Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39342e302f32332d3233203d3e20323638333230.roa
File:                     34352e3233382e39342e302f32332d3233203d3e20323638333230.roa (raw, json)
Hash identifier:          h6yuQGN9gudVJcOhZG0pXtLOJTaF1m+4ULSP6GvORbE=
Subject key identifier:   F8:7F:BE:4C:6B:C3:EA:BA:1E:90:43:5F:0E:31:AD:86:E3:08:C9:10
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       336C8762CAF40A85AF2948A80B18E0D078457F15
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39342e302f32332d3233203d3e20323638333230.roa
Signing time:             Thu 03 Aug 2023 17:01:15 +0000
ROA not before:           Thu 03 Aug 2023 16:56:15 +0000
ROA not after:            Thu 01 Aug 2024 17:01:15 +0000
asID:                     268320
IP address blocks:        45.238.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6c:87:62:ca:f4:0a:85:af:29:48:a8:0b:18:e0:d0:78:45:7f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Aug  3 16:56:15 2023 GMT
            Not After : Aug  1 17:01:15 2024 GMT
        Subject: CN=F87FBE4C6BC3EABA1E90435F0E31AD86E308C910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f7:33:22:ae:95:7a:e6:c6:89:af:e7:a6:29:
                    c9:5a:13:e5:2d:3d:19:2d:9a:ba:3a:21:fd:d1:56:
                    1b:ad:a4:ec:34:8a:b4:08:13:81:94:97:2b:4d:a7:
                    2c:a2:86:b3:d1:3d:d6:11:02:d2:13:46:15:81:54:
                    29:c2:ef:dd:3a:28:0a:bb:bd:b5:05:8e:b1:a4:05:
                    c6:cb:72:0e:04:9b:f5:98:f0:f4:d1:ed:2b:88:57:
                    06:92:ac:a1:21:df:24:29:0c:fe:fe:66:bf:7b:93:
                    b4:b1:eb:9d:bc:bf:cc:1d:3d:99:c9:d3:b5:7a:c4:
                    94:1a:00:84:b7:73:b0:5e:66:3a:0f:03:59:23:fd:
                    cd:78:1b:50:d1:c6:3b:60:5f:3b:f3:c2:e6:b5:69:
                    71:17:19:d5:a6:cd:ee:1a:52:f4:ab:5a:42:7c:d8:
                    a7:33:8e:cd:ea:08:71:8a:98:c1:2a:98:14:eb:d4:
                    28:72:a8:b8:a2:b6:23:54:a3:41:ba:0e:ca:29:16:
                    f7:ae:eb:0e:42:95:23:5e:3a:0a:dc:80:72:97:a3:
                    9d:8e:c0:86:b6:af:56:2a:34:72:49:8a:ae:ec:8b:
                    2a:0d:55:e6:54:b7:1f:e6:33:3a:48:3f:a0:b5:ed:
                    e0:22:0d:23:ba:c0:9a:04:6e:36:96:d7:73:ca:25:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7F:BE:4C:6B:C3:EA:BA:1E:90:43:5F:0E:31:AD:86:E3:08:C9:10
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39342e302f32332d3233203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:d8:bb:15:da:09:44:70:4b:c3:20:2a:8a:a6:aa:ef:44:3a:
         9d:73:c7:de:e9:4d:3e:96:fc:26:82:8d:da:7a:4b:9e:11:f3:
         9c:fb:3b:70:a1:8d:77:5d:fa:10:80:aa:18:a5:d1:72:94:f9:
         cf:33:ae:be:20:a6:03:45:58:d0:fd:b4:fa:21:e9:cf:6e:61:
         19:d7:cb:09:94:11:3e:af:a7:2e:58:c8:70:4c:29:f2:4e:52:
         d7:a2:e6:2a:96:12:3e:e3:3c:fd:00:cf:c3:ea:af:48:cc:ff:
         ba:ea:1c:8b:e2:8a:9e:6d:cd:91:29:46:10:37:c2:9f:a5:c4:
         d2:68:80:32:c5:7a:9d:d3:06:1d:f8:df:0a:78:ea:ec:98:18:
         cd:08:70:58:d1:b2:6b:aa:2e:81:62:0b:f5:f6:9f:a8:53:3e:
         fe:88:1a:75:25:53:10:96:7f:78:47:82:9d:1f:a1:f1:8f:99:
         ee:4e:a9:9a:41:02:3c:8f:84:fe:6d:fa:00:3f:55:ae:e3:3d:
         8d:42:29:40:ac:a0:2b:ea:f2:83:ff:8b:02:38:45:1e:b2:62:
         5f:77:a3:58:7f:5d:e4:c4:09:89:7d:8a:c6:31:58:c9:03:bb:
         93:b7:c9:d8:5a:96:f9:82:df:75:31:b1:07:75:6c:6b:7c:2f:
         09:74:fa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org