Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/34352e3138352e342e302f32332d3233203d3e20323639333535.roa
File:                     34352e3138352e342e302f32332d3233203d3e20323639333535.roa (raw, json)
Hash identifier:          j+dQy5aT4hjhlz/Dj9Z975dcLENFFL9jmMCS8oElvtw=
Subject key identifier:   4A:2E:EF:5B:66:EC:CC:FA:3E:F6:FA:58:80:84:F3:90:D4:9C:0D:A0
Certificate issuer:       /CN=5EBF6B302E6461438C4FA9446A9352773CC79187
Certificate serial:       79B3F5008389049ABFEC638123CD56CE2CC6ACB8
Authority key identifier: 5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/34352e3138352e342e302f32332d3233203d3e20323639333535.roa
Signing time:             Tue 06 Feb 2024 20:13:21 +0000
ROA not before:           Tue 06 Feb 2024 20:08:21 +0000
ROA not after:            Tue 04 Feb 2025 20:13:21 +0000
asID:                     269355
IP address blocks:        45.185.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b3:f5:00:83:89:04:9a:bf:ec:63:81:23:cd:56:ce:2c:c6:ac:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EBF6B302E6461438C4FA9446A9352773CC79187
        Validity
            Not Before: Feb  6 20:08:21 2024 GMT
            Not After : Feb  4 20:13:21 2025 GMT
        Subject: CN=4A2EEF5B66ECCCFA3EF6FA588084F390D49C0DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:bf:1a:d9:fa:52:d9:4b:07:2b:8a:47:a2:
                    0a:da:2d:46:44:ae:37:17:79:45:5a:02:65:5c:59:
                    47:81:53:b6:c3:1c:65:fd:7e:78:a9:51:6d:d4:52:
                    b0:f8:1c:00:a7:92:e4:af:9c:4e:84:3f:de:2a:f3:
                    fa:82:7c:23:36:7a:61:27:a9:05:4a:d1:62:c6:34:
                    1b:2f:12:83:06:1b:c1:45:98:87:23:bc:ab:17:5b:
                    26:34:9e:b7:66:32:b6:45:6a:dc:ea:f0:ae:e2:40:
                    e4:73:db:6a:83:7f:71:ca:c0:6a:5d:5d:c1:c4:58:
                    5d:74:ee:4a:b8:2c:e7:04:ff:61:b4:df:f3:13:dc:
                    c7:a3:4e:5c:18:f6:56:bb:a1:6f:fc:fb:8b:7c:49:
                    86:5b:0e:16:e7:b9:43:ab:e3:54:72:cc:f2:ec:a5:
                    46:8a:df:2d:70:c0:37:7a:1e:2a:84:d2:cb:61:ea:
                    51:b4:fc:4e:f2:22:e1:9f:f5:0c:e1:12:19:f7:bb:
                    5b:8a:39:ca:57:e6:04:21:f0:28:b2:2d:90:de:0f:
                    f3:c0:ee:d5:4e:cf:12:71:cc:8c:31:db:c2:13:6c:
                    5c:d1:24:64:17:2b:df:47:c2:d1:b3:74:41:aa:59:
                    f8:24:c0:c4:e8:d8:81:2d:07:54:57:14:cf:17:7a:
                    18:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:EF:5B:66:EC:CC:FA:3E:F6:FA:58:80:84:F3:90:D4:9C:0D:A0
            X509v3 Authority Key Identifier:
                keyid:5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/5EBF6B302E6461438C4FA9446A9352773CC79187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/34352e3138352e342e302f32332d3233203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:73:fe:20:c5:19:3e:e0:83:f8:70:d4:e5:53:26:f2:67:5d:
         19:43:86:9b:69:ed:0e:0d:be:63:c3:bd:40:be:07:c5:f5:cd:
         5d:b1:95:aa:5c:3f:33:be:53:fb:b9:88:05:cd:7e:05:3d:40:
         02:bd:5a:52:7f:47:e7:33:d6:94:4b:28:a5:94:4b:75:26:ee:
         10:a7:09:3d:0e:d8:fe:76:ed:43:3c:ac:2a:19:23:b2:35:a4:
         f3:45:68:64:bf:e6:bd:cf:d4:1d:3a:a5:ce:a8:74:d0:84:d4:
         04:2d:9c:c8:bd:cc:26:e3:87:2e:95:39:97:36:09:45:09:73:
         64:49:16:b1:79:76:dc:44:39:0e:8a:28:0f:cc:36:d3:1d:ba:
         e1:d6:54:f2:f8:4f:f2:07:db:b5:4d:c8:61:f2:e7:b9:73:07:
         3d:bc:d0:28:fc:6b:cc:74:ae:8f:eb:17:e5:38:b8:07:f7:33:
         ed:d2:ab:49:82:68:bf:2f:79:41:45:d9:48:b8:a3:a7:9b:e7:
         59:d6:6c:ea:91:85:03:a8:ed:7b:64:b3:65:df:64:05:ba:94:
         15:e0:cc:d7:c6:be:7d:57:89:e5:26:70:c9:3d:93:8f:6d:ff:
         a4:c3:11:42:a4:49:3d:fa:61:ec:1e:61:3b:5e:ac:72:54:30:
         9b:c8:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org