Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39362e302f32342d3234203d3e20323639333732.roa
File:                     34352e3138352e39362e302f32342d3234203d3e20323639333732.roa (raw, json)
Hash identifier:          XG5EM5hzlBeT6nfzeeHPEJ6Q38vBY5cfnCKgxjM15VY=
Subject key identifier:   C5:6D:0D:FF:07:1D:40:FF:94:D3:5E:10:CC:DC:D3:89:2F:3B:AF:AF
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       728C0F747220524E66F223B120EAE42173694DB9
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39362e302f32342d3234203d3e20323639333732.roa
Signing time:             Mon 18 Dec 2023 19:14:58 +0000
ROA not before:           Mon 18 Dec 2023 19:09:58 +0000
ROA not after:            Mon 16 Dec 2024 19:14:58 +0000
asID:                     269372
IP address blocks:        45.185.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8c:0f:74:72:20:52:4e:66:f2:23:b1:20:ea:e4:21:73:69:4d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Dec 18 19:09:58 2023 GMT
            Not After : Dec 16 19:14:58 2024 GMT
        Subject: CN=C56D0DFF071D40FF94D35E10CCDCD3892F3BAFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:0b:46:b2:a2:25:bd:38:e2:7f:e0:09:31:
                    2a:cf:c3:68:5a:d2:46:d5:b8:90:eb:b4:2a:e4:b5:
                    e9:3b:75:ed:cc:91:16:f1:8d:4f:2e:e6:a4:ed:35:
                    65:a1:ed:5f:3d:c8:b7:43:31:03:01:cd:58:5e:bc:
                    8c:ec:02:db:f0:92:e3:dc:06:8d:58:e5:6a:7a:d4:
                    10:9b:ac:6d:b0:9d:05:9c:a4:8d:0a:03:a6:6e:44:
                    8d:ac:59:92:0f:34:90:d7:ec:fd:bc:0b:79:f2:78:
                    aa:b2:e5:8d:04:f3:20:af:8b:3d:d6:4c:b7:91:87:
                    6a:76:dd:9f:e5:bb:e5:6b:50:77:0e:2b:24:6d:9c:
                    5f:c8:29:7c:89:02:a8:b1:41:17:c1:17:b8:bd:8e:
                    28:0a:7b:50:1d:64:14:ed:89:ff:3e:0c:9c:27:70:
                    0e:00:67:c3:fc:26:70:0e:9c:fe:a4:0e:de:b8:43:
                    9b:41:e4:ca:8d:db:d1:b4:c6:ba:fb:ce:67:a6:0e:
                    97:70:66:60:ef:af:17:38:fb:9e:10:66:ba:82:a3:
                    64:1a:c2:25:7b:f7:64:63:9d:1a:cd:4a:1f:af:8c:
                    d3:96:d1:90:59:de:39:69:51:6b:4a:1d:b8:09:41:
                    37:bd:f3:e4:ee:a4:16:16:75:3a:43:19:bf:99:d1:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:0D:FF:07:1D:40:FF:94:D3:5E:10:CC:DC:D3:89:2F:3B:AF:AF
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39362e302f32342d3234203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ba:98:59:88:5d:e3:a6:b0:ab:ad:31:54:89:fd:f1:10:ea:
         80:06:da:e5:20:dc:6f:6d:54:3a:d4:f8:85:4e:7c:eb:73:04:
         31:35:a9:75:a3:fc:9c:9c:38:1d:eb:71:c6:14:96:83:e8:0e:
         48:e4:ba:90:e1:bc:e2:79:e6:47:56:ca:f4:72:20:e5:4a:dc:
         2f:9d:6f:71:02:45:c9:c2:37:79:6a:be:5d:15:03:df:e5:c8:
         2c:52:d0:82:00:a2:17:54:14:bd:fc:3c:e0:b2:e2:05:b8:5d:
         1b:4d:68:49:2f:3c:fb:f3:46:31:20:a4:d9:e0:b6:ad:f6:b5:
         a6:d4:48:58:d4:4c:30:d2:73:3f:13:fb:0a:5d:c2:56:df:67:
         22:92:30:5a:8e:94:8c:d9:0a:1b:de:a1:ba:ff:02:3d:19:eb:
         32:4d:f2:b3:82:27:47:a1:3d:b7:d8:aa:fc:c6:3e:63:53:0f:
         ad:98:54:4f:89:c3:c9:fe:8e:69:d3:1f:b4:dc:d1:dc:64:b4:
         ef:3e:fd:a8:bf:d5:fb:c2:42:69:31:37:3f:dd:f1:db:72:3e:
         a9:ee:2d:ab:29:c1:9d:5e:84:f3:6e:d5:c1:a9:37:a9:75:df:
         52:98:87:f6:76:2b:e2:b8:b1:6e:86:df:2d:af:2b:2f:f4:e0:
         7b:61:28:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org