Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130302e302f32322d3232203d3e20323637353637.roa
File:                     34352e37302e3130302e302f32322d3232203d3e20323637353637.roa (raw, json)
Hash identifier:          KMLpuQaXQlIRCr6Usfz84y4kh6taFx8cmh6wRavI2AY=
Subject key identifier:   55:D9:15:F0:DA:44:B8:2C:08:E5:40:6D:7C:E6:80:98:FC:0A:CD:EB
Certificate issuer:       /CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
Certificate serial:       2DC6AE369624BCE216508C88C066B25C31986CAC
Authority key identifier: 3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130302e302f32322d3232203d3e20323637353637.roa
Signing time:             Wed 29 Nov 2023 01:33:02 +0000
ROA not before:           Wed 29 Nov 2023 01:28:02 +0000
ROA not after:            Wed 27 Nov 2024 01:33:02 +0000
asID:                     267567
IP address blocks:        45.70.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c6:ae:36:96:24:bc:e2:16:50:8c:88:c0:66:b2:5c:31:98:6c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
        Validity
            Not Before: Nov 29 01:28:02 2023 GMT
            Not After : Nov 27 01:33:02 2024 GMT
        Subject: CN=55D915F0DA44B82C08E5406D7CE68098FC0ACDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:4f:fc:ac:91:2a:24:ca:39:21:8f:b6:8d:
                    36:40:06:96:1a:1e:2d:5c:e8:ad:4c:72:07:06:a7:
                    52:06:7c:4d:e6:00:e4:5d:cd:39:dc:13:11:02:5b:
                    e0:33:28:4b:c5:d2:56:23:15:b0:6d:f1:95:54:a3:
                    a6:09:10:72:7c:88:f3:6c:fb:d8:19:78:1c:61:49:
                    0d:ce:17:11:c1:ec:d5:e4:d6:34:50:01:23:da:e9:
                    90:73:83:56:fd:55:dd:f5:3b:f7:70:f9:cc:9d:8e:
                    7c:d5:c7:90:b5:d4:51:7f:8f:c2:6e:02:3f:4b:01:
                    0a:21:c7:37:3b:c3:f8:b3:39:fb:5b:1d:25:33:d9:
                    7c:49:cf:88:29:4c:b8:3e:f3:08:ac:6e:78:83:f4:
                    6e:7f:09:40:b2:ca:f0:7f:48:a3:42:ef:c8:c0:dc:
                    26:98:5e:31:cd:61:b1:22:0c:da:14:71:c8:83:8d:
                    91:a9:cb:41:7b:b0:94:c7:5e:c5:cd:0e:1f:36:c1:
                    b4:dc:61:e8:29:8d:c2:c8:14:3e:0d:27:c2:eb:16:
                    b4:9d:f7:d9:42:55:52:cf:2a:32:4f:5b:b5:cc:d7:
                    74:2e:bc:48:aa:5c:c3:09:ed:c9:72:8c:b6:33:82:
                    c3:e3:4e:7f:1e:6c:4d:2d:de:f2:c5:50:05:39:15:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D9:15:F0:DA:44:B8:2C:08:E5:40:6D:7C:E6:80:98:FC:0A:CD:EB
            X509v3 Authority Key Identifier:
                keyid:3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130302e302f32322d3232203d3e20323637353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:09:f2:8b:8b:e4:84:d5:34:b2:51:2f:8e:c2:7f:26:07:c0:
