Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37342e302f32332d3233203d3e203631353931.roa
File:                     34352e3233372e37342e302f32332d3233203d3e203631353931.roa (raw, json)
Hash identifier:          u5c3viiePzGGbHO6muIdMeCbm7wr84pLhqK4Gdb+0wg=
Subject key identifier:   27:76:8E:0A:A0:22:8F:9E:2D:45:16:78:8F:7F:1A:53:B0:2E:E6:F1
Certificate issuer:       /CN=177534573015FFF667FEFF6833F132D1839610DB
Certificate serial:       48DA29C924D161CD5E46DC1201E3DB1717A3B555
Authority key identifier: 17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37342e302f32332d3233203d3e203631353931.roa
Signing time:             Sun 26 Nov 2023 19:00:00 +0000
ROA not before:           Sun 26 Nov 2023 18:55:00 +0000
ROA not after:            Sun 24 Nov 2024 19:00:00 +0000
asID:                     61591
IP address blocks:        45.237.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:da:29:c9:24:d1:61:cd:5e:46:dc:12:01:e3:db:17:17:a3:b5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177534573015FFF667FEFF6833F132D1839610DB
        Validity
            Not Before: Nov 26 18:55:00 2023 GMT
            Not After : Nov 24 19:00:00 2024 GMT
        Subject: CN=3082010A0282010100AD9B2179D5C0B6BD1EE165DEF4E3E8042B612A748D349611136AB31B057A66C0E05392D17FD8261B88B45ED6FBDD051F8D3E0EE4CC915A2DD2CBFEEE65D13AEDC572E61DB0B4C284336BB159031C14915E751957F15C2F358E4A654EE54B6912F1A83B1DED5F303BA0FB7189B1CC8CFE3F8003E53676A4DC658DF8F5DB3958BF898BFF90BF917ABAECBC388A4D600F128277C4017771378D61A40F346715A2143B32EC7143A4145BC430FFD3ABAA8EA420976AE26CC96D65540123D3BB2EA5DC7F43E16AF860394677AC99EADCEE69A47FF812C0C8B9FA9C14F1732D416093C5F16644362D2670205BDFC0510D03F066C861C23A269BE7C275F102A95C9696050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:21:79:d5:c0:b6:bd:1e:e1:65:de:f4:e3:
                    e8:04:2b:61:2a:74:8d:34:96:11:13:6a:b3:1b:05:
                    7a:66:c0:e0:53:92:d1:7f:d8:26:1b:88:b4:5e:d6:
                    fb:dd:05:1f:8d:3e:0e:e4:cc:91:5a:2d:d2:cb:fe:
                    ee:65:d1:3a:ed:c5:72:e6:1d:b0:b4:c2:84:33:6b:
                    b1:59:03:1c:14:91:5e:75:19:57:f1:5c:2f:35:8e:
                    4a:65:4e:e5:4b:69:12:f1:a8:3b:1d:ed:5f:30:3b:
                    a0:fb:71:89:b1:cc:8c:fe:3f:80:03:e5:36:76:a4:
                    dc:65:8d:f8:f5:db:39:58:bf:89:8b:ff:90:bf:91:
                    7a:ba:ec:bc:38:8a:4d:60:0f:12:82:77:c4:01:77:
                    71:37:8d:61:a4:0f:34:67:15:a2:14:3b:32:ec:71:
                    43:a4:14:5b:c4:30:ff:d3:ab:aa:8e:a4:20:97:6a:
                    e2:6c:c9:6d:65:54:01:23:d3:bb:2e:a5:dc:7f:43:
                    e1:6a:f8:60:39:46:77:ac:99:ea:dc:ee:69:a4:7f:
                    f8:12:c0:c8:b9:fa:9c:14:f1:73:2d:41:60:93:c5:
                    f1:66:44:36:2d:26:70:20:5b:df:c0:51:0d:03:f0:
                    66:c8:61:c2:3a:26:9b:e7:c2:75:f1:02:a9:5c:96:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:76:8E:0A:A0:22:8F:9E:2D:45:16:78:8F:7F:1A:53:B0:2E:E6:F1
            X509v3 Authority Key Identifier:
                keyid:17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/177534573015FFF667FEFF6833F132D1839610DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37342e302f32332d3233203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:27:67:e6:b1:43:bb:c0:3b:19:b6:6e:8a:06:13:be:80:
         d0:24:7b:cd:f3:77:8a:f4:4a:bf:72:df:0f:71:9f:8d:e9:9e:
         7c:d8:3e:f2:89:ac:5f:0e:7e:2b:b2:db:1b:a8:37:7a:6f:37:
         1c:97:7f:2a:17:7b:fb:ec:8b:f1:36:72:49:c2:2c:32:b3:36:
         5a:16:ca:5e:d5:b7:9e:82:66:bd:54:8c:86:21:cb:8f:5c:8e:
         8e:5b:00:d4:8a:6e:ef:c1:a8:07:0d:e6:46:be:26:fb:64:8b:
         56:06:c7:37:c1:bc:c1:bb:67:f3:88:80:b9:50:80:91:ad:8b:
         6c:cb:47:2d:f7:61:77:5c:c5:6e:ed:07:58:17:da:6a:d7:53:
         d0:db:66:52:ec:d5:00:ff:e2:35:1b:b2:11:8c:77:64:00:3a:
         66:4a:7c:b0:dc:f3:3e:32:18:ad:f2:18:c8:15:f4:44:da:c5:
         35:3b:13:9b:e8:4b:4c:6a:a4:40:1d:b1:26:9b:50:c2:72:15:
         c1:d8:b5:20:73:65:be:81:71:83:83:45:d9:f9:8e:5f:b2:f8:
         34:b7:aa:89:08:5b:eb:8e:96:88:f9:5a:23:a6:7a:56:ad:a1:
         f0:8c:02:08:2a:0e:fa:4a:20:b3:27:7a:0c:5a:57:24:6f:4a:
         27:be:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org