Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e34382e302f32322d3232203d3e20323637393532.roa
File:                     34352e3136362e34382e302f32322d3232203d3e20323637393532.roa (raw, json)
Hash identifier:          baNHOOoB4OCOtQ2AcGRgRbShKFakxIf1eg2aKwLJE1I=
Subject key identifier:   3B:BE:71:A1:41:33:9D:02:27:36:33:B4:04:66:86:A7:95:B4:AE:FB
Certificate issuer:       /CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
Certificate serial:       4092141E4D5F127DD57D67CA5767992EC971C1B7
Authority key identifier: 1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e34382e302f32322d3232203d3e20323637393532.roa
Signing time:             Fri 19 Apr 2024 20:40:39 +0000
ROA not before:           Fri 19 Apr 2024 20:35:39 +0000
ROA not after:            Fri 18 Apr 2025 20:40:39 +0000
asID:                     267952
IP address blocks:        45.166.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:92:14:1e:4d:5f:12:7d:d5:7d:67:ca:57:67:99:2e:c9:71:c1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
        Validity
            Not Before: Apr 19 20:35:39 2024 GMT
            Not After : Apr 18 20:40:39 2025 GMT
        Subject: CN=3BBE71A141339D02273633B4046686A795B4AEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:26:19:80:b7:76:33:50:0a:10:26:53:91:
                    aa:75:1a:84:0d:63:de:b4:e4:6e:77:df:1c:ef:26:
                    19:fe:94:cc:fd:2d:ac:c2:04:f4:27:e2:23:5d:59:
                    9e:f0:5b:e7:35:df:a0:82:15:c9:1f:eb:68:45:3d:
                    50:13:1c:75:c1:f6:d1:89:cc:f4:e0:82:d3:79:cb:
                    77:ed:e0:8d:bd:e8:70:10:7d:55:d2:d8:59:6a:f3:
                    9f:0c:db:7b:12:59:d8:cc:d7:f0:7b:9c:f4:6d:22:
                    1c:be:fc:14:33:b7:dc:a2:ee:0c:ee:1b:12:56:e1:
                    6d:cd:df:22:75:41:f1:66:61:f3:b2:d9:9d:99:9e:
                    42:6a:54:ba:db:12:5f:2a:70:45:ae:3d:fb:20:fd:
                    ea:ea:b4:8b:ff:0d:23:76:e4:1e:04:95:15:41:31:
                    bb:3d:e3:12:94:35:7f:47:b2:28:fd:92:ff:7d:b3:
                    e0:13:32:81:cd:0c:19:cb:2f:b5:ff:a9:75:fe:5d:
                    87:92:7d:4b:58:6c:f4:77:68:7d:8f:3b:1b:75:64:
                    e7:51:57:bc:11:76:39:60:e5:29:81:ae:89:32:44:
                    60:81:fe:ff:50:fb:13:da:5b:45:cf:d7:3c:dd:43:
                    b4:60:9e:07:77:cb:a4:aa:e2:c5:ec:ea:83:a8:ba:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BE:71:A1:41:33:9D:02:27:36:33:B4:04:66:86:A7:95:B4:AE:FB
            X509v3 Authority Key Identifier:
                keyid:1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e34382e302f32322d3232203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:8a:35:e7:85:d9:a3:6f:15:17:90:af:44:62:21:ab:e4:
