Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131372e302f32342d3332203d3e20323638393931.roa
File:                     34352e3137372e3131372e302f32342d3332203d3e20323638393931.roa (raw, json)
Hash identifier:          UvqdDezZIpec3RPsTU6JWKNoPLDxlywObMTuiiYaHFg=
Subject key identifier:   D1:C9:37:F9:39:78:F8:01:4D:BB:CA:43:DD:AE:54:E4:27:52:C8:BA
Certificate issuer:       /CN=C0997B4394F42D63309972CD488DD6809FD72A14
Certificate serial:       53EB1207EB1E612C32BC2298BD2A86600DFB51DD
Authority key identifier: C0:99:7B:43:94:F4:2D:63:30:99:72:CD:48:8D:D6:80:9F:D7:2A:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0997B4394F42D63309972CD488DD6809FD72A14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131372e302f32342d3332203d3e20323638393931.roa
Signing time:             Fri 28 Jul 2023 14:29:13 +0000
ROA not before:           Fri 28 Jul 2023 14:24:13 +0000
ROA not after:            Fri 26 Jul 2024 14:29:13 +0000
asID:                     268991
IP address blocks:        45.177.117.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:eb:12:07:eb:1e:61:2c:32:bc:22:98:bd:2a:86:60:0d:fb:51:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0997B4394F42D63309972CD488DD6809FD72A14
        Validity
            Not Before: Jul 28 14:24:13 2023 GMT
            Not After : Jul 26 14:29:13 2024 GMT
        Subject: CN=D1C937F93978F8014DBBCA43DDAE54E42752C8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:80:98:3a:3e:8f:53:25:85:d6:a4:64:5f:
                    09:01:59:6c:2a:ae:b1:00:fa:90:68:20:fd:c4:c7:
                    36:2b:8d:7e:00:16:45:7a:9d:1f:3d:46:f6:49:c9:
                    ae:20:f1:b9:e4:e0:d3:87:ac:1f:31:72:4d:79:20:
                    a1:11:6c:89:08:df:1a:ec:e1:98:2b:b0:1b:b8:e9:
                    1d:3c:b0:90:22:21:60:a9:83:cd:46:4c:a1:54:c6:
                    ea:52:6d:57:56:55:d0:8b:e1:de:1e:e0:12:80:35:
                    58:bd:22:3f:ef:33:e5:7a:58:34:5a:41:ef:c0:19:
                    ba:28:39:6f:f0:8b:c7:fd:51:9a:db:bf:90:1f:09:
                    ca:cd:9a:e4:83:6c:df:86:14:74:8b:8f:9e:f7:d3:
                    53:1e:67:0b:39:56:61:08:2a:f7:0d:fd:79:17:b6:
                    b8:24:35:25:4e:92:44:31:b1:41:71:84:f5:41:8b:
                    7d:8e:b1:77:1e:cd:f6:ec:b6:ce:d4:2b:e8:bf:cf:
                    f7:a0:59:a1:67:85:79:37:20:7a:5a:5b:77:0f:0e:
                    fd:1a:84:ce:8b:99:66:ed:05:55:6d:74:c6:b0:16:
                    00:bb:36:c8:3d:66:2a:f9:6d:cd:29:a3:e7:b7:6d:
                    77:9d:dd:36:64:ab:2d:e9:d4:d4:42:08:c2:8a:0a:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C9:37:F9:39:78:F8:01:4D:BB:CA:43:DD:AE:54:E4:27:52:C8:BA
            X509v3 Authority Key Identifier:
