Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPN1JjWezMLNgGD2G5tqMd2Gzg5FEHvGTNp35hhGgx8q/0/3137392e34332e32332e302f32342d3234203d3e20323730383437.roa
File:                     3137392e34332e32332e302f32342d3234203d3e20323730383437.roa (raw, json)
Hash identifier:          FwlcSz8zE2r+eUKCJ7gjFFVgLPUEeCK+OkrZRD04pec=
Subject key identifier:   29:F8:AD:C8:4A:C1:77:88:11:E7:82:78:EC:A8:F0:E5:14:2D:46:E4
Certificate issuer:       /CN=C80AE066544790CE90A3B1D268F54E82538AAF46
Certificate serial:       6DEB32E405483067042D169DB20BB483906BE000
Authority key identifier: C8:0A:E0:66:54:47:90:CE:90:A3:B1:D2:68:F5:4E:82:53:8A:AF:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C80AE066544790CE90A3B1D268F54E82538AAF46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPN1JjWezMLNgGD2G5tqMd2Gzg5FEHvGTNp35hhGgx8q/0/3137392e34332e32332e302f32342d3234203d3e20323730383437.roa
Signing time:             Thu 18 Jul 2024 21:12:31 +0000
ROA not before:           Thu 18 Jul 2024 21:07:31 +0000
ROA not after:            Thu 17 Jul 2025 21:12:31 +0000
asID:                     270847
IP address blocks:        179.43.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:eb:32:e4:05:48:30:67:04:2d:16:9d:b2:0b:b4:83:90:6b:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C80AE066544790CE90A3B1D268F54E82538AAF46
        Validity
            Not Before: Jul 18 21:07:31 2024 GMT
            Not After : Jul 17 21:12:31 2025 GMT
        Subject: CN=29F8ADC84AC1778811E78278ECA8F0E5142D46E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:41:50:19:3a:9c:d4:05:92:a1:f0:7e:97:
                    f1:93:63:49:26:0c:cc:8c:52:9a:68:19:46:a8:ce:
                    19:9b:d0:49:d5:e4:44:a7:1a:47:3c:4c:5e:c3:ec:
                    7a:bd:99:e4:d1:69:35:ad:2c:8e:7f:27:0b:6f:ce:
                    b9:20:a0:ca:b1:8e:69:ea:0d:bf:7a:c8:ec:ee:96:
                    ac:4e:bc:52:5d:c9:6d:d7:f2:cc:0b:18:ed:e7:79:
                    25:df:53:35:b3:c2:78:f2:c2:53:8e:62:23:45:1b:
                    6d:b1:1a:ec:c4:22:e2:17:2f:b8:a8:5c:64:3e:fd:
                    49:41:fa:10:38:0f:50:29:88:9a:34:37:0b:1a:0a:
                    d5:ba:1e:01:e2:ac:1b:ff:eb:4e:79:eb:04:d3:39:
                    2e:b3:62:51:61:71:d2:5d:68:85:3d:7e:50:6e:6d:
                    bd:d1:76:2c:53:a4:b6:a4:c9:f6:99:68:b7:9a:70:
                    f3:6f:31:a5:42:bb:6a:eb:59:cf:f7:de:2f:75:13:
                    d8:2e:c4:56:ad:d7:f3:98:aa:02:13:64:59:8e:b8:
                    67:27:94:90:eb:d2:a3:a6:3e:68:07:dd:46:97:1f:
                    08:dc:3f:68:54:2a:8a:48:95:f0:7d:b4:7b:f7:53:
                    a1:bd:6b:0e:e4:c7:a6:ea:f4:08:15:6c:bc:cc:05:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F8:AD:C8:4A:C1:77:88:11:E7:82:78:EC:A8:F0:E5:14:2D:46:E4
            X509v3 Authority Key Identifier:
