Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e392e302f32342d3234203d3e20323637323831.roa
File:                     34352e3233322e392e302f32342d3234203d3e20323637323831.roa (raw, json)
Hash identifier:          WgWykoTa+IwOUik9ryCsn3bYyzUqVt8Ga0kVNfelPVw=
Subject key identifier:   20:AA:C8:C5:EF:D8:6F:D2:F0:69:0A:DC:40:94:FE:8C:5B:E8:80:90
Certificate issuer:       /CN=783DF8ED6D0FB0C700A186030983E102EF8C7DC5
Certificate serial:       25CC5BB1C5B128168CD38F6E3B80CB1EEE754CDD
Authority key identifier: 78:3D:F8:ED:6D:0F:B0:C7:00:A1:86:03:09:83:E1:02:EF:8C:7D:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783DF8ED6D0FB0C700A186030983E102EF8C7DC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e392e302f32342d3234203d3e20323637323831.roa
Signing time:             Fri 26 Apr 2024 20:17:17 +0000
ROA not before:           Fri 26 Apr 2024 20:12:17 +0000
ROA not after:            Fri 25 Apr 2025 20:17:17 +0000
asID:                     267281
IP address blocks:        45.232.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cc:5b:b1:c5:b1:28:16:8c:d3:8f:6e:3b:80:cb:1e:ee:75:4c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783DF8ED6D0FB0C700A186030983E102EF8C7DC5
        Validity
            Not Before: Apr 26 20:12:17 2024 GMT
            Not After : Apr 25 20:17:17 2025 GMT
        Subject: CN=20AAC8C5EFD86FD2F0690ADC4094FE8C5BE88090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c7:00:47:26:39:41:7c:22:9d:fd:b4:c8:1b:
                    7f:b6:ea:f0:d1:0d:1e:85:55:ef:b8:13:d9:89:49:
                    31:6c:8d:a3:51:0e:76:58:8e:34:97:1d:42:b6:73:
                    ca:2a:1c:a3:ba:4c:f8:1d:40:b8:0d:ee:57:d7:57:
                    70:eb:e0:a0:ad:d2:cb:f2:66:df:ac:da:5b:d4:59:
                    14:b1:97:62:c9:e6:15:9d:48:33:b1:91:d7:e0:fe:
                    d7:d1:a1:e8:4a:4c:17:1e:12:da:5f:47:38:14:c9:
                    f8:88:d7:65:ba:76:81:12:8b:37:94:5e:31:fe:67:
                    da:15:f5:e8:61:c0:03:3d:de:55:cf:fd:af:27:38:
                    25:fe:68:70:3b:52:40:5f:e0:90:5f:24:fb:61:bd:
                    01:6c:f5:c7:c4:63:6b:6b:d1:bd:8a:be:97:99:eb:
                    0a:29:56:d8:86:8f:3c:30:31:11:e8:61:0d:bd:0b:
                    cd:82:06:15:c0:6f:31:7b:ef:a5:07:5f:23:57:7b:
                    ff:1a:35:d8:a6:e1:00:ab:1e:75:2e:77:88:38:41:
                    81:1c:a3:95:6b:56:0e:a5:a8:1e:46:a6:bb:b2:2e:
                    58:8d:8a:89:0b:4c:27:99:75:e9:49:fc:53:0a:37:
                    6e:f4:7e:3c:1f:4c:cf:a9:d0:4e:af:22:66:9c:9f:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AA:C8:C5:EF:D8:6F:D2:F0:69:0A:DC:40:94:FE:8C:5B:E8:80:90
            X509v3 Authority Key Identifier:
                keyid:78:3D:F8:ED:6D:0F:B0:C7:00:A1:86:03:09:83:E1:02:EF:8C:7D:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/783DF8ED6D0FB0C700A186030983E102EF8C7DC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783DF8ED6D0FB0C700A186030983E102EF8C7DC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e392e302f32342d3234203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:37:36:f4:47:1f:f1:d9:28:02:5c:64:eb:14:d7:6f:2f:cd:
         b0:e2:e3:e6:03:6b:e0:da:32:ba:ce:d3:ea:ce:0d:7c:48:89:
         c6:df:0a:87:70:ed:71:59:d9:7e:a5:a4:09:2d:10:8b:35:46:
         17:00:f9:08:79:8f:35:83:8f:3d:d6:1e:02:ac:0e:dc:6b:4b:
         4f:c2:49:da:c5:cc:2f:78:72:7d:9f:eb:d3:f4:70:30:88:a4:
         65:e6:e0:93:31:8e:b4:af:dc:46:2d:dd:a5:c1:0c:6f:91:5e:
         71:20:5c:6b:2f:af:08:fc:f7:dd:b5:a0:4a:e8:e0:c8:02:7b:
         2a:15:52:c8:99:53:ae:df:e7:67:b8:02:3a:4b:01:c1:9c:1a:
         16:93:4b:f9:4c:58:22:d6:d6:86:16:11:79:be:91:03:dd:79:
         c2:f9:d0:25:a0:c2:05:a7:cc:29:2b:0c:2a:6e:7b:22:bb:6b:
         7d:2f:e7:d3:de:99:05:34:01:d5:7e:2a:29:c1:04:a9:3a:ae:
         74:51:2f:f0:b7:bc:bb:03:96:85:3b:c7:b5:06:99:ae:06:2d:
         0a:b3:11:15:c4:7d:79:50:82:47:4c:b3:dc:d6:52:3d:c3:ec:
         d0:6d:61:96:cf:73:58:e9:ca:e3:95:c8:6c:ee:7d:5c:c9:53:
         87:6a:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org