jan 15 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:20:c4:9a:a6:2d:95:cf:1b:1f:21:8e:a8:
                    cc:36:c1:17:af:fe:f4:d5:22:f5:02:90:0d:fb:af:
                    bc:e5:16:39:1b:8f:27:df:f5:ca:1f:ed:23:32:fa:
                    bd:f9:78:6a:cd:35:a7:b9:66:61:57:e2:ef:3a:1e:
                    7e:13:3d:a5:e8:ea:78:e2:36:d2:86:7c:41:7d:2e:
                    7b:e3:54:c7:5e:c7:12:c3:33:9b:5f:ca:e6:f1:4e:
                    d9:ff:28:b4:4f:9a:26:bd:8d:94:ae:68:95:fb:e1:
                    43:09:d3:db:60:da:bd:19:34:dc:4c:aa:75:0b:45:
                    30:50:5e:70:59:f4:53:b8:5f:bc:b9:0c:25:05:68:
                    26:35:9f:c8:89:b5:52:46:8a:d2:af:4b:e7:aa:18:
                    90:a5:d6:3d:a8:5d:6a:94:a6:b6:74:25:ba:75:9f:
                    63:74:0c:13:d8:ca:6d:99:8d:e1:33:cd:e3:9f:93:
                    10:fd:41:a3:79:13:90:9d:d9:66:c9:33:29:20:27:
                    37:6a:e4:d2:12:09:3b:db:15:fd:03:ba:ac:14:0f:
                    84:e7:92:c5:00:ae:04:5b:f8:ac:0c:d4:21:99:3c:
                    af:63:a1:35:fa:77:6e:a7:ae:41:2a:04:4c:d3:71:
                    cc:6d:6a:70:4d:83:3f:54:c3:17:d4:83:6c:af:c8:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:B3:E9:82:28:24:ED:04:AE:E3:76:4B:51:91:D9:4D:A1:D4:C8
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:5e:e5:98:59:77:b6:04:78:81:f6:5d:35:62:0b:c9:27:44:
         9a:d9:44:62:7e:17:aa:aa:05:d9:fe:d9:85:51:cc:9c:ba:35:
         81:c3:d7:14:da:7d:09:9f:23:7f:58:59:80:c2:31:fb:ab:8e:
         f5:b0:50:05:d9:1b:28:fe:df:8a:50:fe:41:50:1a:c5:b1:3c:
         5a:07:55:b0:5a:1f:7b:cc:62:fc:18:a2:53:61:b1:cf:f8:5a:
         2a:6f:aa:b1:ee:56:5f:9b:a0:2f:e0:64:b5:6c:29:4d:05:00:
         5e:83:c0:ee:c7:21:45:36:00:19:40:85:b0:2f:58:d6:b9:07:
         ca:ca:9e:79:df:03:8d:4d:89:a4:6a:2d:bf:fe:14:1b:74:ac:
         e3:ec:e1:c1:11:7c:92:47:62:4f:76:71:fe:e0:54:e0:52:53:
         2d:24:30:a4:11:bd:64:03:b9:89:4c:78:03:a5:9a:60:be:78:
         d7:12:f0:35:0a:56:5e:5a:09:3b:df:ac:28:f4:32:f4:a9:c5:
         0a:9b:cc:ae:b4:48:9a:9b:e2:de:76:e3:c5:5f:fe:d6:b8:da:
         20:96:4a:8d:47:2e:d5:1b:88:23:ec:01:ea:10:1e:75:52:0f:
         76:f3:e0:ba:cd:49:40:d7:6f:1e:f2:82:96:dc:f5:20:4e:43:
         c5:ae:94:c5
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUQ8uPOGilqzT1e26KFxUhg+3LbKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YxODRFMjRDNkY5RURBNDAwMzc0MzNDRTg4MEFCNkFG
