Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32342d3234203d3e20323639303437.roa
File:                     34352e3137382e3230382e302f32342d3234203d3e20323639303437.roa (raw, json)
Hash identifier:          pyHW36kB3ODMqNSrfEltY/tITX4NK7WiJyoFl4pRSuE=
Subject key identifier:   09:F7:80:E9:B8:D5:80:D5:4E:B0:F5:F7:97:63:C0:E7:E5:D5:32:FB
Certificate issuer:       /CN=468DA4BD4B56C002A350399568E4DF9A59150F9E
Certificate serial:       58DDA6898169CD7D3089111D6597CDB7F73E6BF4
Authority key identifier: 46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32342d3234203d3e20323639303437.roa
Signing time:             Fri 07 Jul 2023 13:04:00 +0000
ROA not before:           Fri 07 Jul 2023 12:59:00 +0000
ROA not after:            Fri 05 Jul 2024 13:04:00 +0000
asID:                     269047
IP address blocks:        45.178.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:dd:a6:89:81:69:cd:7d:30:89:11:1d:65:97:cd:b7:f7:3e:6b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468DA4BD4B56C002A350399568E4DF9A59150F9E
        Validity
            Not Before: Jul  7 12:59:00 2023 GMT
            Not After : Jul  5 13:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5a:7c:03:a7:4c:7d:41:dd:ac:cc:00:0f:2b:
                    d0:c1:d1:18:a5:a0:16:26:87:50:ee:7a:d3:4e:cc:
                    c0:94:55:12:21:2f:c1:44:45:4c:9a:5c:9a:db:5c:
                    58:d7:39:ee:83:bd:3a:09:1f:81:b0:d7:3e:fd:92:
                    c4:20:13:76:74:b2:50:a9:99:81:54:0b:9c:cd:8b:
                    45:e8:cd:27:5d:2c:b4:4d:3d:1b:81:0b:88:d9:b4:
                    ca:f9:c2:7c:07:78:ba:2f:ba:e9:e3:20:f7:dc:bc:
                    fa:42:c2:44:85:ef:5d:72:bb:70:85:da:52:dc:71:
                    98:cf:c3:b3:9c:71:94:c9:d6:6b:9f:64:59:14:f8:
                    49:95:cb:b3:df:b3:ec:58:7a:53:c1:69:0d:a5:8d:
                    80:1a:75:f3:a2:69:59:5d:57:25:df:c3:fc:a8:82:
                    52:39:98:5d:fb:38:ea:1d:0e:e0:c3:f5:63:0d:c3:
                    f7:ee:c1:d8:07:5f:47:f6:e0:79:e7:5a:aa:89:a9:
                    b4:4e:3b:dd:67:29:0e:a5:62:46:2c:57:ce:6a:16:
                    d7:7e:8e:3e:c5:70:70:8a:56:3b:e6:64:1c:5d:2a:
                    f3:d5:6f:5c:ef:41:45:c8:cd:cb:01:b9:86:e6:89:
                    39:4a:b0:65:b2:d5:a8:5e:2a:73:8f:0f:c9:38:9a:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F7:80:E9:B8:D5:80:D5:4E:B0:F5:F7:97:63:C0:E7:E5:D5:32:FB
            X509v3 Authority Key Identifier:
                keyid:46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32342d3234203d3e20323639303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:63:53:55:4e:94:70:74:18:22:b3:91:ed:d0:1a:b5:36:06:
         3d:75:b7:26:c3:98:4c:df:85:59:b5:77:f5:67:e9:39:d2:75:
         4f:28:61:c1:19:62:80:94:9f:68:ce:2a:f7:1a:83:45:3d:54:
         34:a3:f3:f6:fc:54:72:41:0c:fd:f1:9d:d0:f4:a7:b8:cb:88:
         e3:17:fd:e7:92:5b:68:87:46:bf:f3:5d:f9:d7:f1:c0:09:c0:
         4a:46:ba:0d:19:f5:d1:21:9a:58:09:60:f0:2f:e8:3d:96:c3:
         c8:a1:f3:12:0f:a7:5e:f1:e7:f0:d6:d2:00:ad:43:ce:13:86:
         14:05:98:c9:20:7a:9c:03:42:04:7b:a1:d7:5f:f5:76:a5:25:
         0a:8a:38:7c:62:21:7f:bf:d9:49:ff:13:f7:57:f9:72:e6:96:
         d0:95:f0:4c:a6:fc:b8:5c:15:25:39:98:72:fd:cd:e6:9a:32:
         d9:29:d5:5a:a6:a4:a3:00:ea:5a:ad:81:0e:77:b9:5e:59:8c:
         e8:f1:16:3e:31:f3:aa:5b:ad:ef:dd:68:93:45:3e:6b:0f:14:
         ba:11:b5:7a:9a:94:6d:f4:ba:7c:ac:9b:e4:f0:f4:de:c9:a6:
         30:c3:5f:4e:dd:f3:ae:c7:a7:4f:d0:89:06:0a:e8:41:c3:50:
         59:17:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org