                keyid:C0:99:7B:43:94:F4:2D:63:30:99:72:CD:48:8D:D6:80:9F:D7:2A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/C0997B4394F42D63309972CD488DD6809FD72A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0997B4394F42D63309972CD488DD6809FD72A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131372e302f32342d3332203d3e20323638393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:65:03:18:6e:a3:0f:88:56:7e:f0:98:f7:84:d3:1a:3d:9f:
         4f:da:9d:db:e2:49:3b:97:9e:2b:64:2b:63:a2:26:d6:01:45:
         ef:80:fa:39:c2:ed:60:4a:5a:85:f1:e3:ea:5b:49:69:45:ee:
         f8:2d:27:e8:fc:1f:33:45:88:09:49:1a:1e:99:93:40:ae:18:
         ea:18:9b:23:14:8b:22:cd:bb:65:5b:98:cf:14:65:93:06:fe:
         54:52:85:7c:b9:46:9a:b8:e7:ea:68:51:4d:b2:17:d6:29:20:
         4d:67:54:c3:b5:97:d5:42:2b:3a:1e:d7:f6:ba:99:1e:43:38:
         c1:27:a7:99:4d:03:dd:5c:b8:63:54:a8:55:2e:86:63:84:00:
         fb:08:01:f6:8d:85:32:12:73:77:2c:37:dc:b6:1c:0f:9f:d7:
         ed:9c:6b:0c:68:04:b6:19:2b:d8:32:58:d2:0e:4b:0b:02:6a:
         60:20:b1:82:96:dc:cb:06:4c:13:04:2f:a2:47:17:0e:a2:ac:
         41:75:8f:5b:d3:7b:1f:59:5d:7f:02:ab:c9:60:8f:fa:f6:ef:
         c0:f3:36:7c:66:a3:59:c4:94:05:1d:0d:42:40:6a:f2:60:59:
         de:93:c1:db:24:55:d9:e0:1c:fd:89:66:12:3c:22:a6:27:5c:
         29:21:a1:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU+sSB+seYSwyvCKYvSqGYA37Ud0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA5OTdCNDM5NEY0MkQ2MzMwOTk3MkNENDg4REQ2ODA5
RkQ3MkExNDAeFw0yMzA3MjgxNDI0MTNaFw0yNDA3MjYxNDI5MTNaMDMxMTAvBgNV
BAMTKEQxQzkzN0Y5Mzk3OEY4MDE0REJCQ0E0M0REQUU1NEU0Mjc1MkM4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8YCYOj6PUyWF1qRkXwkBWWwq
rrEA+pBoIP3ExzYrjX4AFkV6nR89RvZJya4g8bnk4NOHrB8xck15IKERbIkI3xrs
4ZgrsBu46R08sJAiIWCpg81GTKFUxupSbVdWVdCL4d4e4BKANVi9Ij/vM+V6WDRa
Qe/AGbooOW/wi8f9UZrbv5AfCcrNmuSDbN+GFHSLj57301MeZws5VmEIKvcN/XkX
trgkNSVOkkQxsUFxhPVBi32OsXcezfbsts7UK+i/z/egWaFnhXk3IHpaW3cPDv0a
hM6LmWbtBVVtdMawFgC7Nsg9Zir5bc0po+e3bXed3TZkqy3p1NRCCMKKCgUxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0ck3+Tl4+AFNu8pD3a5U5CdSyLowHwYDVR0j
BBgwFoAUwJl7Q5T0LWMwmXLNSI3WgJ/XKhQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRtc0xuSE5uTmVxTkJtUUd2d05ZR2t6NlJrb3VOb1lBWldGZVpRZWo3
bXIvMC9DMDk5N0I0Mzk0RjQyRDYzMzA5OTcyQ0Q0ODhERDY4MDlGRDcyQTE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MwOTk3QjQzOTRGNDJENjMz
MDk5NzJDRDQ4OERENjgwOUZENzJBMTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkbXNMbkhObk5lcU5CbVFHdndOWUdrejZSa291Tm9ZQVpXRmVaUWVqN21yLzAv
MzQzNTJlMzEzNzM3MmUzMTMxMzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzgzOTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsXUwDQYJKoZIhvcNAQELBQADggEBAGRlAxhu
ow+IVn7wmPeE0xo9n0/andviSTuXnitkK2OiJtYBRe+A+jnC7WBKWoXx4+pbSWlF
7vgtJ+j8HzNFiAlJGh6Zk0CuGOoYmyMUiyLNu2VbmM8UZZMG/lRShXy5Rpq45+po
UU2yF9YpIE1nVMO1l9VCKzoe1/a6mR5DOMEnp5lNA91cuGNUqFUuhmOEAPsIAfaN
hTISc3csN9y2HA+f1+2cawxoBLYZK9gyWNIOSwsCamAgsYKW3MsGTBMEL6JHFw6i
rEF1j1vTex9ZXX8Cq8lgj/r278DzNnxmo1nElAUdDUJAavJgWd6TwdskVdngHP2J
ZhI8IqYnXCkhoZM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org