Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/34352e37312e34332e302f32342d3234203d3e20323733333136.roa
File:                     34352e37312e34332e302f32342d3234203d3e20323733333136.roa (raw, json)
Hash identifier:          gez99E0CqFe0KZYHO6iBxhM+dvmVY+uWTYj0fOykIuo=
Subject key identifier:   84:62:69:E2:25:B6:4F:D0:B9:F1:1C:5D:71:FF:E9:6D:E5:9C:08:15
Certificate issuer:       /CN=F2AF358E38DAD66120C87DB6C1201E9E226E2647
Certificate serial:       6FF295491D199266E64CAE9A36D7941942E32BE1
Authority key identifier: F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/34352e37312e34332e302f32342d3234203d3e20323733333136.roa
Signing time:             Thu 15 Feb 2024 11:47:22 +0000
ROA not before:           Thu 15 Feb 2024 11:42:22 +0000
ROA not after:            Thu 13 Feb 2025 11:47:22 +0000
asID:                     273316
IP address blocks:        45.71.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f2:95:49:1d:19:92:66:e6:4c:ae:9a:36:d7:94:19:42:e3:2b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AF358E38DAD66120C87DB6C1201E9E226E2647
        Validity
            Not Before: Feb 15 11:42:22 2024 GMT
            Not After : Feb 13 11:47:22 2025 GMT
        Subject: CN=846269E225B64FD0B9F11C5D71FFE96DE59C0815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:cc:79:e3:dc:3b:2c:78:09:92:a1:3d:bb:
                    bc:e2:9e:db:d0:6a:0f:c8:67:9e:72:f8:43:54:80:
                    73:21:81:0c:80:aa:a9:c1:f6:4e:d9:0e:94:1e:b2:
                    a7:19:9c:b3:12:7f:b0:e0:cd:fd:ed:8c:a5:47:17:
                    16:79:83:55:0f:d1:a1:cf:6e:e3:bb:80:d5:d2:72:
                    98:fd:f8:26:63:15:1a:86:69:85:01:e0:f0:89:07:
                    69:37:83:17:d1:62:54:19:6f:d7:c5:a8:e2:0b:47:
                    17:bd:3d:52:cb:5e:c8:89:83:86:ff:5d:79:e6:12:
                    ed:bc:0c:78:7f:3c:a3:e9:6d:23:92:16:b5:94:f2:
                    97:44:1c:61:6d:1c:3f:2f:bf:d7:51:68:68:02:26:
                    84:24:23:75:2c:8b:46:a5:8f:89:09:ff:be:c4:7f:
                    7f:61:dd:b2:22:4f:ba:a4:f2:e4:10:9f:87:6e:20:
                    7f:61:0d:10:61:d8:4d:f0:d4:f4:37:23:63:ba:04:
                    5a:c2:a0:3d:d3:71:e5:85:cf:9c:96:5d:b1:6c:7b:
                    90:b7:9c:cb:99:37:8b:3b:e3:29:8b:6a:90:cc:00:
                    bc:29:79:8f:86:c2:aa:80:8c:61:6b:5c:1e:d2:e4:
                    c2:20:61:a9:c6:05:9d:ca:dc:db:fe:b0:50:2e:d5:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:62:69:E2:25:B6:4F:D0:B9:F1:1C:5D:71:FF:E9:6D:E5:9C:08:15
            X509v3 Authority Key Identifier:
                keyid:F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/34352e37312e34332e302f32342d3234203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:eb:30:7d:43:22:a0:dd:3a:ca:ff:5d:79:35:35:c3:98:44:
