Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233392e302f32342d3234203d3e20323637363735.roa
File:                     34352e3232342e3233392e302f32342d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          OcO2Gh41WvgMpGmcCAB7lf4KIt0HX66ISRhljWZ0ic0=
Subject key identifier:   53:84:4B:4F:43:17:03:C3:DE:44:F0:DB:AB:A3:AD:55:E7:BC:5D:99
Certificate issuer:       /CN=D6705BC868D161B2B42EB6434932188F27722DF3
Certificate serial:       19228EB9B5E2C8DAEB5FE4F5B5879607D23AE0AB
Authority key identifier: D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233392e302f32342d3234203d3e20323637363735.roa
Signing time:             Thu 29 Feb 2024 23:20:24 +0000
ROA not before:           Thu 29 Feb 2024 23:15:24 +0000
ROA not after:            Thu 27 Feb 2025 23:20:24 +0000
asID:                     267675
IP address blocks:        45.224.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:22:8e:b9:b5:e2:c8:da:eb:5f:e4:f5:b5:87:96:07:d2:3a:e0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6705BC868D161B2B42EB6434932188F27722DF3
        Validity
            Not Before: Feb 29 23:15:24 2024 GMT
            Not After : Feb 27 23:20:24 2025 GMT
        Subject: CN=53844B4F431703C3DE44F0DBABA3AD55E7BC5D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:2d:87:70:5b:2b:e2:7b:1a:16:3d:b1:8f:
                    2f:a2:ec:01:19:17:40:b1:71:ba:a6:bb:b2:2f:f6:
                    06:57:8e:fa:1b:fe:11:c3:75:b2:73:9e:9d:26:44:
                    f2:6a:14:20:77:4a:2c:5f:94:78:04:35:52:e1:1d:
                    9f:ba:9b:3c:84:c9:65:f6:b4:12:cc:69:e8:b0:8e:
                    5e:09:bc:3c:17:0b:03:86:d3:d8:8f:0b:c6:2e:9b:
                    a4:44:d7:fb:c7:79:b3:f5:92:b2:03:4c:18:2e:82:
                    47:e0:e2:ab:06:26:32:54:18:22:62:49:fe:ad:a9:
                    71:96:44:89:be:43:ad:cc:02:47:9f:4f:12:a2:35:
                    1f:af:49:2a:e4:a1:94:be:4f:2e:72:43:ab:34:ab:
                    03:6b:35:0c:81:1e:7a:d4:76:86:30:28:ed:62:fc:
                    1d:e0:15:5d:a6:91:2a:20:2c:70:4c:72:50:50:32:
                    08:14:09:b7:6b:85:75:52:28:c0:c5:a4:ad:72:e0:
                    ab:6b:b7:8a:3d:8f:d6:04:49:50:e6:33:b9:d4:41:
                    6b:9f:6b:5b:43:e0:a6:de:ab:2c:c7:40:c3:7e:ba:
                    af:1e:61:ae:8d:45:4e:3a:47:18:30:d4:04:7c:3f:
                    fd:5e:fc:61:07:f1:72:50:88:b8:68:db:9f:57:2a:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:84:4B:4F:43:17:03:C3:DE:44:F0:DB:AB:A3:AD:55:E7:BC:5D:99
            X509v3 Authority Key Identifier:
                keyid:D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/D6705BC868D161B2B42EB6434932188F27722DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233392e302f32342d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:7a:25:a4:67:80:7c:1f:74:21:bb:b4:0a:6a:f2:2f:c1:49:
         7d:8b:2e:15:a5:2f:2e:50:ca:49:37:e9:55:24:c9:ea:14:d4:
         09:63:03:8a:e6:00:ac:11:ab:d2:b9:18:43:f1:bf:73:91:23:
         d4:1d:97:53:30:93:38:a0:89:3c:8c:59:94:95:ef:ec:96:a7:
         d5:76:10:55:5e:36:3b:4f:24:11:61:a3:51:0e:29:16:e2:d3:
         62:da:28:ec:3d:43:af:0e:38:62:9e:4e:9d:7a:b5:ff:2c:65:
         51:24:38:6a:27:f2:84:e7:46:5a:64:91:ca:85:d2:1a:1e:b3:
         59:8e:61:4e:cb:c4:cb:44:71:17:52:16:18:50:a0:a0:f0:55:
         cf:b9:0a:50:aa:7e:00:00:b3:c3:05:9d:cf:29:78:33:be:29:
         1a:d6:fa:0c:e6:92:7f:22:67:b6:1e:33:67:de:76:16:42:7d:
         34:22:16:be:e8:cc:51:f8:bb:58:8c:ea:f9:3a:29:06:c9:a2:
         59:25:40:8a:29:90:a3:68:ae:4a:3e:4e:c9:c0:6f:a9:43:e2:
         61:41:f8:29:94:02:62:16:79:94:f7:82:31:7a:7f:26:40:94:
         d1:a9:62:38:89:ca:62:3d:b3:84:a9:6c:ce:f1:32:b8:e3:34:
         72:01:d0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org