Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130382e302f32342d3234203d3e20323636393131.roa
File:                     34352e3232342e3130382e302f32342d3234203d3e20323636393131.roa (raw, json)
Hash identifier:          /MmrpzXmCOPnNdcrD4veoJGuj04EoTjWo+BTrlXl7F8=
Subject key identifier:   4F:D5:F3:90:1F:C0:78:87:FA:A5:52:D1:D8:EE:AE:24:A4:B5:E1:E5
Certificate issuer:       /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial:       65AFEFEE4C1FD0A0FAEDCAEB39D12BB9981FDAC3
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130382e302f32342d3234203d3e20323636393131.roa
Signing time:             Wed 16 Aug 2023 13:48:02 +0000
ROA not before:           Wed 16 Aug 2023 13:43:02 +0000
ROA not after:            Wed 14 Aug 2024 13:48:02 +0000
asID:                     266911
IP address blocks:        45.224.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:af:ef:ee:4c:1f:d0:a0:fa:ed:ca:eb:39:d1:2b:b9:98:1f:da:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Validity
            Not Before: Aug 16 13:43:02 2023 GMT
            Not After : Aug 14 13:48:02 2024 GMT
        Subject: CN=4FD5F3901FC07887FAA552D1D8EEAE24A4B5E1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:41:d0:d6:11:f2:ac:da:0b:62:f5:d8:55:
                    ef:3a:69:94:cb:c8:76:37:21:30:9b:40:ba:45:92:
                    ce:f5:d6:0b:7d:ff:93:fb:dc:d1:7c:77:d5:bf:9c:
                    01:29:8a:07:6f:9c:c4:bf:ab:61:83:46:20:56:00:
                    2c:17:12:80:87:4c:68:6a:57:a3:30:b7:a7:00:d4:
                    fb:dc:c0:2f:84:41:1b:2c:02:28:01:6c:48:bd:b2:
                    00:dd:f4:9c:26:92:12:4d:36:76:4f:54:0d:9e:95:
                    0a:13:f3:2d:2c:05:8f:f2:78:4b:21:5b:48:10:01:
                    f2:6f:4b:6e:da:9f:0d:c5:b0:e4:2d:b4:77:53:15:
                    cd:b5:86:a5:62:96:c8:67:11:aa:7e:28:ad:73:f6:
                    28:66:61:69:98:79:b8:8c:2c:df:c1:ab:8f:b1:15:
                    7f:01:74:63:32:9d:f5:0c:17:1b:c8:e3:62:d2:17:
                    23:5c:a4:e4:79:60:4d:2e:ab:b2:01:94:d6:de:1f:
                    d6:02:60:54:3b:ae:3d:70:a7:22:48:68:38:d3:78:
                    1f:2a:e8:fd:c8:26:83:33:a8:6b:4e:e8:14:c7:02:
                    8c:1e:a6:62:7f:b9:7a:e5:7c:84:c2:7f:f0:15:e9:
                    0d:88:6d:4c:b2:1c:3a:c9:f1:7d:73:59:be:d7:80:
                    d2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D5:F3:90:1F:C0:78:87:FA:A5:52:D1:D8:EE:AE:24:A4:B5:E1:E5
            X509v3 Authority Key Identifier:
                keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130382e302f32342d3234203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:fd:b8:e1:3a:81:2f:4d:58:95:1d:60:e5:7a:c8:57:cc:0e:
         8f:74:14:64:19:74:55:6a:64:a7:53:e6:06:e0:2b:ed:b5:86:
         e6:48:2d:e9:03:50:0a:8c:29:ae:c0:ea:fa:92:5f:a5:d4:81:
         fe:5e:ca:7e:ea:d3:1a:d1:a4:0d:8a:b8:5b:5e:72:16:9d:ef:
         0c:08:d0:36:78:30:26:4b:df:fe:7b:da:23:64:4c:e6:e2:a3:
         4d:03:24:64:c9:28:85:e5:4a:45:f0:8d:f8:ce:24:77:90:e8:
         35:5c:3c:5d:a6:46:ce:00:c9:6a:35:5d:0f:33:a0:ea:b0:88:
         50:54:95:54:2f:ba:bc:e5:b7:b9:b1:85:a4:8a:ef:3d:04:08:
         a5:03:c4:ef:3e:e8:de:89:9b:b2:15:78:96:84:79:63:65:c3:
         67:c4:b5:ee:ea:de:d4:8f:1b:ff:98:47:9f:92:f6:fa:96:97:
         8e:16:e9:6f:67:6a:94:7a:2d:ef:04:ea:99:18:99:ee:70:1b:
         34:8e:4a:5a:a2:b2:97:3e:fc:15:67:b3:9e:79:92:ad:53:d4:
         cc:b4:d3:ae:bd:3b:93:45:45:ed:c3:4c:e7:04:e5:7c:d8:28:
         64:d2:4a:d8:0c:6d:07:35:52:99:4e:0f:9b:e9:77:19:1c:9a:
         2e:b0:bd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org