Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139352e302f32342d3234203d3e20323637323234.roa
File:                     34352e3233312e3139352e302f32342d3234203d3e20323637323234.roa (raw, json)
Hash identifier:          aFux7knQF2B1P/HkOYFjn2s5d69S/HrJxbrWxEet3TM=
Subject key identifier:   1E:C4:5D:43:90:1A:7C:43:95:C6:43:EC:D6:16:FF:BB:4E:FC:6E:F3
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       37D75E88BFD25BBDDA989E519062D6BE0630B719
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139352e302f32342d3234203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:25 +0000
ROA not before:           Tue 14 Nov 2023 19:29:25 +0000
ROA not after:            Tue 12 Nov 2024 19:34:25 +0000
asID:                     267224
IP address blocks:        45.231.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d7:5e:88:bf:d2:5b:bd:da:98:9e:51:90:62:d6:be:06:30:b7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:25 2023 GMT
            Not After : Nov 12 19:34:25 2024 GMT
        Subject: CN=1EC45D43901A7C4395C643ECD616FFBB4EFC6EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:b1:a3:22:7f:81:fe:b5:e7:05:6f:87:7a:
                    bf:50:bd:d6:11:0b:21:cb:64:36:72:a4:e0:43:bd:
                    10:0a:b8:cb:6c:f0:e4:aa:0a:fb:88:b4:1c:0c:9b:
                    cf:49:39:df:57:8e:b6:42:79:e9:24:4f:2b:ba:36:
                    ff:81:b7:a8:25:a0:53:bf:0d:5f:0b:b9:fa:08:a0:
                    a5:d1:60:8a:9d:d1:73:23:fb:db:3a:3b:b9:49:d2:
                    ab:ad:83:0c:36:bc:c9:39:24:80:2d:cd:f7:bb:05:
                    59:c7:cc:b6:be:c6:e6:38:22:dc:f8:04:df:44:bb:
                    0b:f6:a0:95:3f:f2:7e:84:b8:af:c5:29:fe:4a:52:
                    7f:03:73:20:59:64:25:80:20:48:5d:69:3b:ab:f5:
                    9c:d5:ba:ad:e8:46:bd:8b:9f:2c:b7:85:6d:5a:1e:
                    71:6b:5b:a3:30:e4:56:50:b7:d2:66:4f:a3:2c:e9:
                    3f:51:1f:07:47:82:57:d1:c9:22:f3:de:3a:40:85:
                    7c:87:96:0b:77:ac:32:8c:c4:58:b9:18:3f:09:ee:
                    ec:cb:d2:81:c0:c7:77:dd:4a:e8:f2:0c:28:45:53:
                    62:66:78:ea:c8:4a:a6:ca:76:a0:c3:52:1d:fd:f2:
                    15:02:1e:fd:2b:f3:b5:df:81:2e:4b:1d:6a:c6:ff:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C4:5D:43:90:1A:7C:43:95:C6:43:EC:D6:16:FF:BB:4E:FC:6E:F3
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139352e302f32342d3234203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5c:c7:5d:0f:ef:b7:12:e6:c1:a3:d8:53:5c:fb:9b:db:5d:
         84:45:8c:3e:41:b4:a7:bc:83:98:e8:98:3c:24:3e:00:9d:71:
         2d:f4:70:1e:31:31:38:dd:6e:3b:02:d6:0d:1e:7f:35:50:32:
         ee:cc:78:f2:7f:ac:ee:2f:6b:79:46:c8:49:58:ca:32:7a:f7:
         68:d0:7b:8b:7c:df:af:87:c6:69:b7:53:c2:2e:66:a8:f1:01:
         85:02:b1:38:dd:ca:fc:8e:66:39:89:66:d4:37:19:fd:61:03:
         dc:01:e9:45:9d:6a:11:e1:b3:3f:b9:8e:46:d4:b2:43:55:03:
         ce:aa:ed:13:27:ec:23:3e:48:12:af:78:a4:e8:7d:47:09:66:
         e2:22:c4:ad:06:cc:72:ea:c2:e6:cc:f2:c6:af:84:11:49:59:
         83:47:21:7e:48:ae:ff:50:19:36:aa:95:a3:55:cc:f4:60:48:
         05:04:ef:3c:ea:8d:b2:03:39:90:23:33:5c:d3:6e:14:c0:c7:
         8d:7b:af:64:4f:35:e1:42:f4:9b:99:32:d3:79:7f:a2:86:71:
         d9:b0:78:1b:a1:47:55:fb:1a:2e:91:e7:b6:8b:d2:85:f8:7b:
         18:e1:f0:a6:f6:07:4b:aa:e4:ba:b9:b0:60:7c:a2:16:d0:5e:
         e0:b6:2f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org