Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130302e302f32342d3234203d3e20323637353637.roa
File:                     34352e37302e3130302e302f32342d3234203d3e20323637353637.roa (raw, json)
Hash identifier:          jvtrb/TT13hyvqpEyWfsZIetzrbJ5tZUywEafiTlpKs=
Subject key identifier:   8D:56:17:92:95:26:4F:CA:53:D0:5C:5A:F7:36:06:12:37:68:87:27
Certificate issuer:       /CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
Certificate serial:       1B22266B6795DB91F9AD707C0B34EC106546A188
Authority key identifier: 3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130302e302f32342d3234203d3e20323637353637.roa
Signing time:             Wed 29 Nov 2023 01:33:03 +0000
ROA not before:           Wed 29 Nov 2023 01:28:03 +0000
ROA not after:            Wed 27 Nov 2024 01:33:03 +0000
asID:                     267567
IP address blocks:        45.70.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:22:26:6b:67:95:db:91:f9:ad:70:7c:0b:34:ec:10:65:46:a1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
        Validity
            Not Before: Nov 29 01:28:03 2023 GMT
            Not After : Nov 27 01:33:03 2024 GMT
        Subject: CN=8D56179295264FCA53D05C5AF736061237688727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:ae:05:b4:6b:cf:3e:21:a4:57:39:36:c8:
                    75:b3:79:12:79:98:ad:d6:f1:06:57:db:ef:3a:8f:
                    3f:2a:ca:d6:ed:28:57:73:fb:ce:63:d9:59:7f:a5:
                    84:aa:ba:38:30:40:ce:c8:67:06:bc:73:7a:21:78:
                    75:9c:db:f1:e4:c5:96:a5:95:1f:fa:fd:ba:aa:a1:
                    44:d0:a2:d0:4e:f3:9e:0c:c1:e5:bc:e7:ee:5e:28:
                    36:0c:e2:cb:9f:17:36:85:6f:b6:d0:d4:d0:6c:58:
                    40:82:8a:2f:ab:94:51:f9:0b:ff:73:ac:c3:e2:6c:
                    82:90:fe:f7:9c:0b:85:e7:4d:da:4c:c3:9a:1c:79:
                    55:38:90:c4:98:83:01:af:34:23:8a:28:f4:e6:e2:
                    e5:e4:af:98:25:1a:92:99:53:36:f9:1a:01:79:0c:
                    83:72:2d:67:7f:45:3b:e9:47:24:f5:93:1e:2c:ad:
                    ce:c7:31:b4:df:3d:e4:3c:71:0b:86:26:e5:e1:21:
                    70:f1:23:80:7e:e5:53:30:74:d4:de:78:fa:c4:13:
                    85:35:a2:9a:f9:de:df:f2:6f:ea:5d:a7:1a:24:40:
                    43:a5:7e:ca:8b:4e:0d:7b:2e:cb:e3:41:a7:b0:46:
                    54:ac:7b:7a:27:32:f2:4c:fe:96:23:c7:ee:71:2f:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:56:17:92:95:26:4F:CA:53:D0:5C:5A:F7:36:06:12:37:68:87:27
            X509v3 Authority Key Identifier:
                keyid:3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130302e302f32342d3234203d3e20323637353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:18:bc:f0:90:64:31:0a:00:62:d0:0e:84:35:aa:84:cd:f2:
