Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa
File:                     34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa (raw, json)
Hash identifier:          zZ4mI6pWzTjdKB4zyrIItwFVuymSbMCYbf+Sim7+uKU=
Subject key identifier:   DA:7E:FD:70:45:FF:50:EE:AE:AC:AD:B4:29:73:45:2E:99:90:82:31
Certificate issuer:       /CN=48DFE379FC64C3F50512033477F929291FC10CF2
Certificate serial:       788F20339EACA7E2323C4AE2E3D41C5A4F1AC619
Authority key identifier: 48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa
Signing time:             Fri 08 Mar 2024 19:48:43 +0000
ROA not before:           Fri 08 Mar 2024 19:43:43 +0000
ROA not after:            Fri 07 Mar 2025 19:48:43 +0000
asID:                     268106
IP address blocks:        45.169.108.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8f:20:33:9e:ac:a7:e2:32:3c:4a:e2:e3:d4:1c:5a:4f:1a:c6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DFE379FC64C3F50512033477F929291FC10CF2
        Validity
            Not Before: Mar  8 19:43:43 2024 GMT
            Not After : Mar  7 19:48:43 2025 GMT
        Subject: CN=DA7EFD7045FF50EEAEACADB42973452E99908231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:c7:96:52:6e:5e:19:07:60:bc:f6:64:bd:
                    0e:f4:29:ad:73:84:17:7d:cf:40:75:6b:72:25:97:
                    ce:c7:97:3e:b2:66:d4:60:39:d0:69:3c:bc:96:60:
                    ac:e4:6b:fd:d4:90:0d:27:13:4a:e8:cb:85:4f:e7:
                    69:04:cb:a3:f0:8d:83:40:f7:7e:b1:23:b7:aa:c4:
                    b0:47:75:ba:84:c2:0a:96:b4:51:96:3a:95:68:e5:
                    b2:25:10:53:fa:2b:34:0e:63:39:ac:c6:ac:5f:83:
                    b0:86:4f:d0:1d:ca:7c:03:06:bd:b7:51:d2:10:5e:
                    d3:06:b9:46:ac:94:fb:0a:e8:6a:e1:09:74:b2:c7:
                    21:4c:80:aa:44:fc:d6:9e:ee:d9:bb:a2:13:bb:83:
                    24:81:7c:1b:aa:05:fe:de:84:c7:4f:da:1f:60:bc:
                    e8:58:f8:06:1f:6b:ba:57:8b:4b:09:e1:69:d2:0d:
                    16:7f:1e:3d:7e:92:a3:f1:b3:c7:9a:36:87:1b:a7:
                    29:04:9b:a7:eb:28:5f:58:2c:44:0c:f1:19:a6:50:
                    a0:3e:a9:27:77:b6:50:ab:e2:93:a6:24:a9:13:67:
                    61:c9:b4:5a:83:34:d0:12:65:cf:fa:24:39:7a:4d:
                    ec:0a:94:fc:90:ff:b8:eb:e6:69:86:a1:a7:84:e2:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:FD:70:45:FF:50:EE:AE:AC:AD:B4:29:73:45:2E:99:90:82:31
            X509v3 Authority Key Identifier:
                keyid:48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:21:5c:ef:6c:df:05:c1:e8:55:78:2d:64:64:9e:d2:8c:88:
         aa:22:a7:75:9b:b2:dc:bc:6e:24:0e:93:bd:43:40:6d:98:01:
         26:77:84:53:2b:77:94:75:78:5c:ae:4a:52:f3:a6:71:80:61:
         7c:b9:ed:bb:01:58:15:8e:3d:85:f0:c5:bc:a8:06:db:60:2f:
         b2:0e:58:80:d1:a0:47:a6:2c:a9:63:fc:bd:02:a4:8e:4f:4a:
         f6:9f:22:bc:78:2e:eb:1f:c3:09:18:f5:5c:25:91:9b:60:ea:
         1b:4d:fa:99:19:bd:4f:da:7c:ec:f8:ce:1c:6a:fa:d6:1a:56:
         d0:6b:a1:45:0a:7e:e0:60:9c:59:87:3c:25:90:d3:5a:b9:62:
         f9:1d:0b:a7:a5:df:31:60:77:cb:5c:db:34:56:60:72:73:6f:
         08:f6:f3:f8:d6:5b:0d:8b:6c:ce:03:88:d5:3a:ca:c4:a6:5a:
         8f:2d:00:38:99:fc:94:5a:29:23:53:9b:9a:e0:c8:f7:29:37:
         c5:e0:a0:f1:f8:55:8e:86:45:29:e7:b8:02:76:68:11:ef:51:
         65:32:af:11:97:29:29:7a:b9:37:98:ef:d6:7f:f2:f5:b9:9d:
         11:68:43:54:fc:e6:62:2e:0c:41:a5:23:76:ca:e9:d6:87:9b:
         9d:48:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org