Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39342e302f32332d3233203d3e20323636313239.roa
File:                     34352e362e39342e302f32332d3233203d3e20323636313239.roa (raw, json)
Hash identifier:          lECdWnL2BgsyW7FWWe3s9NGp6jl9D8yl9AJNRBJySy8=
Subject key identifier:   D8:F7:66:3F:FA:AF:10:CC:6C:AF:CB:EA:A2:D6:97:55:49:10:6A:51
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       59E4ADF71808BD34A321084A597737441DF6C78C
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39342e302f32332d3233203d3e20323636313239.roa
Signing time:             Mon 04 Mar 2024 20:00:00 +0000
ROA not before:           Mon 04 Mar 2024 19:55:00 +0000
ROA not after:            Mon 03 Mar 2025 20:00:00 +0000
asID:                     266129
IP address blocks:        45.6.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e4:ad:f7:18:08:bd:34:a3:21:08:4a:59:77:37:44:1d:f6:c7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Mar  4 19:55:00 2024 GMT
            Not After : Mar  3 20:00:00 2025 GMT
        Subject: CN=D8F7663FFAAF10CC6CAFCBEAA2D6975549106A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1a:11:b0:cb:df:b5:99:33:bc:de:27:c0:28:
                    07:f4:8b:9b:a7:d3:33:d2:63:31:b9:9d:3e:d5:1d:
                    f7:71:ba:e3:d0:d4:10:ee:3d:0d:31:6a:22:0a:e1:
                    a6:95:0f:25:24:0b:7d:9a:b2:c5:e8:23:d6:48:bc:
                    2f:ab:63:bd:55:b5:00:bd:ef:16:92:da:cf:b4:6e:
                    41:27:eb:f0:af:bf:b5:c4:70:9b:d6:ac:ea:7a:3a:
                    5e:66:c7:3e:3a:b0:85:98:de:ae:ba:3f:cf:17:76:
                    c9:92:9b:c6:25:64:09:fa:09:8c:25:32:97:82:1a:
                    96:98:a1:e8:9e:b6:61:32:6f:03:3a:78:61:15:d8:
                    4c:ca:f4:49:fc:f3:b0:3d:99:2c:f7:59:10:6d:32:
                    18:25:71:f3:b3:28:7b:59:3a:70:cd:6d:c3:62:ee:
                    9a:19:37:d7:3c:56:2c:db:03:ae:8b:d2:a0:e9:fe:
                    f7:1b:95:94:b4:62:fb:b4:b5:b3:a5:73:ea:ff:38:
                    9a:44:d0:67:4c:e8:a7:fe:71:32:1e:01:c8:c8:1e:
                    d6:c9:af:9f:1a:9c:8b:88:3d:77:09:ac:74:3b:23:
                    a3:f8:2a:85:eb:b8:a2:65:4f:0f:9b:5b:82:a9:ee:
                    dc:0f:d3:9d:b7:b7:e9:8c:bb:00:cc:65:53:87:e4:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F7:66:3F:FA:AF:10:CC:6C:AF:CB:EA:A2:D6:97:55:49:10:6A:51
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39342e302f32332d3233203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:54:16:23:9e:43:42:0b:63:12:c5:cf:f7:ee:e8:47:c0:31:
         9b:db:68:fd:53:62:d4:82:59:eb:3b:62:76:a5:ea:69:55:7a:
         3f:24:dc:4b:0c:9e:c2:56:b9:92:fb:6a:8c:ea:5c:d5:2f:4f:
         dc:37:31:47:77:37:8c:b5:45:f4:38:9b:0b:38:d8:5a:1a:17:
         47:69:6e:15:0d:0e:f4:4c:0e:f0:72:15:d3:8a:d8:c5:0c:63:
         ea:f4:de:66:54:d1:72:05:bd:ce:fa:fe:24:ff:88:1b:ea:0f:
         60:14:e0:97:4c:e0:ed:42:c9:ed:76:7b:3a:91:b9:e8:c9:1d:
         3a:59:b6:21:7a:03:f0:92:95:0a:8b:06:38:eb:84:d7:b1:e4:
         f0:18:2b:1f:af:b9:13:c2:e7:e1:ee:8c:b8:2a:f5:9f:c1:8b:
         f8:31:ed:fc:62:7f:2c:13:90:09:db:2a:a8:73:0d:64:b7:55:
         12:7e:9e:d5:ef:d5:f5:1a:3c:ac:c4:77:2b:f0:06:23:ce:f0:
         32:7f:4f:f7:97:a2:91:7a:f7:2b:2a:3d:54:94:fd:bc:27:7b:
         62:af:48:43:dd:a3:54:ea:4c:3e:95:89:99:4c:13:3f:56:00:
         88:65:a8:fa:48:fa:26:bf:92:a0:52:06:70:dc:20:bf:71:54:
         d9:b5:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org