Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e37312e302f32342d3234203d3e20323639313039.roa
File:                     34352e3137392e37312e302f32342d3234203d3e20323639313039.roa (raw, json)
Hash identifier:          gQ/EpT1LG14m9V1wh0zHZb7IObgorDriNIrbFNd5gCk=
Subject key identifier:   49:D5:A8:BD:80:1D:EA:2D:10:16:A1:53:57:94:D6:19:05:18:BC:87
Certificate issuer:       /CN=015FF7B2420F79D7E3FB324944FAA5AB28892563
Certificate serial:       647DBE02E9498D6ED1E1CC0B27BB33005A8F7F84
Authority key identifier: 01:5F:F7:B2:42:0F:79:D7:E3:FB:32:49:44:FA:A5:AB:28:89:25:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e37312e302f32342d3234203d3e20323639313039.roa
Signing time:             Wed 13 Jul 2022 01:54:26 +0000
ROA not before:           Wed 13 Jul 2022 01:49:26 +0000
ROA not after:            Wed 12 Jul 2023 01:54:26 +0000
asID:                     269109
IP address blocks:        45.179.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7d:be:02:e9:49:8d:6e:d1:e1:cc:0b:27:bb:33:00:5a:8f:7f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015FF7B2420F79D7E3FB324944FAA5AB28892563
        Validity
            Not Before: Jul 13 01:49:26 2022 GMT
            Not After : Jul 12 01:54:26 2023 GMT
        Subject: CN=49D5A8BD801DEA2D1016A1535794D6190518BC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:a0:aa:ef:88:e9:f1:eb:2e:81:6d:86:99:
                    21:21:26:a8:b7:fc:cc:bb:81:d6:74:1a:93:07:0a:
                    db:00:de:d6:c1:ab:2e:cc:22:12:d8:0b:be:8f:89:
                    30:cb:df:a7:9f:4c:f2:70:d8:c6:90:37:de:99:61:
                    3e:d7:ae:b9:23:25:5f:ec:4c:e7:52:87:7f:b8:c0:
                    4e:99:3f:54:d2:d1:32:f7:5d:8b:d5:49:c0:f1:a2:
                    c9:88:3d:12:bc:e6:8d:dc:9f:c6:6b:cc:91:51:5d:
                    0b:dd:cd:0e:2e:d2:5c:d5:4a:fb:41:8b:bc:f3:b0:
                    39:f1:63:15:47:e2:96:b1:cc:d7:d8:59:26:55:2a:
                    0f:5e:ab:b2:ca:45:08:24:a2:2d:53:29:90:98:b3:
                    d3:3c:d8:8e:23:7d:75:4e:f1:fd:2c:f4:08:3a:7f:
                    bd:64:35:c0:ed:2a:68:56:b4:67:70:d9:61:e8:70:
                    dc:4c:3f:ae:d1:f3:5c:92:75:cf:89:94:0a:6b:fa:
                    55:29:9f:b0:d3:df:4a:88:a2:29:43:30:9e:4a:29:
                    a1:a3:66:82:74:de:e2:f4:b0:9d:b3:db:33:93:db:
                    de:de:66:18:65:91:d3:ea:d6:1e:21:fb:e2:0a:c8:
                    72:31:d4:16:d8:0b:8f:b0:73:2c:02:3e:41:b7:dc:
                    6e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D5:A8:BD:80:1D:EA:2D:10:16:A1:53:57:94:D6:19:05:18:BC:87
            X509v3 Authority Key Identifier:
                keyid:01:5F:F7:B2:42:0F:79:D7:E3:FB:32:49:44:FA:A5:AB:28:89:25:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e37312e302f32342d3234203d3e20323639313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ce:aa:0c:15:68:70:bc:4c:52:e4:0d:65:77:f3:b6:83:e5:
         8d:94:81:4a:d5:29:a4:69:d3:20:a1:62:a5:d5:20:79:a2:ec:
         62:07:e7:6a:2d:76:62:90:a1:15:1a:01:c8:6b:ac:d8:b7:2a:
         8f:f3:78:92:a0:4c:27:8d:85:23:23:e3:d1:bb:00:33:f5:bd:
         73:03:30:bd:8a:af:34:da:c0:6e:32:18:8a:12:ee:23:dd:22:
         d5:e3:8e:5f:1c:61:b7:ba:a4:6d:0a:98:9a:a8:b1:35:a6:71:
         b7:e1:1d:87:d8:1e:37:31:9e:35:e7:13:5a:d7:7f:7d:72:1a:
         e3:b4:54:0e:11:dc:34:25:65:ee:57:77:81:58:5f:63:84:fc:
         27:2a:54:ec:53:06:54:b1:5d:f3:85:1e:24:e7:22:3f:7c:da:
         7f:0f:89:3d:08:13:83:ea:ab:e1:df:51:c8:4b:9d:18:8d:2e:
         7f:75:50:39:3d:7b:ac:8e:5d:dd:b5:dd:44:34:4d:da:dc:13:
         7a:14:b8:e3:de:f8:6c:51:cc:80:42:7c:ac:30:7f:9f:5c:e9:
         7c:93:b4:10:19:e9:33:27:8a:d2:37:7c:f6:78:bb:95:8f:50:
         3d:3f:d2:82:79:0c:7a:05:26:aa:90:8a:9f:7f:10:da:a5:ff:
         4d:63:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org