Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130382e302f32322d3232203d3e20323636393131.roa
File:                     34352e3232342e3130382e302f32322d3232203d3e20323636393131.roa (raw, json)
Hash identifier:          PzZwBXBL47g3j83UJ+MyK8ddZ5oQ1uFt0lr9SkrBDJ8=
Subject key identifier:   A0:D2:BA:F7:96:86:B4:2E:ED:49:1E:55:86:A5:8C:66:CF:98:C9:C1
Certificate issuer:       /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial:       59ADCF97BFD5045B4D338EB20EF7CF36DAF7E170
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130382e302f32322d3232203d3e20323636393131.roa
Signing time:             Wed 16 Aug 2023 13:47:50 +0000
ROA not before:           Wed 16 Aug 2023 13:42:50 +0000
ROA not after:            Wed 14 Aug 2024 13:47:50 +0000
asID:                     266911
IP address blocks:        45.224.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ad:cf:97:bf:d5:04:5b:4d:33:8e:b2:0e:f7:cf:36:da:f7:e1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Validity
            Not Before: Aug 16 13:42:50 2023 GMT
            Not After : Aug 14 13:47:50 2024 GMT
        Subject: CN=A0D2BAF79686B42EED491E5586A58C66CF98C9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:92:1e:0f:4c:3f:a9:86:65:e1:93:8f:26:
                    a5:48:ad:74:8b:e9:66:cb:b7:bf:e2:8a:98:1e:9c:
                    ca:92:64:04:9a:ca:c9:8d:8e:db:de:80:30:cb:f0:
                    7d:f1:d6:8f:37:79:6a:2a:11:28:ce:5c:72:e0:b5:
                    b2:c9:44:0b:0d:0e:59:96:b7:b3:e0:58:41:db:20:
                    bd:77:ff:f9:0f:af:1d:4c:9a:84:9e:93:b8:1f:4e:
                    73:08:0f:c1:9b:2c:7f:06:d3:fc:c3:f3:46:43:94:
                    e3:6a:94:f9:e9:1d:d1:db:ee:8c:f8:67:b9:b4:45:
                    05:76:6e:04:8c:8a:99:a3:11:63:de:0b:d8:73:7e:
                    e8:df:10:75:af:57:da:10:a6:8e:73:5d:79:02:7c:
                    ff:46:21:6b:c6:5e:2e:dc:14:30:14:52:40:04:11:
                    1f:2d:4c:64:5c:08:1a:e5:cb:45:91:98:b8:8d:c8:
                    f8:5b:32:c2:6d:72:2a:6a:0f:2c:34:c3:a3:c2:4a:
                    ec:5a:a9:ee:9e:08:c1:08:ec:b6:af:b5:1f:45:7a:
                    ad:c5:31:a0:c3:b2:88:53:11:14:f0:89:8d:27:78:
                    45:b5:dd:09:e3:e6:68:f4:34:ea:35:59:4c:48:f9:
                    b6:1c:24:a1:12:87:ca:10:5a:c8:24:cf:7e:88:7c:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D2:BA:F7:96:86:B4:2E:ED:49:1E:55:86:A5:8C:66:CF:98:C9:C1
            X509v3 Authority Key Identifier:
                keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130382e302f32322d3232203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:e9:32:41:40:40:72:9f:7f:6b:30:1d:ae:28:22:a1:c0:b1:
         50:c7:b1:3c:1e:b6:d5:72:17:24:b9:ea:83:7c:eb:32:6d:ef:
         b5:37:ad:41:b6:89:53:fc:ab:99:5a:ee:0c:82:1b:b7:be:9f:
         a5:5a:73:d0:25:e0:77:b6:d6:bf:f2:2f:c8:5f:94:c0:cb:51:
         e5:f8:63:0a:cb:13:5e:44:b0:36:63:17:c9:76:47:ec:07:c4:
         ea:ee:32:eb:04:83:98:4c:a7:84:3e:dd:04:a5:1f:c4:7c:44:
         eb:43:d3:ab:23:29:be:d2:ff:c6:8e:ba:bd:f6:eb:f9:7c:bd:
         83:21:d6:ab:5a:c8:eb:f4:2d:0f:53:99:2d:c8:23:66:50:60:
         17:0b:b4:45:45:ba:b0:68:b9:82:24:c6:82:f1:b5:c5:27:d1:
         e0:f6:29:fd:82:4f:d9:e4:3b:b4:7a:1e:46:d6:70:56:ac:67:
         aa:4f:cc:6b:b1:f8:e7:c9:5b:18:ed:9c:2e:e3:2e:cc:4c:8a:
         bd:ac:35:e0:4a:ff:b2:a0:50:4c:d7:dc:51:df:3e:d3:86:77:
         4f:25:11:32:c1:29:79:a9:e9:18:85:c6:2c:fa:19:63:82:46:
         0e:c1:90:27:dd:3c:3b:7a:47:0f:80:44:f3:7f:87:08:e9:ad:
         57:74:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org