NzlCQUExODAeFw0yNDAxMTcxNzU1MDBaFw0yNTAxMTUxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc3RTIwQzQ5QUE2MkQ5NUNG
MUIxRjIxOEVBOENDMzZDMTE3QUZGRUY0RDUyMkY1MDI5MDBERkJBRkJDRTUxNjM5
MUI4RjI3REZGNUNBMUZFRDIzMzJGQUJERjk3ODZBQ0QzNUE3Qjk2NjYxNTdFMkVG
M0ExRTdFMTMzREE1RThFQTc4RTIzNkQyODY3QzQxN0QyRTdCRTM1NEM3NUVDNzEy
QzMzMzlCNUZDQUU2RjE0RUQ5RkYyOEI0NEY5QTI2QkQ4RDk0QUU2ODk1RkJFMTQz
MDlEM0RCNjBEQUJEMTkzNERDNENBQTc1MEI0NTMwNTA1RTcwNTlGNDUzQjg1RkJD
QjkwQzI1MDU2ODI2MzU5RkM4ODlCNTUyNDY4QUQyQUY0QkU3QUExODkwQTVENjNE
QTg1RDZBOTRBNkI2NzQyNUJBNzU5RjYzNzQwQzEzRDhDQTZEOTk4REUxMzNDREUz
OUY5MzEwRkQ0MUEzNzkxMzkwOUREOTY2QzkzMzI5MjAyNzM3NkFFNEQyMTIwOTNC
REIxNUZEMDNCQUFDMTQwRjg0RTc5MkM1MDBBRTA0NUJGOEFDMENENDIxOTkzQ0FG
NjNBMTM1RkE3NzZFQTdBRTQxMkEwNDRDRDM3MUNDNkQ2QTcwNEQ4MzNGNTRDMzE3
RDQ4MzZDQUZDOENDQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt34gxJqmLZXPGx8hjqjMNsEXr/701SL1ApAN+6+85RY5G48n3/XK
H+0jMvq9+XhqzTWnuWZhV+LvOh5+Ez2l6Op44jbShnxBfS5741THXscSwzObX8rm
8U7Z/yi0T5omvY2UrmiV++FDCdPbYNq9GTTcTKp1C0UwUF5wWfRTuF+8uQwlBWgm
NZ/IibVSRorSr0vnqhiQpdY9qF1qlKa2dCW6dZ9jdAwT2MptmY3hM83jn5MQ/UGj
eROQndlmyTMpICc3auTSEgk72xX9A7qsFA+E55LFAK4EW/isDNQhmTyvY6E1+ndu
p65BKgRM03HMbWpwTYM/VMMX1INsr8jMuQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPcls+mCKCTtBK7jdktRkdlNodTIMB8GA1UdIwQYMBaAFH8YTiTG+e2kADdDPOiA
q2r3m6oYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlIanRnOWR2RFU3U0hS
aUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzAvN0YxODRFMjRDNkY5RURB
NDAwMzc0MzNDRTg4MEFCNkFGNzlCQUExOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83RjE4NEUyNEM2RjlFREE0MDAzNzQzM0NFODgwQUI2QUY3OUJB
QTE4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SGp0ZzlkdkRVN1NIUmlLdG91
N3M4czl5YkNWTk5pM0p0Q3hXQ0d6QVl6bi8wLzM0MzUyZTMxMzYzMzJlMzEzNDM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzUzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LaOSMA0GCSqGSIb3DQEBCwUAA4IBAQBNXuWYWXe2BHiB9l01YgvJJ0Sa2URifheq
qgXZ/tmFUcycujWBw9cU2n0JnyN/WFmAwjH7q471sFAF2Rso/t+KUP5BUBrFsTxa
B1WwWh97zGL8GKJTYbHP+Foqb6qx7lZfm6Av4GS1bClNBQBeg8DuxyFFNgAZQIWw
L1jWuQfKyp553wONTYmkai2//hQbdKzj7OHBEXySR2JPdnH+4FTgUlMtJDCkEb1k
A7mJTHgDpZpgvnjXEvA1ClZeWgk736wo9DL0qcUKm8yutEiam+LeduPFX/7WuNog
lkqNRy7VG4gj7AHqEB51Ug928+C6zUlA128e8oKW3PUgTkPFrpTF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org