Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34392e302f32342d3234203d3e20323637393532.roa
File:                     34352e3136362e34392e302f32342d3234203d3e20323637393532.roa (raw, json)
Hash identifier:          bKj9CgNRZZFRtyn6gs8caMjsXQaYAfQv9LEc74Dk2hs=
Subject key identifier:   FD:B5:01:07:49:53:34:28:CD:8F:B3:F4:CB:DF:12:1F:3D:DA:7C:02
Certificate issuer:       /CN=A5271CBBF4F29E00937C22B534454F96229BEF3F
Certificate serial:       11E297AD083F8ADC94E8ADEC4EF94CDD2C9E6B94
Authority key identifier: A5:27:1C:BB:F4:F2:9E:00:93:7C:22:B5:34:45:4F:96:22:9B:EF:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5271CBBF4F29E00937C22B534454F96229BEF3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34392e302f32342d3234203d3e20323637393532.roa
Signing time:             Tue 23 Jan 2024 11:40:06 +0000
ROA not before:           Tue 23 Jan 2024 11:35:06 +0000
ROA not after:            Tue 21 Jan 2025 11:40:06 +0000
asID:                     267952
IP address blocks:        45.166.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e2:97:ad:08:3f:8a:dc:94:e8:ad:ec:4e:f9:4c:dd:2c:9e:6b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5271CBBF4F29E00937C22B534454F96229BEF3F
        Validity
            Not Before: Jan 23 11:35:06 2024 GMT
            Not After : Jan 21 11:40:06 2025 GMT
        Subject: CN=FDB5010749533428CD8FB3F4CBDF121F3DDA7C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:31:42:9a:70:ff:ac:bf:3a:da:17:0f:94:
                    e9:9f:12:04:0c:49:09:57:85:25:e8:a4:c0:3b:4f:
                    ba:e1:8a:3b:11:7d:35:4f:81:54:61:b2:45:0e:00:
                    67:fd:12:45:8e:b0:39:42:19:e7:35:f0:25:71:c1:
                    80:3f:b6:5b:d7:af:21:62:53:47:76:fc:72:d0:a3:
                    97:1d:d5:f8:69:53:f1:42:58:b1:21:b5:fd:60:ad:
                    22:bd:36:9d:81:38:6c:be:3c:2f:59:93:84:96:7a:
                    ae:74:7c:c4:7a:5f:81:33:fe:d3:57:dd:c5:83:d3:
                    6d:15:3f:4a:04:40:7c:d5:1d:6f:45:f9:c7:98:c4:
                    a4:95:6b:13:ce:80:d2:34:97:9f:78:30:d6:80:3c:
                    60:cf:e2:fe:6a:00:b5:db:8f:47:ed:3b:81:cc:22:
                    e1:74:60:2b:d9:07:13:80:50:8d:84:2b:42:a2:ef:
                    6f:84:a6:7e:da:97:d0:fd:40:14:9a:86:55:99:f5:
                    bd:ef:3c:8f:65:b5:53:b5:a0:fd:82:1c:df:f2:d3:
                    07:d3:25:9f:23:cf:9f:b1:96:da:b6:dc:0a:6d:49:
                    9f:b3:57:4c:b4:01:8d:cb:a9:63:e8:7b:f7:6a:5d:
                    8d:7e:1d:15:9f:28:ea:e5:97:e2:82:61:1a:9d:b5:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B5:01:07:49:53:34:28:CD:8F:B3:F4:CB:DF:12:1F:3D:DA:7C:02
            X509v3 Authority Key Identifier:
                keyid:A5:27:1C:BB:F4:F2:9E:00:93:7C:22:B5:34:45:4F:96:22:9B:EF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/A5271CBBF4F29E00937C22B534454F96229BEF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5271CBBF4F29E00937C22B534454F96229BEF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34392e302f32342d3234203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:e8:4e:13:0a:e4:f6:d0:da:3e:54:c5:36:39:83:0d:82:
         11:53:eb:26:bf:87:dd:00:99:05:5e:1f:f2:90:05:a2:44:97:
         86:c2:c6:6c:75:db:c6:f6:b6:29:8e:75:97:08:a6:0d:a0:f6:
         21:b2:c7:e9:5d:4e:42:5e:a9:3e:b8:ea:e8:de:44:39:42:de:
         20:62:35:e1:09:de:2d:68:a2:82:bc:f6:40:a5:97:0a:ec:3f:
         bc:7c:96:52:98:66:8f:70:73:7e:59:b5:2c:c1:d0:05:1c:d6:
         c3:fa:45:1b:ef:b7:26:54:72:41:08:12:62:74:9f:5b:2f:aa:
         36:f1:f3:13:d0:88:a2:f3:eb:bb:d4:52:0b:1c:d1:1e:75:5b:
         de:62:07:8a:97:af:88:9c:5d:17:a0:89:c2:22:31:59:67:37:
         55:79:9b:28:28:94:42:e5:2a:5f:c5:da:1c:4d:b0:6f:03:ad:
         8e:69:1d:54:75:26:bb:7c:c6:58:91:e2:ce:f3:8e:19:61:e5:
         b1:02:27:b5:06:54:d2:ac:64:1d:82:06:d3:79:07:b7:80:30:
         3f:79:b5:6b:80:ca:ed:70:c9:41:f3:61:d5:34:36:8c:10:04:
         6d:39:b6:be:02:2a:20:27:90:d9:a6:f0:80:9d:7e:83:12:fa:
         f9:02:2c:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEeKXrQg/ityU6K3sTvlM3Syea5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUyNzFDQkJGNEYyOUUwMDkzN0MyMkI1MzQ0NTRGOTYy
MjlCRUYzRjAeFw0yNDAxMjMxMTM1MDZaFw0yNTAxMjExMTQwMDZaMDMxMTAvBgNV
BAMTKEZEQjUwMTA3NDk1MzM0MjhDRDhGQjNGNENCREYxMjFGM0REQTdDMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbijFCmnD/rL862hcPlOmfEgQM
SQlXhSXopMA7T7rhijsRfTVPgVRhskUOAGf9EkWOsDlCGec18CVxwYA/tlvXryFi
U0d2/HLQo5cd1fhpU/FCWLEhtf1grSK9Np2BOGy+PC9Zk4SWeq50fMR6X4Ez/tNX
3cWD020VP0oEQHzVHW9F+ceYxKSVaxPOgNI0l594MNaAPGDP4v5qALXbj0ftO4HM
IuF0YCvZBxOAUI2EK0Ki72+Epn7al9D9QBSahlWZ9b3vPI9ltVO1oP2CHN/y0wfT
JZ8jz5+xltq23AptSZ+zV0y0AY3LqWPoe/dqXY1+HRWfKOrll+KCYRqdtXDJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/bUBB0lTNCjNj7P0y98SHz3afAIwHwYDVR0j
BBgwFoAUpSccu/TyngCTfCK1NEVPliKb7z8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFRuV3JjdmR5Y21aNjY5aUtaRnJ1anlITGhiUHR3TjZrWjMzNHdTNFFW
TEwvMC9BNTI3MUNCQkY0RjI5RTAwOTM3QzIyQjUzNDQ1NEY5NjIyOUJFRjNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E1MjcxQ0JCRjRGMjlFMDA5
MzdDMjJCNTM0NDU0Rjk2MjI5QkVGM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUbldyY3ZkeWNtWjY2OWlLWkZydWp5SExoYlB0d042a1ozMzR3UzRRVkxMLzAv
MzQzNTJlMzEzNjM2MmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaYxMA0GCSqGSIb3DQEBCwUAA4IBAQCJ4ehOEwrk
9tDaPlTFNjmDDYIRU+smv4fdAJkFXh/ykAWiRJeGwsZsddvG9rYpjnWXCKYNoPYh
ssfpXU5CXqk+uOro3kQ5Qt4gYjXhCd4taKKCvPZApZcK7D+8fJZSmGaPcHN+WbUs
wdAFHNbD+kUb77cmVHJBCBJidJ9bL6o28fMT0Iii8+u71FILHNEedVveYgeKl6+I
nF0XoInCIjFZZzdVeZsoKJRC5SpfxdocTbBvA62OaR1UdSa7fMZYkeLO844ZYeWx
Aie1BlTSrGQdggbTeQe3gDA/ebVrgMrtcMlB82HVNDaMEARtOba+AiogJ5DZpvCA
nX6DEvr5AizB
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org