         75:86:38:63:58:15:73:9f:08:bf:b3:c1:f3:32:0e:09:d3:91:
         8b:14:6f:7a:69:5a:df:28:f6:59:21:8e:f2:eb:6d:54:f9:b2:
         1f:5b:f9:ba:1a:3e:0e:28:5a:0b:96:5b:00:56:f3:18:14:5e:
         57:a9:ac:6b:ce:18:45:8e:c6:89:9d:ec:08:a2:92:34:88:06:
         18:d3:b8:dc:dc:41:dc:dc:59:67:ad:0c:17:91:1a:39:b0:d5:
         cf:c7:07:8b:c0:f0:56:d3:0b:d8:f0:07:9f:4c:53:ce:cb:65:
         98:41:f9:c1:ba:b3:0f:18:dd:1b:7a:e6:fb:13:03:47:02:07:
         fc:6a:29:fb:3f:6f:7b:25:16:a0:1e:79:21:b5:80:74:71:dd:
         3f:1d:c0:cf:d5:f3:00:0b:95:bb:b1:92:28:64:f2:d5:4e:e4:
         f3:90:cb:a4:fd:fb:1a:96:58:d8:fc:5e:2c:68:85:12:25:6f:
         5e:f2:14:a7:3d:2c:a5:f7:f6:7c:74:9b:a3:85:6d:3c:51:21:
         8a:b7:e6:e0:f6:9c:c6:80:40:16:d2:13:58:11:a7:e6:80:aa:
         58:91:77:79:25:a1:08:ca:55:df:e1:d6:25:c3:57:6f:52:00:
         b1:14:54:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGyIma2eV25H5rXB8CzTsEGVGoYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MwNDJGNENCOTE3RUU3NkFDOEQyNzMxQzVDMUYxODY4
RjkxOEIwMDAeFw0yMzExMjkwMTI4MDNaFw0yNDExMjcwMTMzMDNaMDMxMTAvBgNV
BAMTKDhENTYxNzkyOTUyNjRGQ0E1M0QwNUM1QUY3MzYwNjEyMzc2ODg3MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqr64FtGvPPiGkVzk2yHWzeRJ5
mK3W8QZX2+86jz8qytbtKFdz+85j2Vl/pYSqujgwQM7IZwa8c3oheHWc2/HkxZal
lR/6/bqqoUTQotBO854MweW85+5eKDYM4sufFzaFb7bQ1NBsWECCii+rlFH5C/9z
rMPibIKQ/vecC4XnTdpMw5oceVU4kMSYgwGvNCOKKPTm4uXkr5glGpKZUzb5GgF5
DINyLWd/RTvpRyT1kx4src7HMbTfPeQ8cQuGJuXhIXDxI4B+5VMwdNTeePrEE4U1
opr53t/yb+pdpxokQEOlfsqLTg17LsvjQaewRlSse3onMvJM/pYjx+5xL/V3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjVYXkpUmT8pT0Fxa9zYGEjdohycwHwYDVR0j
BBgwFoAUPAQvTLkX7nasjScxxcHxho+RiwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUhzbkpGY3JpVFN6eWNBV2JGMnVURk45TGV0dGNhWlBBNks3bTkxUm1a
bTgvMS8zQzA0MkY0Q0I5MTdFRTc2QUM4RDI3MzFDNUMxRjE4NjhGOTE4QjAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDMDQyRjRDQjkxN0VFNzZB
QzhEMjczMUM1QzFGMTg2OEY5MThCMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VIc25KRmNyaVRTenljQVdiRjJ1VEZOOUxldHRjYVpQQTZLN205MVJtWm04LzEv
MzQzNTJlMzczMDJlMzEzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUZkMA0GCSqGSIb3DQEBCwUAA4IBAQCgGLzwkGQx
CgBi0A6ENaqEzfJ1hjhjWBVznwi/s8HzMg4J05GLFG96aVrfKPZZIY7y621U+bIf
W/m6Gj4OKFoLllsAVvMYFF5XqaxrzhhFjsaJnewIopI0iAYY07jc3EHc3FlnrQwX
kRo5sNXPxweLwPBW0wvY8AefTFPOy2WYQfnBurMPGN0beub7EwNHAgf8ain7P297
JRagHnkhtYB0cd0/HcDP1fMAC5W7sZIoZPLVTuTzkMuk/fsalljY/F4saIUSJW9e
8hSnPSyl9/Z8dJujhW08USGKt+bg9pzGgEAW0hNYEafmgKpYkXd5JaEIylXf4dYl
w1dvUgCxFFTY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org