Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3132382e302f31392d3234203d3e203137323232.roa
File:                     3138392e34352e3132382e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          hT4PygF0X4Vdwn+fX4E30QkHMh+BzFfBz5tO4nxw7TU=
Subject key identifier:   B3:BB:91:A0:F7:4E:C8:7F:C0:AA:7F:0B:7E:48:79:06:C3:20:26:54
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       33C4988B7A5235666A6F64503EB2E018B1C782A2
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3132382e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        189.45.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c4:98:8b:7a:52:35:66:6a:6f:64:50:3e:b2:e0:18:b1:c7:82:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=B3BB91A0F74EC87FC0AA7F0B7E487906C3202654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:70:eb:aa:62:1e:84:1a:d3:98:08:a8:66:
                    00:1f:d1:70:c8:f8:8b:23:6f:4d:23:50:e0:03:fa:
                    48:b7:4a:80:12:da:d2:59:9e:c6:6b:9f:28:7a:da:
                    89:8b:d7:60:89:cb:ec:d3:5a:e9:a1:73:53:48:be:
                    1b:bd:7f:c5:55:de:61:d9:19:da:15:cd:35:02:95:
                    11:14:97:ca:32:75:08:70:c0:58:10:52:09:d5:a0:
                    bc:ee:a5:7d:9a:36:9b:a4:af:e0:57:3b:c4:0a:b9:
                    61:65:22:f0:e5:10:b5:38:48:87:ab:66:de:0c:9e:
                    2d:e8:56:27:a3:35:59:68:2a:41:1c:69:a1:f2:f2:
                    c0:4b:7c:20:8e:da:71:86:8b:f1:bc:2e:44:1c:be:
                    38:62:13:5d:2d:3b:d4:aa:a6:da:76:cc:7c:6b:c1:
                    67:10:ad:59:68:ba:f3:c3:6b:2d:a4:d8:d6:44:69:
                    63:55:6a:16:46:5c:1b:2b:10:1e:41:bd:07:96:b6:
                    b6:96:27:b0:8c:1a:d4:33:97:95:ea:3f:6d:01:01:
                    68:76:b9:a1:cb:6e:ce:e4:56:6d:38:bb:7a:17:75:
                    16:fb:5f:5e:1e:3c:b3:36:9c:fc:31:7e:e2:35:93:
                    b0:75:f0:fb:43:63:5f:33:68:b7:41:c3:be:57:9c:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BB:91:A0:F7:4E:C8:7F:C0:AA:7F:0B:7E:48:79:06:C3:20:26:54
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3132382e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:d7:73:cb:64:dc:c5:e2:df:7d:c0:31:95:a1:da:e8:bc:
         42:24:60:d6:d1:17:17:e5:7b:be:93:47:59:64:e8:25:d4:d9:
         4f:dd:a9:71:f4:70:48:8f:7c:b8:02:63:e0:4b:ea:97:f7:9e:
         4c:9d:c9:0f:fa:af:a8:57:17:a3:45:0e:4a:e4:54:04:ec:c1:
         20:80:7b:2c:c9:70:00:d6:48:bd:cc:13:19:1f:e2:1e:77:bf:
         77:ec:03:df:9e:76:b6:4e:c0:6f:6e:bf:00:8f:94:e1:f6:f8:
         f2:09:ca:27:fc:e5:ea:9c:eb:bb:8c:71:e7:65:01:dc:36:eb:
         49:82:c8:7c:00:3a:cc:e0:4a:3c:f6:a6:9d:f5:b8:35:e7:0a:
         2c:a1:d0:bf:5b:20:14:da:98:51:da:5a:10:1c:d8:b6:1d:e0:
         31:91:7b:e7:da:d5:95:58:19:db:6d:d2:05:e0:9b:9c:f9:bd:
         10:23:bf:5d:ac:9f:56:86:f6:72:cb:67:c8:ef:63:e7:29:22:
         56:c0:07:60:72:09:fe:29:d6:a4:1b:05:b1:5a:00:9a:d2:45:
         91:ed:bb:0a:eb:40:cc:57:01:aa:40:82:82:18:ec:c6:c5:1b:
         90:17:84:23:03:92:75:01:c2:19:d3:04:35:ee:0b:ce:15:78:
         c8:1d:ea:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM8SYi3pSNWZqb2RQPrLgGLHHgqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGOUJGQkY1M0NCNjY2QUFGNzZGRTczMjc2QjcwMUM3
RTIzN0E2RTAeFw0yNDAzMjUyMjUwNDBaFw0yNTAzMjQyMjU1NDBaMDMxMTAvBgNV
BAMTKEIzQkI5MUEwRjc0RUM4N0ZDMEFBN0YwQjdFNDg3OTA2QzMyMDI2NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzXDrqmIehBrTmAioZgAf0XDI
+Isjb00jUOAD+ki3SoAS2tJZnsZrnyh62omL12CJy+zTWumhc1NIvhu9f8VV3mHZ
GdoVzTUClREUl8oydQhwwFgQUgnVoLzupX2aNpukr+BXO8QKuWFlIvDlELU4SIer
Zt4Mni3oViejNVloKkEcaaHy8sBLfCCO2nGGi/G8LkQcvjhiE10tO9Sqptp2zHxr
wWcQrVlouvPDay2k2NZEaWNVahZGXBsrEB5BvQeWtraWJ7CMGtQzl5XqP20BAWh2
uaHLbs7kVm04u3oXdRb7X14ePLM2nPwxfuI1k7B18PtDY18zaLdBw75XnHATAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs7uRoPdOyH/Aqn8Lfkh5BsMgJlQwHwYDVR0j
BBgwFoAUQ/m/v1PLZmqvdv5zJ2twHH4jem4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURNQWVjU0ZGN0RqVEdxZTh4TFdwUDJIa2dZVVRHTWdtTWE1UTd3Tlg0
WjQvMC80M0Y5QkZCRjUzQ0I2NjZBQUY3NkZFNzMyNzZCNzAxQzdFMjM3QTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzRjlCRkJGNTNDQjY2NkFB
Rjc2RkU3MzI3NkI3MDFDN0UyMzdBNkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VETUFlY1NGRjdEalRHcWU4eExXcFAySGtnWVVUR01nbU1hNVE3d05YNFo0LzAv
MzEzODM5MmUzNDM1MmUzMTMyMzgyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFvS2AMA0GCSqGSIb3DQEBCwUAA4IBAQBNjNdzy2Tc
xeLffcAxlaHa6LxCJGDW0RcX5Xu+k0dZZOgl1NlP3alx9HBIj3y4AmPgS+qX955M
nckP+q+oVxejRQ5K5FQE7MEggHssyXAA1ki9zBMZH+Ied7937APfnna2TsBvbr8A
j5Th9vjyCcon/OXqnOu7jHHnZQHcNutJgsh8ADrM4Eo89qad9bg15wosodC/WyAU
2phR2loQHNi2HeAxkXvn2tWVWBnbbdIF4Juc+b0QI79drJ9WhvZyy2fI72PnKSJW
wAdgcgn+KdakGwWxWgCa0kWR7bsK60DMVwGqQIKCGOzGxRuQF4QjA5J1AcIZ0wQ1
7gvOFXjIHepj
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org