Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/34352e3138382e3138322e302f32342d3234203d3e20323639353239.roa
File:                     34352e3138382e3138322e302f32342d3234203d3e20323639353239.roa (raw, json)
Hash identifier:          cBTgyQA88AmydLkEwyZgaiDhbwdy1xZ+aBtrnFsAeZc=
Subject key identifier:   38:8D:AD:E8:F8:21:95:AC:66:36:95:99:17:2C:E2:01:FA:60:13:3B
Certificate issuer:       /CN=392ADD410C0A0859567B01AB47F99C7A6B0FA27E
Certificate serial:       23CB537B9F586467B2D62CC627ADB2FEBD883C65
Authority key identifier: 39:2A:DD:41:0C:0A:08:59:56:7B:01:AB:47:F9:9C:7A:6B:0F:A2:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/34352e3138382e3138322e302f32342d3234203d3e20323639353239.roa
Signing time:             Thu 04 Apr 2024 11:13:04 +0000
ROA not before:           Thu 04 Apr 2024 11:08:04 +0000
ROA not after:            Thu 03 Apr 2025 11:13:04 +0000
asID:                     269529
IP address blocks:        45.188.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cb:53:7b:9f:58:64:67:b2:d6:2c:c6:27:ad:b2:fe:bd:88:3c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392ADD410C0A0859567B01AB47F99C7A6B0FA27E
        Validity
            Not Before: Apr  4 11:08:04 2024 GMT
            Not After : Apr  3 11:13:04 2025 GMT
        Subject: CN=388DADE8F82195AC66369599172CE201FA60133B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:96:fd:eb:d6:8f:7c:7b:e3:16:c1:f4:2a:49:
                    0d:64:04:02:65:6b:2a:6a:81:49:8f:c8:d7:74:06:
                    74:6d:df:0a:e5:c4:ae:83:10:01:08:44:b8:78:6f:
                    84:59:87:9f:b5:58:5b:70:d7:a0:16:cd:c7:ed:73:
                    d0:ee:6a:e3:a3:f0:b4:89:d6:5b:b2:fe:47:d9:c0:
                    2f:10:9b:8c:0e:8e:98:88:63:a6:e4:e1:3c:04:0e:
                    61:82:ed:88:b3:b3:cf:80:71:b0:9a:29:6a:76:0f:
                    17:d1:23:2e:0d:1e:f7:34:d1:18:18:5e:bb:f1:c3:
                    ea:26:30:95:2d:f5:94:3b:5d:1e:51:26:4d:0e:63:
                    95:e3:f6:af:0b:ff:b0:af:b8:b6:ae:5c:82:c1:d6:
                    07:8a:0c:5a:bc:a4:14:69:17:18:7f:3c:a0:a3:23:
                    4b:2e:6a:0e:82:56:4e:68:21:b5:6c:38:0f:75:c1:
                    85:e7:9e:29:88:e5:4a:70:09:48:f5:a1:d3:a9:bd:
                    ec:8a:96:16:41:bf:c9:ea:0d:8d:fc:cb:2a:14:b2:
                    36:cf:4b:71:55:2d:e2:47:bd:68:a8:ea:6b:2b:d5:
                    e2:cd:d7:e9:f5:f7:90:79:29:e0:a3:6f:5d:4a:a5:
                    f7:6d:1b:7f:d8:dc:d8:0a:3d:bb:48:9e:5c:78:ea:
                    9b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8D:AD:E8:F8:21:95:AC:66:36:95:99:17:2C:E2:01:FA:60:13:3B
            X509v3 Authority Key Identifier:
                keyid:39:2A:DD:41:0C:0A:08:59:56:7B:01:AB:47:F9:9C:7A:6B:0F:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/34352e3138382e3138322e302f32342d3234203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:04:0a:e8:62:0b:38:67:a1:3c:c2:3d:25:09:b0:55:05:b6:
         1e:b1:5d:31:1d:16:87:b8:b3:a5:73:53:1a:52:17:eb:30:cb:
         0f:fc:18:0e:b5:4f:de:40:62:55:de:39:82:ed:9c:29:37:1a:
         9d:b1:a1:8c:5f:6f:92:62:07:1c:95:6a:95:0a:eb:23:5b:19:
         d1:1d:43:be:74:13:46:f9:d3:5a:70:94:97:fa:0c:ce:0d:ac:
         9c:11:03:7f:e7:4a:2f:ec:d6:52:b2:ca:d8:c9:de:db:97:dd:
         fb:86:06:e3:33:77:52:20:e6:04:06:86:9d:3d:6f:7e:a5:51:
         98:d5:ce:9f:d9:f8:e5:a3:b2:9f:df:df:0d:75:8e:4a:9f:fd:
         e8:ce:30:4a:cd:68:f2:4c:3e:a9:af:b0:58:80:11:61:5f:df:
         ac:87:95:f2:46:0f:d0:8f:21:92:80:b0:d8:d0:71:c1:a7:fb:
         29:85:86:ca:af:a6:84:61:c7:67:e4:6c:f5:83:48:d5:07:e3:
         5f:35:6c:0d:08:44:c6:aa:7a:9a:63:bf:e4:73:8e:2f:02:08:
         1b:d9:18:1c:4f:ae:79:30:5b:f8:a4:ad:8c:96:eb:76:81:a9:
         9f:80:2d:8f:7c:68:11:8f:ba:1d:0f:69:82:65:07:c4:3f:b9:
         e6:9f:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org