Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa
File:                     34352e3136332e39362e302f32322d3234203d3e20323638353535.roa (raw, json)
Hash identifier:          vT7PGPKgrgpvufp57a8mRcfP4OT4+N/uThTA1SvsBWY=
Subject key identifier:   4C:CA:1D:52:E9:82:C2:C2:81:43:11:21:C3:7B:C1:26:5E:D3:E0:9A
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       6D726C6E14C5CA7ADC470E8EC39F212FE24C9F14
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa
Signing time:             Sat 20 Jan 2024 18:53:49 +0000
ROA not before:           Sat 20 Jan 2024 18:48:49 +0000
ROA not after:            Sat 18 Jan 2025 18:53:49 +0000
asID:                     268555
IP address blocks:        45.163.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:72:6c:6e:14:c5:ca:7a:dc:47:0e:8e:c3:9f:21:2f:e2:4c:9f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:48:49 2024 GMT
            Not After : Jan 18 18:53:49 2025 GMT
        Subject: CN=4CCA1D52E982C2C281431121C37BC1265ED3E09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:ca:96:40:66:a5:f5:51:d2:09:82:4e:3b:
                    e9:a3:97:ea:8e:23:2d:ca:a8:2d:81:b1:64:d6:7f:
                    1f:36:96:30:3d:26:bc:db:e6:c6:83:95:40:9f:40:
                    a3:f2:58:8d:66:be:4f:04:ea:6c:ae:64:e6:3b:93:
                    1a:dc:e2:7c:c2:e5:cb:73:9a:ca:5d:98:25:9a:ef:
                    8a:25:d9:ad:d4:af:bd:48:8f:30:12:de:9e:54:53:
                    31:c2:57:0a:e9:d3:ab:96:5f:d7:70:5d:17:74:c6:
                    d9:ba:3d:e2:fd:93:9c:0b:ec:5f:00:c4:13:3a:c2:
                    0a:2a:be:7c:2c:b4:49:2a:e3:0c:ee:9e:b4:c9:98:
                    5a:13:a5:b6:8e:da:c3:ef:a2:ad:81:52:b6:69:c5:
                    72:a3:f9:34:1f:a6:50:02:a3:e9:26:70:6b:0d:6c:
                    e6:08:08:a0:a7:15:88:ad:59:be:95:aa:a8:b4:fa:
                    b0:07:a6:a0:25:ed:ea:b6:61:8e:dc:9c:9e:8d:31:
                    2b:37:39:12:0f:73:77:c4:27:f3:7f:68:08:34:f6:
                    62:b1:15:8e:08:59:18:b9:1a:7b:4d:7e:6e:51:40:
                    24:25:2e:34:9c:2c:b1:61:bf:24:fa:ce:10:25:6c:
                    93:26:55:fd:f3:12:ec:bf:a8:0a:39:76:30:ff:61:
                    a1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CA:1D:52:E9:82:C2:C2:81:43:11:21:C3:7B:C1:26:5E:D3:E0:9A
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:e5:b6:9e:a0:f7:bb:2f:f8:cf:a6:80:80:16:d5:d8:b7:77:
         55:9e:4e:89:53:61:da:15:12:ee:76:e8:d5:db:36:b9:52:91:
         34:79:cc:73:c1:2f:65:df:5c:af:a7:88:9d:d3:d2:f3:b1:1d:
         e2:a9:6c:ae:77:44:29:6d:6e:92:81:6d:56:4d:e8:c2:da:3b:
         be:7d:ed:b4:7d:58:63:a8:c1:63:04:46:a1:0b:fd:cd:21:b0:
         16:85:92:9a:ad:55:a6:d1:25:29:fa:cf:e5:c6:2b:3b:c5:ed:
         cd:59:1a:11:c8:1b:f9:a0:c7:52:bf:bb:eb:c8:b2:e2:0c:1e:
         3e:6d:40:d0:df:35:53:51:34:a0:ef:b3:c9:60:e0:ea:7e:41:
         a1:0f:96:67:21:dc:d9:ee:3c:52:a7:71:0c:93:56:74:aa:40:
         5e:e8:14:29:68:eb:19:d7:87:a0:f7:df:66:e3:41:7c:a0:7d:
         dc:cf:57:02:35:4c:1d:46:3c:b0:56:d6:80:c0:ef:0e:12:39:
         f6:ef:e9:12:b8:88:cb:7d:ce:33:b1:87:68:48:50:d3:6f:ea:
         41:a5:da:30:22:ba:d2:78:bf:bc:c3:cb:c6:b2:70:17:ec:a3:
         28:0b:cb:a6:21:a2:d2:18:22:c0:df:4b:a4:83:79:29:13:9d:
         79:c9:ee:4d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbXJsbhTFynrcRw6Ow58hL+JMnxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2Qjc2NzdBQ0MzOUM3NkVGRDQ3QjYzNjE2QzVFQ0Y0
MDYwRTUyMTAeFw0yNDAxMjAxODQ4NDlaFw0yNTAxMTgxODUzNDlaMDMxMTAvBgNV
BAMTKDRDQ0ExRDUyRTk4MkMyQzI4MTQzMTEyMUMzN0JDMTI2NUVEM0UwOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBsqWQGal9VHSCYJOO+mjl+qO
Iy3KqC2BsWTWfx82ljA9Jrzb5saDlUCfQKPyWI1mvk8E6myuZOY7kxrc4nzC5ctz
mspdmCWa74ol2a3Ur71IjzAS3p5UUzHCVwrp06uWX9dwXRd0xtm6PeL9k5wL7F8A
xBM6wgoqvnwstEkq4wzunrTJmFoTpbaO2sPvoq2BUrZpxXKj+TQfplACo+kmcGsN
bOYICKCnFYitWb6Vqqi0+rAHpqAl7eq2YY7cnJ6NMSs3ORIPc3fEJ/N/aAg09mKx
FY4IWRi5GntNfm5RQCQlLjScLLFhvyT6zhAlbJMmVf3zEuy/qAo5djD/YaFvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTModUumCwsKBQxEhw3vBJl7T4JowHwYDVR0j
BBgwFoAUdWt2d6zDnHbv1HtjYWxez0Bg5SEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC83NTZCNzY3N0FDQzM5Qzc2RUZENDdCNjM2MTZDNUVDRjQwNjBFNTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1NkI3Njc3QUNDMzlDNzZF
RkQ0N0I2MzYxNkM1RUNGNDA2MEU1MjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzQzNTJlMzEzNjMzMmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaNgMA0GCSqGSIb3DQEBCwUAA4IBAQBL5baeoPe7
L/jPpoCAFtXYt3dVnk6JU2HaFRLudujV2za5UpE0ecxzwS9l31yvp4id09LzsR3i
qWyud0QpbW6SgW1WTejC2ju+fe20fVhjqMFjBEahC/3NIbAWhZKarVWm0SUp+s/l
xis7xe3NWRoRyBv5oMdSv7vryLLiDB4+bUDQ3zVTUTSg77PJYODqfkGhD5ZnIdzZ
7jxSp3EMk1Z0qkBe6BQpaOsZ14eg999m40F8oH3cz1cCNUwdRjywVtaAwO8OEjn2
7+kSuIjLfc4zsYdoSFDTb+pBpdowIrrSeL+8w8vGsnAX7KMoC8umIaLSGCLA30uk
g3kpE515ye5N
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org