Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/34352e3136372e3130342e302f32332d3233203d3e20323638303534.roa
File:                     34352e3136372e3130342e302f32332d3233203d3e20323638303534.roa (raw, json)
Hash identifier:          XgsshlD8ctFOuw/fZy1hSFhLFQLKVYLjbB4X+IaxRMw=
Subject key identifier:   04:82:06:B9:D2:F5:10:38:EC:13:C9:60:C2:20:A7:82:E7:0B:03:77
Certificate issuer:       /CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
Certificate serial:       59BF44188F8973269F54C9D139B7943D0858DAB6
Authority key identifier: 24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/34352e3136372e3130342e302f32332d3233203d3e20323638303534.roa
Signing time:             Thu 11 Apr 2024 21:19:02 +0000
ROA not before:           Thu 11 Apr 2024 21:14:02 +0000
ROA not after:            Thu 10 Apr 2025 21:19:02 +0000
asID:                     268054
IP address blocks:        45.167.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bf:44:18:8f:89:73:26:9f:54:c9:d1:39:b7:94:3d:08:58:da:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
        Validity
            Not Before: Apr 11 21:14:02 2024 GMT
            Not After : Apr 10 21:19:02 2025 GMT
        Subject: CN=048206B9D2F51038EC13C960C220A782E70B0377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:97:b2:d5:0e:8d:fa:be:6f:d7:45:43:43:
                    c2:e6:e2:f8:0e:8f:99:2d:78:4d:57:e6:e0:f9:3e:
                    a1:9a:cd:31:86:37:7d:f9:68:a6:9b:ea:f0:a8:82:
                    c9:b9:f8:04:12:50:9f:f9:37:74:93:80:41:49:9f:
                    5a:11:76:88:c0:17:60:2c:1f:d0:0d:7f:77:dd:47:
                    54:65:9a:92:dd:74:67:30:ac:33:fd:25:e0:e6:19:
                    2a:93:88:5a:ab:33:48:44:54:a1:7f:13:74:63:ba:
                    9a:c8:c3:88:84:53:9a:a6:38:9b:e1:87:57:97:c0:
                    a7:a6:3c:18:a7:db:09:e4:f6:33:6c:77:79:34:b8:
                    10:8b:15:6f:b1:fb:9a:f7:8a:31:af:dc:30:d4:e3:
                    8d:39:7d:11:43:42:e4:e7:88:d7:be:eb:b3:0b:21:
                    03:e5:e5:6c:ee:dc:bf:a4:c8:7a:52:99:b4:93:65:
                    e7:0d:15:7b:25:34:f5:8f:3a:c0:89:63:9e:a7:03:
                    d9:a9:ba:67:cf:9c:fc:1f:8b:8f:f3:e0:cf:76:60:
                    01:40:4e:e5:8d:4e:75:67:bf:85:60:61:a9:fa:91:
                    3d:3f:88:07:2f:8e:8a:e9:8b:19:6a:e5:84:d6:87:
                    e7:0e:4f:78:c0:fc:2a:fa:69:6a:be:21:74:45:a6:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:82:06:B9:D2:F5:10:38:EC:13:C9:60:C2:20:A7:82:E7:0B:03:77
            X509v3 Authority Key Identifier:
                keyid:24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/34352e3136372e3130342e302f32332d3233203d3e20323638303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:10:95:8e:79:b8:5f:88:31:b4:de:d9:fd:54:d1:d7:a4:26:
         ee:02:d9:17:fe:7c:90:72:74:9a:5d:0e:96:89:f6:28:30:4b:
         f9:54:ac:59:64:da:33:28:8c:fc:f7:d4:64:9d:98:83:0f:16:
         dc:23:e4:92:e0:fd:38:56:35:87:6d:f7:cf:df:bf:8b:63:cd:
         c3:f2:1d:18:06:b2:0c:d2:57:42:76:0d:01:20:77:15:25:07:
         09:b4:23:e2:78:b9:df:9c:24:85:9c:4b:91:fe:c5:0f:3d:df:
         9d:31:4a:3f:ff:72:00:05:e7:45:df:a3:2f:e9:79:e2:75:0c:
         6b:a3:78:91:ef:ce:30:4b:5a:e4:d7:0b:1e:e4:92:41:8b:44:
         02:65:f6:6b:3d:d4:6a:79:a5:6d:66:f4:c8:50:5c:18:d8:c9:
         ee:bc:75:96:4f:00:75:fb:3e:bf:c2:f2:44:f4:6c:83:df:43:
         71:77:8f:cd:d9:38:50:f6:08:0a:2d:6a:94:75:ee:46:79:67:
         dc:e3:46:9f:b0:aa:03:5a:4e:9a:8a:3b:29:1d:59:25:9d:e4:
         fd:66:9e:2a:7a:6c:dc:8d:16:79:d0:6f:15:07:fe:17:eb:af:
         77:74:2b:d8:0d:f3:1e:55:e8:3e:52:fc:fd:85:03:17:f3:4d:
         24:36:26:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org