Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36362e302f32342d3234203d3e20323639333230.roa
File:                     34352e3138342e36362e302f32342d3234203d3e20323639333230.roa (raw, json)
Hash identifier:          KVGkOxL6v7T4VG1PS+EbbK6ErfKmHSPgZjVuhLJoRpc=
Subject key identifier:   7D:AF:F9:14:EE:D9:46:E7:F7:E4:A4:37:A7:B5:62:BF:46:8B:35:4C
Certificate issuer:       /CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
Certificate serial:       2F264360E499FA665698C91BC926B25B54D6B916
Authority key identifier: 1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36362e302f32342d3234203d3e20323639333230.roa
Signing time:             Thu 09 Nov 2023 14:30:52 +0000
ROA not before:           Thu 09 Nov 2023 14:25:52 +0000
ROA not after:            Thu 07 Nov 2024 14:30:52 +0000
asID:                     269320
IP address blocks:        45.184.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:26:43:60:e4:99:fa:66:56:98:c9:1b:c9:26:b2:5b:54:d6:b9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
        Validity
            Not Before: Nov  9 14:25:52 2023 GMT
            Not After : Nov  7 14:30:52 2024 GMT
        Subject: CN=7DAFF914EED946E7F7E4A437A7B562BF468B354C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:88:0f:06:27:a4:f2:df:5b:7e:1f:fe:4e:
                    e7:38:4f:8a:b2:53:15:5f:50:88:8d:a8:92:d5:18:
                    a5:c2:f6:7c:e0:69:65:c2:d3:df:73:d0:e1:eb:77:
                    ee:5c:46:b3:88:53:82:a6:68:b5:a8:09:40:ca:cf:
                    62:e4:01:5a:fd:55:5f:85:7a:62:1b:84:9b:24:bb:
                    3a:38:da:76:bc:6b:1a:8d:ca:8d:2a:32:bf:ad:be:
                    66:7e:74:7b:a1:22:9d:7b:4e:ab:86:ab:7d:32:cb:
                    95:63:10:0d:ff:d1:5e:14:94:a2:09:13:ce:3f:bc:
                    44:da:67:7f:3d:7f:58:ce:5f:39:53:f4:6d:ba:b9:
                    bb:3e:fb:51:93:d6:ef:51:d6:93:cb:df:6b:ce:ab:
                    72:60:22:41:0a:b4:a2:5a:27:a9:4d:f8:b3:24:a0:
                    e9:0d:60:b2:bc:c3:04:23:34:8d:0d:5d:25:81:ea:
                    94:41:2c:e5:2d:07:96:13:df:88:0a:6d:82:ad:d7:
                    bc:db:84:90:5c:5e:38:57:ac:62:97:11:c8:d8:c0:
                    60:2f:bc:ac:09:19:1e:aa:c8:08:d4:4f:46:dd:38:
                    d7:ec:07:0c:e6:41:6c:72:93:28:93:b8:49:d6:42:
                    8a:d2:c9:cd:e8:d4:ef:48:48:c3:7f:27:36:0b:fb:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AF:F9:14:EE:D9:46:E7:F7:E4:A4:37:A7:B5:62:BF:46:8B:35:4C
            X509v3 Authority Key Identifier:
                keyid:1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36362e302f32342d3234203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:f5:db:7a:99:5b:b4:d6:71:80:ab:bf:35:a5:ac:93:eb:
         99:31:4f:4b:57:ac:0c:2a:22:91:49:97:9d:0c:c6:fe:28:1b:
         e6:16:f0:86:18:85:ed:09:c0:f6:de:f5:90:c3:9d:42:45:52:
         c3:06:fe:01:b9:e2:b2:d1:b1:57:5e:6a:af:fd:0a:0d:73:1f:
         38:d6:a9:5f:74:c2:06:3a:74:e9:58:36:c8:28:4a:4b:92:00:
         cb:5b:44:3c:b5:6a:43:1a:2a:20:2e:ad:cd:99:34:ff:f8:72:
         90:ea:e0:72:11:d8:3e:3a:5b:66:e5:01:1f:a5:a8:20:c5:3b:
         51:dc:e5:88:fd:14:49:99:f2:23:3b:23:3e:9f:ba:57:19:00:
         03:64:6b:97:c3:bd:c5:23:0e:d6:70:c0:f7:6e:2e:02:d1:ab:
         5b:4f:aa:99:43:dc:0a:22:a6:e6:df:b9:bf:69:de:78:3c:0d:
         f8:54:ee:82:50:3c:92:26:8b:ed:11:31:22:34:58:c4:64:eb:
         3f:fc:93:bf:2a:40:38:1c:43:33:bf:b2:d1:3e:96:20:02:47:
         23:47:e8:8a:76:c8:9b:34:84:22:06:1f:3d:5e:22:81:b3:da:
         f0:eb:89:41:4c:24:93:1e:bb:22:f8:9a:c1:e8:27:cf:fb:df:
         5e:5f:f0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org