Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/3139302e3130322e34342e302f32332d3233203d3e20323731353134.roa
File:                     3139302e3130322e34342e302f32332d3233203d3e20323731353134.roa (raw, json)
Hash identifier:          cZRkmdLjh5+eMvSYPsqgM1y3Egr3D/9eqd1pk+RW4pI=
Subject key identifier:   E3:48:5C:2C:FF:32:37:25:07:1A:6E:29:B0:D1:91:09:77:34:32:3E
Certificate issuer:       /CN=34480FB5377B9D616C84A3C34C05E236C464E996
Certificate serial:       54AC9D7F37D084C2D170BF6BAC553FD9054A96C8
Authority key identifier: 34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34480FB5377B9D616C84A3C34C05E236C464E996.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/3139302e3130322e34342e302f32332d3233203d3e20323731353134.roa
Signing time:             Mon 01 Apr 2024 12:00:27 +0000
ROA not before:           Mon 01 Apr 2024 11:55:27 +0000
ROA not after:            Mon 31 Mar 2025 12:00:27 +0000
asID:                     271514
IP address blocks:        190.102.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ac:9d:7f:37:d0:84:c2:d1:70:bf:6b:ac:55:3f:d9:05:4a:96:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34480FB5377B9D616C84A3C34C05E236C464E996
        Validity
            Not Before: Apr  1 11:55:27 2024 GMT
            Not After : Mar 31 12:00:27 2025 GMT
        Subject: CN=E3485C2CFF323725071A6E29B0D191097734323E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:0f:a6:cd:a8:49:4b:83:ff:ff:f1:d2:81:
                    3a:ec:d4:23:ee:86:18:14:3a:02:67:18:71:23:52:
                    02:21:66:96:ca:70:15:f8:b3:e4:3a:d7:39:11:72:
                    bc:d7:ea:ec:a4:5b:3a:a2:78:48:2e:66:65:f3:1f:
                    b4:e8:2e:e6:ad:27:8c:72:bb:f5:ad:9e:ce:52:23:
                    be:f0:86:f4:22:72:e4:9f:2c:d7:83:03:39:4f:11:
                    ab:ab:2e:76:64:d6:3d:a0:a5:d5:fb:48:43:ef:2f:
                    de:ad:b1:91:2f:67:a9:75:1d:f8:df:57:ab:5d:d2:
                    6c:c2:ed:68:47:77:b9:6f:af:86:48:40:8d:38:db:
                    51:4e:2c:91:46:3d:e4:e0:53:53:7e:03:88:d2:82:
                    dc:74:f5:af:1e:35:9a:a3:71:2a:1c:a1:bd:ed:a9:
                    f1:04:5c:61:71:3d:eb:7c:a0:20:d6:23:c5:81:94:
                    0e:1d:65:81:a6:e7:07:f2:df:41:80:78:c5:67:00:
                    cf:c1:86:06:44:93:0b:12:34:15:09:53:bf:dc:0f:
                    e4:75:13:e9:7d:35:d2:c0:7c:ef:25:c8:b6:0e:a2:
                    91:5c:64:5b:9f:01:32:67:0a:a9:c9:fc:af:e1:4f:
                    97:7f:b2:7a:1c:78:1d:78:fc:c9:6f:91:20:ea:6e:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:48:5C:2C:FF:32:37:25:07:1A:6E:29:B0:D1:91:09:77:34:32:3E
            X509v3 Authority Key Identifier:
                keyid:34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/34480FB5377B9D616C84A3C34C05E236C464E996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34480FB5377B9D616C84A3C34C05E236C464E996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/3139302e3130322e34342e302f32332d3233203d3e20323731353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:29:24:5d:55:66:20:d6:32:d8:37:c0:64:bd:1a:bb:49:12:
         fb:23:b8:14:57:e7:66:db:6d:0a:af:3a:ba:60:41:7a:f4:c3:
         17:94:ea:66:23:cc:e0:db:ec:30:f0:d6:4b:a1:1e:a4:b5:b1:
         54:0e:92:15:92:df:cd:b3:d5:06:8a:25:a1:a8:2b:7b:b6:c8:
         57:e7:98:c6:e1:f2:94:e0:ce:cc:24:24:b8:34:ba:21:f3:88:
         a9:d1:37:52:a4:22:b8:3e:91:14:87:38:bc:b8:d5:5f:9b:3e:
         87:19:67:07:a8:8f:a3:6c:78:eb:8e:2f:f2:02:ca:e3:6a:49:
         aa:23:f0:17:97:01:64:3b:1a:51:24:f0:6e:94:9f:a2:f4:0a:
         02:85:8d:b6:2e:41:45:57:55:40:0e:7d:fb:3d:3c:21:7e:90:
         6f:00:25:e9:c0:6a:90:c4:39:27:c6:59:07:40:b9:5e:8f:8f:
         98:6b:25:f7:b9:7e:b2:41:4a:98:1c:10:85:fd:9a:a7:32:3d:
         e8:3b:9b:7d:2f:3f:d7:09:c1:42:a7:58:ed:b8:79:68:15:0e:
         bc:9b:aa:86:2c:0a:47:c3:29:a3:81:d9:70:de:05:e2:bc:2e:
         5d:d7:1c:54:7d:27:b6:f1:19:e7:fc:ee:2a:3f:f1:bb:0a:05:
         80:ce:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org