Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231332e302f32342d3234203d3e20323637323736.roa
File:                     34352e3233322e3231332e302f32342d3234203d3e20323637323736.roa (raw, json)
Hash identifier:          +gOYG1+wh2/znsyXoSN1xliGN/LRIgDHWD6POFAIJuc=
Subject key identifier:   67:9C:FB:F3:3B:99:D9:29:0D:70:02:FB:63:FD:0A:B5:6E:FD:4D:57
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       425D5F435335BAB3B76DDB6588C571145880DAD0
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231332e302f32342d3234203d3e20323637323736.roa
Signing time:             Fri 16 Jun 2023 14:31:12 +0000
ROA not before:           Fri 16 Jun 2023 14:26:12 +0000
ROA not after:            Fri 14 Jun 2024 14:31:12 +0000
asID:                     267276
IP address blocks:        45.232.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5d:5f:43:53:35:ba:b3:b7:6d:db:65:88:c5:71:14:58:80:da:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun 16 14:26:12 2023 GMT
            Not After : Jun 14 14:31:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:00:44:97:7c:81:57:3b:47:8a:a6:cc:d2:
                    f1:38:a0:bb:5b:70:70:44:4d:8d:e3:58:9d:0a:a1:
                    68:e0:0c:3f:b4:e8:3e:fd:b8:f6:c7:7c:bb:17:e8:
                    23:26:72:bc:88:b6:bd:0c:d5:92:b1:33:65:d4:3e:
                    ff:54:b7:66:32:10:93:31:93:53:62:56:d4:d6:35:
                    49:d6:2e:7a:22:91:96:ad:c0:8e:dc:be:1a:74:63:
                    3f:d1:70:fc:ce:d8:23:8b:37:33:ff:08:72:b8:b5:
                    bd:90:e4:ca:75:33:97:e5:5f:f1:c3:4f:99:53:05:
                    6c:dd:a6:e5:cb:5f:5e:85:18:29:99:e3:16:09:d4:
                    c4:24:c1:48:39:cb:86:f3:4e:7d:98:d0:47:2a:15:
                    ed:74:80:68:1d:9f:e3:73:ec:bd:b6:98:10:0a:ef:
                    c6:22:d2:d5:7f:ca:60:06:d5:75:3b:18:1c:fe:ce:
                    bd:6b:d7:ef:bb:16:a0:7c:d3:76:31:46:97:7d:14:
                    3b:59:93:0c:07:b6:a9:8e:fb:c1:c2:f1:e7:fa:ff:
                    6c:42:bd:83:27:0c:e7:b2:ff:ca:2c:4c:54:9a:32:
                    11:e8:2b:b1:52:1c:b2:4c:82:7c:3a:9f:a1:e8:f2:
                    ba:ef:12:c5:6b:94:7a:43:56:b5:8a:8c:6e:62:3d:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9C:FB:F3:3B:99:D9:29:0D:70:02:FB:63:FD:0A:B5:6E:FD:4D:57
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231332e302f32342d3234203d3e20323637323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:8f:ad:00:34:67:3d:08:5f:4a:80:59:52:5e:e2:68:87:
         c0:23:83:14:c2:b1:35:ff:ba:fc:20:48:a9:6c:2f:64:c3:57:
         85:72:8a:28:d7:ca:4a:5f:c5:63:5d:a8:5a:45:f5:33:35:23:
         ed:a9:42:ce:38:38:2a:f0:28:c8:e4:31:ef:2e:82:c4:0e:ae:
         22:79:32:38:70:e1:86:29:1b:ce:16:45:b2:32:42:de:74:33:
         d0:43:6c:a1:67:91:74:f3:0c:68:c2:e4:e2:10:1c:52:37:e6:
         d6:da:5a:a0:7d:92:06:d1:06:06:3c:7a:f9:ef:37:af:43:6d:
         53:f1:39:f7:a6:1a:c1:04:48:39:02:8b:77:e6:b9:64:f8:a5:
         0b:77:9a:42:19:d0:e4:04:b5:fc:12:6d:cc:f0:a9:a8:da:90:
         38:75:98:5d:3c:9b:b6:9b:3c:e1:6a:69:49:7d:ce:6f:6b:4a:
         7c:87:ab:c6:5c:bd:05:24:c7:47:78:a2:e5:32:f9:f2:f8:9f:
         db:de:4a:85:65:cd:76:03:32:47:3b:4d:3f:76:2c:e2:b4:86:
         cc:06:54:8c:74:52:5b:6a:56:81:ef:3c:c0:8d:8a:ae:3e:4b:
         fe:ed:32:57:d2:92:05:14:10:fe:b8:0b:76:3c:51:0c:09:97:
         f8:02:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org