Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa
File:                     34352e3233342e3130302e302f32322d3232203d3e203631353932.roa (raw, json)
Hash identifier:          Brw3DELwbb+zZpJRs+zxIEjL7GqYA/UPeu9ViWOMrlU=
Subject key identifier:   82:63:59:EC:10:A5:5F:80:9C:BE:4A:05:5F:7E:58:EE:64:C6:18:5C
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       0E4F37633AA1F0E0367CCC7D28F0C01507275C1D
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:00 +0000
ROA not before:           Thu 24 Aug 2023 18:48:00 +0000
ROA not after:            Thu 22 Aug 2024 18:53:00 +0000
asID:                     61592
IP address blocks:        45.234.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4f:37:63:3a:a1:f0:e0:36:7c:cc:7d:28:f0:c0:15:07:27:5c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:00 2023 GMT
            Not After : Aug 22 18:53:00 2024 GMT
        Subject: CN=826359EC10A55F809CBE4A055F7E58EE64C6185C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:07:50:90:fb:8b:45:36:8a:f8:38:ed:31:
                    f5:b5:7a:a6:05:df:96:45:22:df:6c:13:4c:1d:20:
                    9e:53:7b:87:31:31:ed:3a:a1:0e:b7:32:2c:72:30:
                    d2:2a:38:67:fa:77:ea:0d:6d:bd:2b:5a:6e:86:6e:
                    9a:3f:bb:80:56:b6:ec:93:94:3a:18:d3:e0:cc:99:
                    32:b4:36:df:c9:4d:69:fc:98:ca:b9:5d:e7:07:f9:
                    ac:a4:e3:54:44:a1:cb:78:86:2d:82:98:d7:af:0a:
                    d1:fe:c9:db:66:1c:97:ea:08:c4:2a:42:2f:12:bd:
                    7b:a2:fa:cc:89:2f:d5:de:db:cb:aa:fc:5f:4c:71:
                    31:de:a2:88:a9:3d:49:d4:22:3d:56:17:18:41:a9:
                    6c:3c:22:e0:b6:e0:51:e0:12:dc:cd:8a:e7:f0:73:
                    cf:2a:64:41:e8:b5:db:9a:3e:33:49:0e:ce:b3:b1:
                    a2:a6:cb:ba:00:9c:3d:dd:a6:6f:93:ba:24:ca:cf:
                    8f:24:20:1a:35:8d:40:a1:cb:52:cd:dc:23:b8:8e:
                    32:2b:d1:ad:a2:61:e2:c6:af:df:02:5b:b1:2a:d0:
                    79:6d:10:dc:11:f9:b5:e8:f1:88:24:9c:0f:e6:e7:
                    26:28:d1:5a:9e:b7:8f:ab:02:92:c3:64:f8:d9:da:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:63:59:EC:10:A5:5F:80:9C:BE:4A:05:5F:7E:58:EE:64:C6:18:5C
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:0e:bd:da:06:9c:9b:5d:34:64:cc:97:f8:5d:69:49:4c:d2:
         ff:aa:8a:f9:31:4f:c2:ec:6b:f0:fe:78:1a:7d:04:ec:fd:1d:
         91:b3:d7:15:48:09:c8:7d:c2:f2:b1:e0:45:39:92:a8:84:d2:
         4a:15:30:b9:0a:79:88:c7:20:f2:c3:85:05:f1:22:62:98:af:
         20:bf:32:55:7c:93:22:44:99:2c:76:0e:27:ff:2d:aa:ce:ef:
         a5:46:69:95:fc:9d:13:2f:a1:8f:6e:94:13:b2:0d:e2:46:06:
         42:43:ec:fb:d1:d3:dc:17:d7:93:67:32:af:2f:a0:01:f2:84:
         67:e7:1d:79:37:85:e5:a2:bd:b7:68:94:68:09:4d:b2:07:2b:
         3c:fd:7e:8d:2a:63:f9:be:9d:e5:51:8b:e8:04:8c:59:c1:84:
         96:49:a6:5d:0a:0f:6e:5c:75:9e:c4:57:d6:49:bf:1e:c8:4c:
         3c:b9:4f:ae:68:d9:a9:4c:26:aa:04:6b:c9:45:4c:e6:2f:34:
         f5:47:37:54:51:ca:5b:1b:30:3d:77:55:c1:79:4a:8d:b1:e3:
         05:30:75:4e:59:d8:7b:74:ff:c3:b7:6c:4e:3e:0a:dc:e8:8b:
         1f:48:e5:0e:95:ef:72:d9:e7:e6:71:e9:86:24:05:1f:b2:0d:
         b7:40:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org