         14:24:ce:20:d3:00:53:90:48:f2:01:9c:7d:e0:a0:1f:1e:80:
         a0:17:ff:7a:81:73:45:cb:42:21:e9:8e:14:05:41:36:57:b1:
         52:db:7d:f4:eb:3a:74:35:1a:82:ce:36:4e:05:61:3f:a7:b0:
         da:74:38:6d:24:73:b7:a1:3f:76:32:36:b0:ee:68:b4:f4:42:
         73:61:aa:5e:f6:65:88:7f:bf:ba:c4:ec:37:11:ab:20:37:02:
         27:ce:dc:c2:c2:bf:57:7c:52:18:2e:3d:ae:15:5f:12:af:7a:
         6c:f6:b4:0f:57:ca:00:aa:1f:a8:27:ca:83:10:df:cd:ba:68:
         a1:ac:d2:1b:fd:f1:de:a1:db:87:cc:15:00:ed:3c:ad:05:a3:
         30:f7:69:6a:30:0b:8f:e3:72:31:a3:c6:c3:6a:0e:aa:15:79:
         7c:1f:b3:9a:f9:65:60:10:d6:b6:7b:b8:18:26:f4:b8:28:d9:
         04:a7:20:bd:db:34:dc:75:7e:2d:4c:17:b7:10:f3:81:2b:0c:
         63:79:15:cc:98:8a:81:dd:ac:8a:cc:e3:7d:73:f6:b6:8b:e1:
         4c:15:c5:3c:d9:d5:95:03:08:e1:de:a1:ff:41:ee:89:f6:96:
         22:8b:1c:4e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUb/KVSR0ZkmbmTK6aNteUGULjK+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJBRjM1OEUzOERBRDY2MTIwQzg3REI2QzEyMDFFOUUy
MjZFMjY0NzAeFw0yNDAyMTUxMTQyMjJaFw0yNTAyMTMxMTQ3MjJaMDMxMTAvBgNV
BAMTKDg0NjI2OUUyMjVCNjRGRDBCOUYxMUM1RDcxRkZFOTZERTU5QzA4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hcx549w7LHgJkqE9u7zintvQ
ag/IZ55y+ENUgHMhgQyAqqnB9k7ZDpQesqcZnLMSf7Dgzf3tjKVHFxZ5g1UP0aHP
buO7gNXScpj9+CZjFRqGaYUB4PCJB2k3gxfRYlQZb9fFqOILRxe9PVLLXsiJg4b/
XXnmEu28DHh/PKPpbSOSFrWU8pdEHGFtHD8vv9dRaGgCJoQkI3Usi0alj4kJ/77E
f39h3bIiT7qk8uQQn4duIH9hDRBh2E3w1PQ3I2O6BFrCoD3TceWFz5yWXbFse5C3
nMuZN4s74ymLapDMALwpeY+GwqqAjGFrXB7S5MIgYanGBZ3K3Nv+sFAu1SS/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhGJp4iW2T9C58Rxdcf/pbeWcCBUwHwYDVR0j
BBgwFoAU8q81jjja1mEgyH22wSAeniJuJkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJBTWYzRzFvdnBUUWg1emVQQ2RMRnBxVnR1THBaQXdoRlNHSm5BeDRp
YjgvMC9GMkFGMzU4RTM4REFENjYxMjBDODdEQjZDMTIwMUU5RTIyNkUyNjQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyQUYzNThFMzhEQUQ2NjEy
MEM4N0RCNkMxMjAxRTlFMjI2RTI2NDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyQU1mM0cxb3ZwVFFoNXplUENkTEZwcVZ0dUxwWkF3aEZTR0puQXg0aWI4LzAv
MzQzNTJlMzczMTJlMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMzMz
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC1HKzANBgkqhkiG9w0BAQsFAAOCAQEAZ+swfUMioN06
yv9deTU1w5hEFCTOINMAU5BI8gGcfeCgHx6AoBf/eoFzRctCIemOFAVBNlexUtt9
9Os6dDUags42TgVhP6ew2nQ4bSRzt6E/djI2sO5otPRCc2GqXvZliH+/usTsNxGr
IDcCJ87cwsK/V3xSGC49rhVfEq96bPa0D1fKAKofqCfKgxDfzbpooazSG/3x3qHb
h8wVAO08rQWjMPdpajALj+NyMaPGw2oOqhV5fB+zmvllYBDWtnu4GCb0uCjZBKcg
vds03HV+LUwXtxDzgSsMY3kVzJiKgd2siszjfXP2tovhTBXFPNnVlQMI4d6h/0Hu
ifaWIoscTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org