Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33392e302f32342d3234203d3e20323639313631.roa
File:                     34352e3138312e33392e302f32342d3234203d3e20323639313631.roa (raw, json)
Hash identifier:          sN2N6QMQxl9kXEdENlrqDnu2tICl7ozrNNAYwrIwM6Y=
Subject key identifier:   EF:B9:5E:FE:E3:FF:41:0B:69:05:7C:A3:5E:E1:AD:2A:71:40:62:62
Certificate issuer:       /CN=391DEBC26509E9D194B7EE34BAA518754DF93098
Certificate serial:       1ED39DCFD323D7336A630CEB8C4644CFC48C6DEF
Authority key identifier: 39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391DEBC26509E9D194B7EE34BAA518754DF93098.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33392e302f32342d3234203d3e20323639313631.roa
Signing time:             Thu 29 Jun 2023 17:18:56 +0000
ROA not before:           Thu 29 Jun 2023 17:13:56 +0000
ROA not after:            Thu 27 Jun 2024 17:18:56 +0000
asID:                     269161
IP address blocks:        45.181.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d3:9d:cf:d3:23:d7:33:6a:63:0c:eb:8c:46:44:cf:c4:8c:6d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391DEBC26509E9D194B7EE34BAA518754DF93098
        Validity
            Not Before: Jun 29 17:13:56 2023 GMT
            Not After : Jun 27 17:18:56 2024 GMT
        Subject: CN=EFB95EFEE3FF410B69057CA35EE1AD2A71406262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:4e:2f:3a:b1:9c:94:ab:91:1c:32:85:a5:
                    94:41:9b:3e:98:b1:f0:35:81:6a:6b:97:98:e9:76:
                    92:98:7f:ae:04:3d:1c:9a:28:f4:dd:c8:67:fd:68:
                    34:f0:c2:5d:1c:7d:2d:37:2d:bb:7c:7b:c4:40:c1:
                    f5:f7:34:a4:c9:52:d1:66:7f:04:7b:d3:a9:72:0d:
                    24:92:84:4b:aa:54:c4:a5:d9:c4:34:63:c4:11:9f:
                    51:28:e2:ac:2e:a1:6f:88:fe:3c:18:ee:c2:a8:93:
                    73:4e:1b:7e:f1:25:23:53:34:8d:be:98:a7:25:22:
                    27:34:44:02:4c:98:29:23:c4:d2:07:91:6f:47:df:
                    00:7e:54:02:f8:49:26:52:1c:fb:03:5b:0f:4b:89:
                    36:71:aa:bb:a3:6c:ea:fa:d9:6b:bc:86:be:6b:86:
                    d4:f1:a4:d3:c1:3c:f8:55:b4:46:02:1b:d5:69:5e:
                    72:71:d5:98:40:66:16:71:40:94:40:ec:e1:8d:85:
                    75:8a:2f:02:77:32:4f:25:23:06:54:a7:bf:b8:bf:
                    3c:8f:db:77:eb:65:b6:d5:81:2f:77:58:a3:16:ff:
                    ea:38:62:85:c9:23:5c:a2:fa:13:7c:c4:91:53:aa:
                    1b:97:c4:bf:1c:13:29:db:8a:97:e1:6e:ed:fc:9c:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B9:5E:FE:E3:FF:41:0B:69:05:7C:A3:5E:E1:AD:2A:71:40:62:62
            X509v3 Authority Key Identifier:
                keyid:39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/391DEBC26509E9D194B7EE34BAA518754DF93098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391DEBC26509E9D194B7EE34BAA518754DF93098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33392e302f32342d3234203d3e20323639313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:ef:4e:78:c1:ea:d0:6d:f2:51:aa:ed:a2:4f:d4:d4:64:
         74:31:05:ad:e9:bf:8a:34:45:46:c5:d8:dd:89:e4:aa:d4:a2:
         8b:d4:cc:5d:d6:dd:05:84:b2:42:db:dc:9d:f0:30:33:8a:cb:
         b8:43:81:7c:c2:c6:8d:38:49:ef:70:3c:61:75:7d:b2:d2:6e:
         43:9e:be:26:70:b9:58:5f:e9:bf:35:e4:f5:b6:30:5b:58:e3:
         68:c0:1a:a1:c3:7e:52:ac:99:1f:11:c6:04:ad:7a:99:45:41:
         8f:a9:48:30:fb:cc:05:5a:0e:18:82:6d:10:81:52:5f:69:a5:
         4b:76:9c:91:2b:bc:02:c5:7e:a5:87:20:e7:0c:2e:b5:77:aa:
         76:22:25:e8:3e:37:27:66:58:38:f5:cc:39:c6:56:d8:38:05:
         d4:6a:22:be:1b:e0:df:12:bb:1a:b7:c7:a9:83:b4:f2:cf:03:
         2a:1c:86:50:d6:84:7b:ab:0c:df:13:a5:24:bc:8a:6c:fc:d6:
         a8:b5:f6:39:0e:03:ca:88:e4:3b:0c:07:16:5d:65:52:92:20:
         1a:00:7d:7e:a1:0f:ab:c7:91:4c:7b:09:36:25:a6:b5:68:b2:
         f3:f3:4e:14:c2:0c:39:f5:41:53:0b:fa:69:01:b0:13:05:3e:
         bb:a6:1b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org