                keyid:C8:0A:E0:66:54:47:90:CE:90:A3:B1:D2:68:F5:4E:82:53:8A:AF:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPN1JjWezMLNgGD2G5tqMd2Gzg5FEHvGTNp35hhGgx8q/0/C80AE066544790CE90A3B1D268F54E82538AAF46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C80AE066544790CE90A3B1D268F54E82538AAF46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPN1JjWezMLNgGD2G5tqMd2Gzg5FEHvGTNp35hhGgx8q/0/3137392e34332e32332e302f32342d3234203d3e20323730383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f1:4e:12:34:03:ce:dc:4d:0b:5b:21:c4:88:60:f5:45:f2:
         8f:c6:7e:b9:50:f8:83:93:b5:e4:37:de:18:fd:1c:1a:9a:f5:
         7a:c2:ed:93:ce:17:7d:d4:7c:cf:ae:48:23:e3:e8:14:6f:37:
         93:23:da:b8:74:96:c0:2e:a6:68:41:4d:2c:59:79:14:bc:b9:
         93:67:ce:82:52:6b:0a:71:6b:c6:00:72:e5:84:00:75:59:b5:
         29:7a:7e:01:af:5d:d2:4c:89:be:ef:3b:ec:13:1e:13:5d:f2:
         b1:d9:30:34:0a:1a:d7:27:90:54:50:a4:ac:03:b0:d6:dd:7b:
         c5:4b:dd:db:29:04:bb:92:08:da:6b:19:fa:d0:96:f8:75:1c:
         c9:7c:fb:68:a9:c7:be:32:b1:4f:f4:3a:88:58:40:7d:d9:c5:
         28:98:fe:73:3e:0c:b7:ce:a5:7c:d8:22:af:89:5e:aa:ef:11:
         5e:44:57:7b:fa:01:21:ec:22:9b:ff:34:7a:81:7b:36:9b:da:
         1f:f1:47:ad:dd:13:86:b7:9b:ec:52:6a:aa:31:72:c7:b1:a3:
         92:84:bb:69:04:d6:ab:de:35:74:3a:ff:c9:d6:be:82:db:81:
         ab:5a:98:c7:f6:aa:94:e7:20:c4:ff:b1:b8:1b:a8:60:6c:45:
         f1:3d:ab:f3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbesy5AVIMGcELRadsgu0g5Br4AAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgwQUUwNjY1NDQ3OTBDRTkwQTNCMUQyNjhGNTRFODI1
MzhBQUY0NjAeFw0yNDA3MTgyMTA3MzFaFw0yNTA3MTcyMTEyMzFaMDMxMTAvBgNV
BAMTKDI5RjhBREM4NEFDMTc3ODgxMUU3ODI3OEVDQThGMEU1MTQyRDQ2RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqEFQGTqc1AWSofB+l/GTY0km
DMyMUppoGUaozhmb0EnV5ESnGkc8TF7D7Hq9meTRaTWtLI5/JwtvzrkgoMqxjmnq
Db96yOzulqxOvFJdyW3X8swLGO3neSXfUzWzwnjywlOOYiNFG22xGuzEIuIXL7io
XGQ+/UlB+hA4D1ApiJo0NwsaCtW6HgHirBv/60556wTTOS6zYlFhcdJdaIU9flBu
bb3RdixTpLakyfaZaLeacPNvMaVCu2rrWc/33i91E9guxFat1/OYqgITZFmOuGcn
lJDr0qOmPmgH3UaXHwjcP2hUKopIlfB9tHv3U6G9aw7kx6bq9AgVbLzMBf6XAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKfityErBd4gR54J47Kjw5RQtRuQwHwYDVR0j
BBgwFoAUyArgZlRHkM6Qo7HSaPVOglOKr0YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BOMUpqV2V6TUxOZ0dEMkc1dHFNZDJHemc1RkVIdkdUTnAzNWhoR2d4
OHEvMC9DODBBRTA2NjU0NDc5MENFOTBBM0IxRDI2OEY1NEU4MjUzOEFBRjQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4MEFFMDY2NTQ0NzkwQ0U5
MEEzQjFEMjY4RjU0RTgyNTM4QUFGNDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQTjFKaldlek1MTmdHRDJHNXRxTWQyR3pnNUZFSHZHVE5wMzVoaEdneDhxLzAv
MzEzNzM5MmUzNDMzMmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsysXMA0GCSqGSIb3DQEBCwUAA4IBAQCl8U4SNAPO
3E0LWyHEiGD1RfKPxn65UPiDk7XkN94Y/RwamvV6wu2Tzhd91HzPrkgj4+gUbzeT
I9q4dJbALqZoQU0sWXkUvLmTZ86CUmsKcWvGAHLlhAB1WbUpen4Br13STIm+7zvs
Ex4TXfKx2TA0ChrXJ5BUUKSsA7DW3XvFS93bKQS7kgjaaxn60Jb4dRzJfPtoqce+
MrFP9DqIWEB92cUomP5zPgy3zqV82CKviV6q7xFeRFd7+gEh7CKb/zR6gXs2m9of
8Uet3ROGt5vsUmqqMXLHsaOShLtpBNar3jV0Ov/J1r6C24GrWpjH9qqU5yDE/7G4
G6hgbEXxPavz
-----END CERTIFICATE-----
Generated at Mon Aug 26 18:39:38 2024 by rpki-client on console-fra.rpki-client.org