Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa
File:                     34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa (raw, json)
Hash identifier:          hPLA6wNTO1Mj5sIg/00fX+tDzDPsn9tFH/qAzDSdTKM=
Subject key identifier:   A8:A0:D7:88:53:4C:2D:1E:EA:AE:21:87:97:29:C9:DE:73:11:E9:56
Certificate issuer:       /CN=8960917263524044D6C2C72B89F0753C576C268A
Certificate serial:       1C543F22EB81AA4CA89979814F35B1C55B465C25
Authority key identifier: 89:60:91:72:63:52:40:44:D6:C2:C7:2B:89:F0:75:3C:57:6C:26:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8960917263524044D6C2C72B89F0753C576C268A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa
Signing time:             Thu 04 Apr 2024 12:56:15 +0000
ROA not before:           Thu 04 Apr 2024 12:51:15 +0000
ROA not after:            Thu 03 Apr 2025 12:56:15 +0000
asID:                     268057
IP address blocks:        45.168.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:54:3f:22:eb:81:aa:4c:a8:99:79:81:4f:35:b1:c5:5b:46:5c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8960917263524044D6C2C72B89F0753C576C268A
        Validity
            Not Before: Apr  4 12:51:15 2024 GMT
            Not After : Apr  3 12:56:15 2025 GMT
        Subject: CN=A8A0D788534C2D1EEAAE21879729C9DE7311E956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:a8:8c:90:90:b1:f6:48:c0:0c:74:e1:82:
                    bb:55:f6:d5:53:ad:27:ec:82:64:01:25:21:d2:8c:
                    c5:3b:d9:db:3e:2d:12:e7:8c:cb:61:da:aa:c1:ea:
                    86:8a:bc:7e:6f:96:c2:6e:71:bc:69:a1:5a:53:66:
                    b3:56:28:9c:d5:c4:a4:2b:11:e9:58:d3:c6:78:88:
                    eb:7e:82:dd:c4:12:6f:7e:3a:a6:b8:0e:63:c0:9a:
                    c0:67:18:65:07:d2:cb:28:3b:d0:64:96:27:0e:aa:
                    6f:9a:27:d9:65:df:b8:d2:c4:5c:c8:ba:fc:63:1d:
                    24:0d:b7:ec:87:26:78:67:e8:df:3a:67:f8:39:0c:
                    69:bc:9c:0f:e0:8b:31:7e:af:94:b8:49:f0:63:23:
                    ab:2a:c6:30:ee:22:cb:93:78:ba:58:04:66:1e:c3:
                    d5:83:5f:96:1b:c1:a0:9d:86:b7:31:25:6c:99:a1:
                    15:be:e0:4d:fc:68:a5:a9:be:24:cd:f8:9d:d6:67:
                    e3:dc:1c:ad:da:b7:6b:63:6f:90:05:30:e3:9e:e9:
                    3e:a3:6b:e2:ba:f9:31:89:a6:41:0b:c5:f8:59:6a:
                    d3:7e:95:aa:3f:21:db:95:ab:8a:5e:01:3a:6d:a6:
                    56:b6:38:e6:ec:c9:6a:5b:e1:1e:ba:5e:1b:af:33:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A0:D7:88:53:4C:2D:1E:EA:AE:21:87:97:29:C9:DE:73:11:E9:56
            X509v3 Authority Key Identifier:
                keyid:89:60:91:72:63:52:40:44:D6:C2:C7:2B:89:F0:75:3C:57:6C:26:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/8960917263524044D6C2C72B89F0753C576C268A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8960917263524044D6C2C72B89F0753C576C268A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:61:48:e8:42:f8:fa:4d:b3:e9:cd:10:16:c8:60:8c:41:b9:
         83:c2:d3:be:83:79:29:48:08:9d:d0:41:4b:46:da:ae:17:74:
         79:18:a0:65:c7:06:da:a0:18:13:0d:7f:e5:fd:c1:3d:30:cb:
         09:8c:b3:7c:f9:5e:46:25:bb:5c:97:47:9c:1e:79:70:dc:82:
         50:b5:7b:6c:11:4c:90:d0:81:8b:79:b1:59:cc:c4:fa:d8:a2:
         6a:02:a9:2a:a3:69:4b:5f:a5:81:a2:7a:41:ed:e0:56:b0:e3:
         41:30:dc:a7:38:6f:f0:1b:a0:68:27:d9:0e:8f:f7:13:99:1a:
         15:dc:c0:9b:e9:98:51:e3:7d:4c:ac:f0:de:36:c2:d6:bc:18:
         a9:01:d7:9d:da:e8:5b:15:74:38:2c:9b:a8:10:42:7d:5d:a8:
         0f:ae:21:f7:a6:52:6a:3d:94:32:2c:55:c9:d4:ce:b7:bf:25:
         b0:c7:6a:97:52:32:52:6e:a0:c3:da:77:74:f1:d4:70:e9:fc:
         54:e7:22:99:d8:cb:59:5a:c1:7f:17:6a:9a:3b:16:84:b8:88:
         55:46:ac:1e:49:0b:35:ed:7a:1e:74:6c:7d:9e:c5:e6:df:5d:
         af:d6:5f:4c:d2:5c:47:e2:97:f5:db:3c:ce:8d:f6:9f:f4:f6:
         64:73:9b:83
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHFQ/IuuBqkyomXmBTzWxxVtGXCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk2MDkxNzI2MzUyNDA0NEQ2QzJDNzJCODlGMDc1M0M1
NzZDMjY4QTAeFw0yNDA0MDQxMjUxMTVaFw0yNTA0MDMxMjU2MTVaMDMxMTAvBgNV
BAMTKEE4QTBENzg4NTM0QzJEMUVFQUFFMjE4Nzk3MjlDOURFNzMxMUU5NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0OqiMkJCx9kjADHThgrtV9tVT
rSfsgmQBJSHSjMU72ds+LRLnjMth2qrB6oaKvH5vlsJucbxpoVpTZrNWKJzVxKQr
EelY08Z4iOt+gt3EEm9+Oqa4DmPAmsBnGGUH0ssoO9BklicOqm+aJ9ll37jSxFzI
uvxjHSQNt+yHJnhn6N86Z/g5DGm8nA/gizF+r5S4SfBjI6sqxjDuIsuTeLpYBGYe
w9WDX5YbwaCdhrcxJWyZoRW+4E38aKWpviTN+J3WZ+PcHK3at2tjb5AFMOOe6T6j
a+K6+TGJpkELxfhZatN+lao/IduVq4peATptpla2OObsyWpb4R66XhuvMy3ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqKDXiFNMLR7qriGHlynJ3nMR6VYwHwYDVR0j
BBgwFoAUiWCRcmNSQETWwscrifB1PFdsJoowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW5IUkVzTnBMdmlLQ3diNUxBQWV5TEVhRFdLV1NZYzJrQmFuWUxxVzc5
NHYvMS84OTYwOTE3MjYzNTI0MDQ0RDZDMkM3MkI4OUYwNzUzQzU3NkMyNjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NjA5MTcyNjM1MjQwNDRE
NkMyQzcyQjg5RjA3NTNDNTc2QzI2OEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VuSFJFc05wTHZpS0N3YjVMQUFleUxFYURXS1dTWWMya0JhbllMcVc3OTR2LzEv
MzQzNTJlMzEzNjM4MmUzMTMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqG0wDQYJKoZIhvcNAQELBQADggEBAE1hSOhC
+PpNs+nNEBbIYIxBuYPC076DeSlICJ3QQUtG2q4XdHkYoGXHBtqgGBMNf+X9wT0w
ywmMs3z5XkYlu1yXR5weeXDcglC1e2wRTJDQgYt5sVnMxPrYomoCqSqjaUtfpYGi
ekHt4Faw40Ew3Kc4b/AboGgn2Q6P9xOZGhXcwJvpmFHjfUys8N42wta8GKkB153a
6FsVdDgsm6gQQn1dqA+uIfemUmo9lDIsVcnUzre/JbDHapdSMlJuoMPad3Tx1HDp
/FTnIpnYy1lawX8Xapo7FoS4iFVGrB5JCzXteh50bH2exebfXa/WX0zSXEfil/Xb
PM6N9p/09mRzm4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org