Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131382e302f32332d3233203d3e20323636353834.roa
File:                     34352e372e3131382e302f32332d3233203d3e20323636353834.roa (raw, json)
Hash identifier:          ozV0g/meH6u5RwUZRVBYfkU9dVDMCrq00im7u3o1I3A=
Subject key identifier:   63:4A:04:20:0B:A9:73:51:B3:1A:FB:AB:75:AE:D6:18:EE:38:F9:BA
Certificate issuer:       /CN=2E0076A37EFDCC7006F754C5E68251073C6A031D
Certificate serial:       0C2676B2AEEB145597B3DBC8A454DF5E64F6C4AC
Authority key identifier: 2E:00:76:A3:7E:FD:CC:70:06:F7:54:C5:E6:82:51:07:3C:6A:03:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E0076A37EFDCC7006F754C5E68251073C6A031D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131382e302f32332d3233203d3e20323636353834.roa
Signing time:             Tue 17 Oct 2023 12:48:56 +0000
ROA not before:           Tue 17 Oct 2023 12:43:56 +0000
ROA not after:            Tue 15 Oct 2024 12:48:56 +0000
asID:                     266584
IP address blocks:        45.7.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:26:76:b2:ae:eb:14:55:97:b3:db:c8:a4:54:df:5e:64:f6:c4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E0076A37EFDCC7006F754C5E68251073C6A031D
        Validity
            Not Before: Oct 17 12:43:56 2023 GMT
            Not After : Oct 15 12:48:56 2024 GMT
        Subject: CN=634A04200BA97351B31AFBAB75AED618EE38F9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:92:c1:b3:16:4b:80:9e:c5:fa:7f:df:30:
                    2c:ac:cf:ae:8b:a8:a6:de:d7:0d:2d:1a:e7:df:67:
                    c6:99:49:48:57:04:95:91:b6:46:16:74:74:88:34:
                    84:f2:4c:a3:09:f3:52:b6:93:11:52:48:8e:be:00:
                    18:75:d5:61:77:99:2d:b5:e5:fd:92:95:66:b2:a7:
                    fc:6b:c9:8f:f5:11:e8:cf:a5:08:6f:c3:6c:b7:c4:
                    b1:73:68:01:59:39:06:cb:59:38:58:c9:7f:bc:60:
                    5f:e5:73:f3:9c:d3:8e:93:9a:30:73:54:bb:bc:64:
                    54:8f:3e:2d:3d:7a:bb:fc:99:5b:07:d5:bb:e9:b0:
                    34:0f:d2:76:f4:55:cf:59:27:7d:39:69:02:59:2e:
                    bd:27:01:8a:21:07:c3:2b:0c:c2:8e:b7:4a:75:16:
                    93:87:61:be:86:65:da:17:c1:59:e2:b7:e6:04:d7:
                    63:70:c8:9b:fd:35:b2:ba:d9:77:00:35:73:36:3e:
                    6b:57:9c:f8:10:10:18:97:33:83:e2:af:4f:4b:bb:
                    2d:ec:52:73:76:3e:e3:ab:20:d9:2d:18:6a:58:01:
                    db:0b:d8:03:76:f9:b8:99:a1:ca:f4:f8:00:07:cc:
                    8d:db:f9:85:0c:cd:67:53:9c:d6:13:8f:95:8a:fc:
                    95:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:04:20:0B:A9:73:51:B3:1A:FB:AB:75:AE:D6:18:EE:38:F9:BA
            X509v3 Authority Key Identifier:
                keyid:2E:00:76:A3:7E:FD:CC:70:06:F7:54:C5:E6:82:51:07:3C:6A:03:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/2E0076A37EFDCC7006F754C5E68251073C6A031D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E0076A37EFDCC7006F754C5E68251073C6A031D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131382e302f32332d3233203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:51:76:0b:06:4f:23:d3:f8:44:67:0d:79:6e:db:0c:7e:dd:
         c9:9d:03:f4:33:d6:50:c8:b1:62:e5:6a:d6:0e:74:1d:a8:f5:
         46:0b:4a:81:c9:5a:c8:2f:a6:2a:c4:9a:ae:54:09:a7:f4:a2:
         bd:36:6d:15:bb:99:c6:2b:66:42:67:9e:a2:8d:a3:fb:9d:6b:
         01:2f:55:49:f4:19:2c:c7:7d:0b:9c:a9:a2:80:44:a1:3e:7c:
         a9:71:25:cf:08:54:40:9a:0a:fc:9c:48:50:df:2f:25:cd:5f:
         f9:c5:7f:2f:5f:b7:19:52:5c:a4:db:27:43:04:da:dc:d8:a9:
         fe:55:c1:e2:bd:80:61:aa:20:bf:00:9f:61:1b:b3:cc:db:9b:
         7d:b2:e3:3f:f4:bb:4e:c7:71:40:b4:7d:62:af:44:32:75:59:
         4e:bd:d9:f5:b4:ef:12:a2:94:3c:85:8b:e4:37:50:74:89:24:
         2c:d4:e6:05:69:01:23:78:87:7e:39:7e:f9:dd:6b:10:1c:ea:
         93:3f:1b:cd:d0:55:97:26:29:be:ae:ce:3c:82:d0:77:93:b3:
         70:9d:e4:93:92:2b:49:a5:af:b3:70:ad:f5:5e:37:7a:ad:77:
         88:34:6f:3c:74:94:25:b3:31:d6:88:d4:6b:ac:e6:99:d7:fc:
         aa:0d:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org