Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32342d3234203d3e20323639373034.roa
File:                     34352e3139312e3130342e302f32342d3234203d3e20323639373034.roa (raw, json)
Hash identifier:          A7SlQuDJWIdpJR0R4lhA1lm5rCSiGRrU+es/kFVhN9k=
Subject key identifier:   7C:F0:EB:FC:2D:A5:A9:2F:65:A2:62:2D:A0:93:BE:E2:B8:30:01:A3
Certificate issuer:       /CN=BB8B45D4059EE60780139D24D6D7C6AA4971E94E
Certificate serial:       3949E8E01E7A6956F3D1C18428DE3B4831F9DBEB
Authority key identifier: BB:8B:45:D4:05:9E:E6:07:80:13:9D:24:D6:D7:C6:AA:49:71:E9:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB8B45D4059EE60780139D24D6D7C6AA4971E94E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32342d3234203d3e20323639373034.roa
Signing time:             Thu 30 Nov 2023 00:18:40 +0000
ROA not before:           Thu 30 Nov 2023 00:13:40 +0000
ROA not after:            Thu 28 Nov 2024 00:18:40 +0000
asID:                     269704
IP address blocks:        45.191.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:49:e8:e0:1e:7a:69:56:f3:d1:c1:84:28:de:3b:48:31:f9:db:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8B45D4059EE60780139D24D6D7C6AA4971E94E
        Validity
            Not Before: Nov 30 00:13:40 2023 GMT
            Not After : Nov 28 00:18:40 2024 GMT
        Subject: CN=7CF0EBFC2DA5A92F65A2622DA093BEE2B83001A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:0f:84:44:60:46:42:24:6b:d2:20:71:63:
                    38:1b:24:95:bb:38:f8:58:56:43:f9:56:8a:1b:32:
                    ee:78:53:f0:0c:d8:98:9f:95:22:49:98:e5:e1:47:
                    6d:b2:59:a1:f4:bc:91:56:5b:52:fb:d9:86:23:be:
                    35:1d:fb:49:58:87:d4:16:0e:66:cd:50:0c:89:23:
                    d0:70:63:a0:f1:b8:b9:d4:f9:64:02:50:ce:93:64:
                    f1:21:86:eb:f2:b3:bf:d0:02:14:80:5a:33:39:a5:
                    93:a0:c2:25:1c:67:96:f1:82:fe:fc:df:22:5d:fb:
                    19:d6:08:80:d8:21:86:55:f8:1b:a3:0a:ba:25:a9:
                    50:4d:fc:5d:c8:e5:5e:e1:58:70:69:0b:2e:02:ac:
                    4e:ea:57:e5:1b:fe:ce:b6:52:c1:28:6e:f4:5d:a0:
                    8e:0b:7a:2c:19:1b:70:a1:dc:58:04:4f:d2:8c:5c:
                    60:6f:82:41:08:d1:2b:d1:ba:ed:29:63:2b:13:72:
                    c0:d8:e6:a1:d2:cd:70:92:1a:f7:c5:5e:a3:0c:a1:
                    5a:f8:86:c8:6a:3d:b7:45:ef:5b:99:07:02:99:5c:
                    03:3a:d9:57:db:b5:29:bf:a5:32:2f:45:2b:f6:b5:
                    32:09:ef:b7:c4:fd:3b:65:36:96:f2:49:fa:33:15:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F0:EB:FC:2D:A5:A9:2F:65:A2:62:2D:A0:93:BE:E2:B8:30:01:A3
            X509v3 Authority Key Identifier:
                keyid:BB:8B:45:D4:05:9E:E6:07:80:13:9D:24:D6:D7:C6:AA:49:71:E9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/BB8B45D4059EE60780139D24D6D7C6AA4971E94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB8B45D4059EE60780139D24D6D7C6AA4971E94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32342d3234203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:15:0a:e9:4e:3f:de:40:e7:58:19:ba:c0:5a:86:4a:a0:
         43:1f:3a:43:f1:4e:67:c7:e2:cb:4e:24:2d:62:4a:fb:64:55:
         16:8f:4b:e2:b9:0f:16:d9:8b:36:71:9b:08:ae:1d:8c:a0:1f:
         6c:df:79:06:d2:0f:07:00:15:c0:76:4b:15:47:6c:c1:e9:d3:
         6f:7c:59:58:e4:69:6e:74:31:6a:62:6c:fa:77:03:7d:f3:ae:
         de:7b:39:d3:9f:a3:a3:f0:56:64:19:e1:0b:22:a6:97:67:4f:
         2b:31:d9:4e:37:09:e8:61:17:d3:8d:7f:e8:7f:f8:fc:38:c1:
         cb:d2:e0:83:91:b9:28:cf:17:80:29:ac:a7:31:37:c7:34:42:
         8a:f7:89:7f:04:9e:24:cf:b2:09:bc:ce:a0:f3:b0:31:1d:6a:
         71:44:de:85:3c:58:0f:60:c5:89:5e:17:1c:57:2c:62:d0:20:
         2e:56:e9:ca:0c:ff:3b:70:22:8b:16:cc:4b:31:45:7b:7f:55:
         f8:e2:c9:34:46:de:16:18:19:b8:2a:b3:fa:03:eb:6b:56:73:
         4b:67:01:eb:1d:34:e8:b4:26:85:5c:2b:75:f7:56:cc:d6:1f:
         e5:df:e3:7c:2d:3d:84:78:b6:d9:48:94:5e:1e:62:88:0d:29:
         f2:aa:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org