Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32332d3234203d3e20323633393830.roa
File:                     34352e3233322e3230302e302f32332d3234203d3e20323633393830.roa (raw, json)
Hash identifier:          rGGP2L8QBLkWZjBZagg99y4vwJaoEVpPaObO0Qrb21M=
Subject key identifier:   D8:3F:6C:9A:B3:6C:9C:FF:A2:61:C1:98:3E:3F:7E:4F:C2:C7:6E:76
Certificate issuer:       /CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
Certificate serial:       5AEE7F33160FED60811F1B170B82650FDE476782
Authority key identifier: 0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32332d3234203d3e20323633393830.roa
Signing time:             Thu 15 Feb 2024 18:39:05 +0000
ROA not before:           Thu 15 Feb 2024 18:34:05 +0000
ROA not after:            Thu 13 Feb 2025 18:39:05 +0000
asID:                     263980
IP address blocks:        45.232.200.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ee:7f:33:16:0f:ed:60:81:1f:1b:17:0b:82:65:0f:de:47:67:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
        Validity
            Not Before: Feb 15 18:34:05 2024 GMT
            Not After : Feb 13 18:39:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:2d:4e:d9:e5:a8:f4:30:74:cb:e7:d4:cb:
                    04:ca:f1:f6:27:ef:e0:b2:87:30:ef:83:1f:66:77:
                    28:c3:0e:5d:e9:af:40:5c:34:66:a9:fb:9a:0a:99:
                    7c:eb:80:91:c4:c7:c4:6a:12:17:9c:e1:ed:c7:2f:
                    f9:90:bb:99:b1:4f:1c:e7:c8:2b:b7:72:fe:8a:a8:
                    2d:51:dd:22:df:f2:94:ac:13:f5:51:a9:72:c3:12:
                    29:44:18:57:3a:c2:ec:32:08:cb:be:fe:f1:c3:d6:
                    ae:fb:c7:f3:47:15:57:e2:59:90:80:b5:67:31:a8:
                    c3:5f:a0:75:f4:3a:5e:5f:76:f9:6b:41:55:52:ce:
                    39:b9:f0:0b:c5:ec:c6:89:50:38:b5:af:02:0d:74:
                    ef:32:3b:6c:5f:6e:10:bb:41:96:8d:cf:f0:8c:31:
                    6c:2e:0d:af:53:87:83:e6:b9:d2:81:da:5c:34:56:
                    79:86:d6:6c:31:70:55:fa:9f:e5:28:e0:74:3a:cf:
                    39:73:91:bc:6b:43:5b:94:10:5f:b3:d3:36:ae:5d:
                    02:4e:12:64:8f:45:68:bd:2b:9c:2c:4f:26:02:fa:
                    9b:80:4d:68:a2:40:05:fd:13:93:46:d5:0c:21:51:
                    f3:63:14:85:8e:ee:ba:a0:a3:07:e2:19:7d:2d:d8:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3F:6C:9A:B3:6C:9C:FF:A2:61:C1:98:3E:3F:7E:4F:C2:C7:6E:76
            X509v3 Authority Key Identifier:
                keyid:0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32332d3234203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:af:3b:5d:7a:92:f6:51:cc:e3:8f:a9:dc:b3:24:a4:f7:05:
         c4:55:ff:4e:5f:10:ea:89:14:68:1b:66:15:5a:3a:82:d6:25:
         f1:39:68:d7:f4:20:42:b5:ed:6b:33:ff:f7:23:49:b7:7f:30:
         3c:83:f9:ea:33:14:50:56:3f:ab:36:53:99:c9:62:68:72:56:
         57:62:ff:19:9c:bb:1f:f4:ed:38:ba:61:09:85:97:e1:bb:1f:
         9a:9c:11:e6:21:ec:b0:fc:4a:46:d5:60:e6:75:00:85:44:fb:
         95:7e:d6:a2:75:5e:0a:5d:77:e4:6e:16:e9:a7:64:f8:c5:ee:
         eb:3f:c9:94:8a:45:f0:e8:0f:6d:68:58:f3:95:2a:9a:33:80:
         bc:c2:e5:de:32:9f:73:fe:95:eb:81:2e:8c:28:5a:9d:e2:6a:
         6d:1a:29:1c:49:5f:50:0b:93:55:43:70:b1:81:a4:8b:d1:5b:
         3e:a1:fd:cd:54:1a:c8:14:1f:81:e1:af:95:dc:cf:9a:8c:4b:
         ea:2e:d3:99:a6:cb:17:70:44:43:32:bc:27:4d:d0:b4:e5:99:
         ae:a9:60:92:06:29:ae:bc:9b:af:c5:37:2f:09:9e:6e:31:b5:
         46:6e:8d:1f:95:4b:c0:89:c5:ef:a6:8f:06:47:d9:a4:b1:4e:
         c5:34:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org