         e6:23:26:0d:2c:88:be:40:01:8b:59:7e:18:80:6c:18:90:99:
         84:b5:48:46:d0:32:1c:ea:15:86:48:10:a3:fa:82:0b:07:63:
         7d:69:5c:32:a1:b1:43:2c:21:ed:9d:09:ee:31:28:47:f6:5f:
         24:ca:a9:c4:b8:4b:4d:e6:15:c6:6a:f4:a5:49:6a:6f:4e:fa:
         08:7d:d8:4b:27:2f:4c:0d:e8:61:77:e5:96:04:59:e1:8c:cd:
         64:a3:04:48:74:27:da:80:2c:d8:a9:60:a5:65:2a:d3:fb:ff:
         35:10:c6:50:65:e2:f2:9b:cc:28:34:c7:68:ac:f1:d7:40:7a:
         68:bf:d0:bb:8e:19:1e:39:4c:da:ae:92:12:5d:74:cd:e9:c1:
         ed:d2:45:8f:f8:92:fd:38:c7:d7:24:6f:be:55:fd:4d:e4:c3:
         80:6e:39:37:49:cf:4a:7c:f2:d2:72:5d:a2:b0:cc:99:d9:09:
         74:aa:ef:0f:f6:4a:6d:40:f5:b7:3c:7f:f1:27:9e:f9:7e:e8:
         5c:dd:57:83:9f:cd:e8:9d:ba:94:36:52:df:5f:c5:4f:b1:6d:
         47:91:7e:7d:d5:3d:c8:eb:17:8d:f7:a7:fc:8c:e4:36:0a:c3:
         cb:c5:34:00
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULcauNpYkvOIWUIyIwGayXDGYbKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MwNDJGNENCOTE3RUU3NkFDOEQyNzMxQzVDMUYxODY4
RjkxOEIwMDAeFw0yMzExMjkwMTI4MDJaFw0yNDExMjcwMTMzMDJaMDMxMTAvBgNV
BAMTKDU1RDkxNUYwREE0NEI4MkMwOEU1NDA2RDdDRTY4MDk4RkMwQUNERUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oU/8rJEqJMo5IY+2jTZABpYa
Hi1c6K1McgcGp1IGfE3mAORdzTncExECW+AzKEvF0lYjFbBt8ZVUo6YJEHJ8iPNs
+9gZeBxhSQ3OFxHB7NXk1jRQASPa6ZBzg1b9Vd31O/dw+cydjnzVx5C11FF/j8Ju
Aj9LAQohxzc7w/izOftbHSUz2XxJz4gpTLg+8wisbniD9G5/CUCyyvB/SKNC78jA
3CaYXjHNYbEiDNoUcciDjZGpy0F7sJTHXsXNDh82wbTcYegpjcLIFD4NJ8LrFrSd
99lCVVLPKjJPW7XM13QuvEiqXMMJ7clyjLYzgsPjTn8ebE0t3vLFUAU5FSbjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVdkV8NpEuCwI5UBtfOaAmPwKzeswHwYDVR0j
BBgwFoAUPAQvTLkX7nasjScxxcHxho+RiwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUhzbkpGY3JpVFN6eWNBV2JGMnVURk45TGV0dGNhWlBBNks3bTkxUm1a
bTgvMS8zQzA0MkY0Q0I5MTdFRTc2QUM4RDI3MzFDNUMxRjE4NjhGOTE4QjAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDMDQyRjRDQjkxN0VFNzZB
QzhEMjczMUM1QzFGMTg2OEY5MThCMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VIc25KRmNyaVRTenljQVdiRjJ1VEZOOUxldHRjYVpQQTZLN205MVJtWm04LzEv
MzQzNTJlMzczMDJlMzEzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUZkMA0GCSqGSIb3DQEBCwUAA4IBAQA5CfKLi+SE
1TSyUS+Own8mB8DmIyYNLIi+QAGLWX4YgGwYkJmEtUhG0DIc6hWGSBCj+oILB2N9
aVwyobFDLCHtnQnuMShH9l8kyqnEuEtN5hXGavSlSWpvTvoIfdhLJy9MDehhd+WW
BFnhjM1kowRIdCfagCzYqWClZSrT+/81EMZQZeLym8woNMdorPHXQHpov9C7jhke
OUzarpISXXTN6cHt0kWP+JL9OMfXJG++Vf1N5MOAbjk3Sc9KfPLScl2isMyZ2Ql0
qu8P9kptQPW3PH/xJ575fuhc3VeDn83onbqUNlLfX8VPsW1HkX591T3I6xeN96f8
jOQ2CsPLxTQA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org