         39:c2:59:62:34:e2:c5:5f:13:6c:86:20:65:f2:cd:cf:83:2d:
         a9:36:af:59:07:dc:dd:14:2d:81:b8:c6:4b:9e:0c:26:f9:c8:
         83:ce:47:d5:4a:d9:2b:48:6a:7f:8d:03:1d:d4:2c:60:ad:32:
         a9:86:f1:f7:fa:7d:42:a9:13:17:c3:a7:ec:fe:74:88:fc:d5:
         46:12:25:e6:46:6c:84:29:c7:20:67:17:89:ee:7e:9b:fa:44:
         fb:60:64:53:12:e0:78:8b:9c:74:00:2e:55:32:a8:93:98:11:
         e6:7b:36:b3:e2:8c:f2:20:72:6b:5b:c5:51:7b:e7:f5:7c:0f:
         7a:e7:db:a9:ea:3d:3c:e0:ee:dc:09:ca:21:39:78:b5:38:33:
         16:24:12:32:ca:43:85:d4:37:77:79:57:9a:0d:27:78:d9:bd:
         80:82:d4:5c:04:8d:1c:98:0a:15:dc:d1:81:b3:73:2e:90:72:
         91:a7:1a:fa:e5:70:c9:cd:71:a2:99:db:24:66:40:a4:4d:db:
         58:1d:a0:44:bf:cb:2f:5e:cb:38:9f:1f:57:b3:31:6e:5e:1c:
         bb:2c:63:03:e0:94:fe:fa:67:f5:08:9a:67:88:bc:d6:53:1f:
         4b:1a:2f:61
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQJIUHk1fEn3VfWfKV2eZLslxwbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJDRjJCMDM4MUYyRjJDNDZGMEM3RjI0RURGN0NDMTgy
NDhBQzMzMjAeFw0yNDA0MTkyMDM1MzlaFw0yNTA0MTgyMDQwMzlaMDMxMTAvBgNV
BAMTKDNCQkU3MUExNDEzMzlEMDIyNzM2MzNCNDA0NjY4NkE3OTVCNEFFRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6iYZgLd2M1AKECZTkap1GoQN
Y9605G533xzvJhn+lMz9LazCBPQn4iNdWZ7wW+c136CCFckf62hFPVATHHXB9tGJ
zPTggtN5y3ft4I296HAQfVXS2Flq858M23sSWdjM1/B7nPRtIhy+/BQzt9yi7gzu
GxJW4W3N3yJ1QfFmYfOy2Z2ZnkJqVLrbEl8qcEWuPfsg/erqtIv/DSN25B4ElRVB
Mbs94xKUNX9Hsij9kv99s+ATMoHNDBnLL7X/qXX+XYeSfUtYbPR3aH2POxt1ZOdR
V7wRdjlg5SmBrokyRGCB/v9Q+xPaW0XP1zzdQ7Rgngd3y6Sq4sXs6oOoukYzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUO75xoUEznQInNjO0BGaGp5W0rvswHwYDVR0j
BBgwFoAUG88rA4Hy8sRvDH8k7ffMGCSKwzIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFRuV3JjdmR5Y21aNjY5aUtaRnJ1anlITGhiUHR3TjZrWjMzNHdTNFFW
TEwvMS8xQkNGMkIwMzgxRjJGMkM0NkYwQzdGMjRFREY3Q0MxODI0OEFDMzMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQ0YyQjAzODFGMkYyQzQ2
RjBDN0YyNEVERjdDQzE4MjQ4QUMzMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUbldyY3ZkeWNtWjY2OWlLWkZydWp5SExoYlB0d042a1ozMzR3UzRRVkxMLzEv
MzQzNTJlMzEzNjM2MmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaYwMA0GCSqGSIb3DQEBCwUAA4IBAQB6s4o154XZ
o28VF5CvRGIhq+Q5wlliNOLFXxNshiBl8s3Pgy2pNq9ZB9zdFC2BuMZLngwm+ciD
zkfVStkrSGp/jQMd1CxgrTKphvH3+n1CqRMXw6fs/nSI/NVGEiXmRmyEKccgZxeJ
7n6b+kT7YGRTEuB4i5x0AC5VMqiTmBHmezaz4ozyIHJrW8VRe+f1fA9659up6j08
4O7cCcohOXi1ODMWJBIyykOF1Dd3eVeaDSd42b2AgtRcBI0cmAoV3NGBs3MukHKR
pxr65XDJzXGimdskZkCkTdtYHaBEv8svXss4nx9XszFuXhy7LGMD4JT++mf1CJpn
iLzWUx9LGi9h
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org