Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37352e302f32342d3234203d3e203631353931.roa
File:                     34352e3233372e37352e302f32342d3234203d3e203631353931.roa (raw, json)
Hash identifier:          amL24bt5w+C2DiKYyVzrRRgzYMmH93DxHgv8yajE2as=
Subject key identifier:   90:E0:51:FF:F1:5A:BD:72:B4:BB:FE:75:17:87:9C:77:52:C4:22:C6
Certificate issuer:       /CN=177534573015FFF667FEFF6833F132D1839610DB
Certificate serial:       4BEF9BA450F9A2A614AF7C8D994E9A1B555081F6
Authority key identifier: 17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37352e302f32342d3234203d3e203631353931.roa
Signing time:             Wed 29 Nov 2023 19:00:00 +0000
ROA not before:           Wed 29 Nov 2023 18:55:00 +0000
ROA not after:            Wed 27 Nov 2024 19:00:00 +0000
asID:                     61591
IP address blocks:        45.237.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ef:9b:a4:50:f9:a2:a6:14:af:7c:8d:99:4e:9a:1b:55:50:81:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177534573015FFF667FEFF6833F132D1839610DB
        Validity
            Not Before: Nov 29 18:55:00 2023 GMT
            Not After : Nov 27 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:69:f3:2c:94:1c:b1:02:94:83:4d:73:5e:
                    ce:f9:ba:95:75:90:01:ad:10:98:bc:65:11:8a:5a:
                    63:a0:e0:34:57:bf:e5:16:72:02:42:a3:94:10:56:
                    3d:16:55:80:aa:35:77:b2:50:6b:16:47:56:13:ec:
                    8e:6c:04:2b:5e:b7:c6:18:bb:07:48:05:da:1e:97:
                    97:33:12:02:84:c9:ea:ed:3a:44:fa:c2:f7:bc:4c:
                    b9:4b:af:b6:74:a7:16:41:c7:7f:78:29:11:97:6b:
                    f4:4a:4b:7c:11:c8:dd:80:f1:52:10:54:05:99:02:
                    4e:8b:a2:e8:ed:7f:bc:0a:3a:4b:f9:5f:5f:28:61:
                    5d:ab:f2:74:98:12:92:48:a3:04:2d:2a:83:cb:b8:
                    27:07:4e:eb:a6:04:81:fc:cb:55:0f:6f:41:9e:44:
                    87:48:da:3f:ce:b7:82:13:52:7c:a7:cb:05:5f:52:
                    e8:28:02:b5:c8:ce:00:5b:72:71:ff:1e:73:df:70:
                    8d:ee:58:64:df:b7:ee:ae:66:a2:3a:27:7e:f8:9e:
                    94:e0:b3:fc:a6:87:04:a0:e6:3d:54:43:13:0e:f9:
                    29:37:4d:74:7e:df:72:ff:52:15:2e:cd:fb:6c:1a:
                    bf:ad:eb:86:9c:8f:0d:8e:1b:0b:64:98:62:98:2b:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E0:51:FF:F1:5A:BD:72:B4:BB:FE:75:17:87:9C:77:52:C4:22:C6
            X509v3 Authority Key Identifier:
                keyid:17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/177534573015FFF667FEFF6833F132D1839610DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37352e302f32342d3234203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:14:f7:54:ac:69:b3:3e:dc:0c:5c:2c:79:66:c4:ac:5d:b0:
         44:01:f2:41:4f:20:ea:97:8e:b7:e4:7d:34:d4:9c:e6:e0:ff:
         11:3d:b6:9c:66:3b:fe:8a:4d:fd:3a:55:07:40:57:8a:8a:cb:
         bf:3b:72:4a:7f:43:91:54:7a:99:31:7a:82:c8:a5:0c:b4:b6:
         f0:99:e2:1d:bd:c1:7e:e0:ea:6f:21:2f:7e:66:c8:29:12:43:
         c5:86:55:0b:2c:80:62:48:e4:c2:6f:b0:4a:b2:d1:ca:b1:ed:
         c7:03:fb:99:34:63:98:ce:03:d2:66:1e:5c:eb:d3:0c:33:d5:
         ec:35:64:2b:e4:71:76:16:ba:43:86:16:79:0d:77:7d:e3:f2:
         b7:fa:f7:e4:fc:55:e1:ab:54:d0:db:9f:a1:59:4f:bb:bd:ae:
         82:5e:eb:71:59:b3:f4:91:6a:08:91:1c:0c:3c:89:8f:7e:b7:
         09:7f:42:fa:bd:a1:ba:0f:f9:c8:ab:fd:f6:8f:20:ae:1f:62:
         b5:81:6c:d1:88:fa:f8:70:e2:a2:98:eb:2c:65:d7:bc:92:85:
         59:43:1a:23:2b:2e:65:5a:30:71:2b:ea:5d:22:8e:61:d3:c4:
         0c:11:9c:b8:3b:56:c5:0d:1d:2c:72:d1:d4:a4:ad:ce:98:77:
         79:0b:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org