Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39352e302f32342d3234203d3e20323636313239.roa
File:                     34352e362e39352e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          rtBr3EwuubrLgeMz/MKjsdggz2+0/PbFwXzRL7ycRSs=
Subject key identifier:   E0:08:79:C5:EF:29:B4:13:BE:07:CD:F6:70:8A:B7:BE:CF:64:A0:7B
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       0A4A8558B91019B34C9D420DA91BD65606025A61
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39352e302f32342d3234203d3e20323636313239.roa
Signing time:             Tue 16 May 2023 17:00:00 +0000
ROA not before:           Tue 16 May 2023 16:55:00 +0000
ROA not after:            Tue 14 May 2024 17:00:00 +0000
asID:                     266129
IP address blocks:        45.6.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4a:85:58:b9:10:19:b3:4c:9d:42:0d:a9:1b:d6:56:06:02:5a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: May 16 16:55:00 2023 GMT
            Not After : May 14 17:00:00 2024 GMT
        Subject: CN=E00879C5EF29B413BE07CDF6708AB7BECF64A07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:06:54:95:69:58:f6:5e:7c:27:15:49:52:5d:
                    dc:61:39:0a:40:d3:7d:dd:54:cf:7e:7a:dc:38:d1:
                    ec:33:0d:5d:10:db:7c:2e:31:88:51:52:27:39:47:
                    8b:80:da:29:85:81:ea:05:4b:a0:c6:05:97:5f:ab:
                    db:29:ab:0f:d6:b0:ba:9b:68:eb:56:31:8a:a4:18:
                    7f:f3:3f:fc:41:ee:99:af:65:c9:0f:71:99:c6:b5:
                    f3:65:86:53:1b:3c:19:c2:a6:9e:56:7b:97:81:cd:
                    29:19:76:b5:0b:88:0c:81:dc:f8:81:0b:97:44:1c:
                    4f:73:60:ef:97:50:73:00:24:c3:58:23:86:d0:ca:
                    fb:c4:5d:10:d1:16:ae:f7:dc:c3:3a:3e:e3:44:4e:
                    50:a3:5d:1b:eb:88:47:55:5e:de:2a:d0:ae:9e:40:
                    f0:90:b7:e6:c3:a3:6a:69:77:e1:04:14:c1:6b:a7:
                    be:3a:0e:e7:34:2d:9a:92:2f:c2:e8:2d:ab:66:18:
                    4e:2c:70:57:bd:45:3a:d1:19:b7:f7:73:b6:a8:90:
                    bf:31:54:9d:02:47:f7:cb:db:70:ed:7f:16:fe:c3:
                    43:eb:07:03:5b:86:7d:20:e0:26:9a:f8:58:95:52:
                    5e:ae:e4:7f:c0:58:55:39:58:09:c2:96:ac:47:06:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:08:79:C5:EF:29:B4:13:BE:07:CD:F6:70:8A:B7:BE:CF:64:A0:7B
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39352e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:fd:45:a9:81:c3:ab:18:bb:96:f4:d3:37:b4:d9:81:d7:19:
         25:47:36:3d:e3:e5:7e:11:5b:57:0a:05:2d:2e:90:16:fc:74:
         63:b3:29:44:b6:b5:e1:00:6f:07:93:50:89:f2:d5:c8:eb:50:
         65:89:37:35:ca:d3:c1:6d:cb:9d:93:34:92:53:48:3c:ab:36:
         44:67:83:19:24:c8:8c:17:0b:c5:8c:bf:9f:c0:48:b5:3a:5f:
         5f:b9:ad:56:ba:9d:f7:12:bc:c4:b5:85:89:cb:31:1e:2c:85:
         37:35:b6:d5:1c:c3:8b:0c:d6:56:fe:00:9e:35:8a:30:85:2f:
         2d:4f:a4:fb:a5:99:fd:cc:38:13:c5:45:fa:fa:42:76:43:de:
         6a:ae:ad:06:36:dd:0c:6b:ea:4d:53:28:a2:3c:e4:ff:10:e6:
         8a:31:f4:82:11:f8:22:52:bd:58:84:32:36:61:9d:6c:3f:0e:
         85:eb:d2:cd:e6:36:91:b4:40:70:25:f9:20:3d:fc:70:dd:36:
         0f:73:0e:8e:e2:ba:b6:8f:92:7e:a6:5f:be:74:67:2c:26:de:
         ea:ab:a2:72:56:1c:7b:68:5a:19:b7:7b:61:44:d6:c4:b9:04:
         f4:b6:c7:8a:69:67:4c:70:92:e6:73:6e:ae:d3:eb:a2:15:2c:
         ee:af:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org