Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32352e302f32342d3234203d3e20323637333031.roa
File:                     34352e3233322e32352e302f32342d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          qsOosHtp7NNkg5vsfiicFt9p8upMOL4if/gk0nLzW+k=
Subject key identifier:   13:86:0B:1F:CB:22:E8:22:35:61:11:85:DC:90:4B:89:08:63:A3:E7
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       169E13C772158FD78271D975B6DBA38A4F4C23B7
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32352e302f32342d3234203d3e20323637333031.roa
Signing time:             Mon 15 May 2023 21:02:19 +0000
ROA not before:           Mon 15 May 2023 20:57:19 +0000
ROA not after:            Mon 13 May 2024 21:02:19 +0000
asID:                     267301
IP address blocks:        45.232.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9e:13:c7:72:15:8f:d7:82:71:d9:75:b6:db:a3:8a:4f:4c:23:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 15 20:57:19 2023 GMT
            Not After : May 13 21:02:19 2024 GMT
        Subject: CN=13860B1FCB22E82235611185DC904B890863A3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:83:3d:7a:9c:6d:37:8f:2c:d3:c3:a7:f6:
                    b5:1e:77:ef:8e:9e:46:e9:7a:ff:6b:ac:9e:03:e7:
                    51:94:d4:2b:40:09:b6:30:28:77:54:e6:8c:7b:71:
                    aa:05:6c:91:f7:c2:a1:56:b5:a0:c0:bf:3a:bf:b4:
                    b1:2f:52:78:ab:f9:27:74:cc:66:71:48:94:95:af:
                    af:18:6b:f2:75:04:b5:b9:90:01:82:be:af:ab:27:
                    9a:65:3d:28:fb:62:56:01:83:8a:a4:53:d3:2d:9c:
                    7a:ee:75:14:1a:c1:87:58:39:b2:10:fd:74:ed:94:
                    ca:08:bd:fa:88:36:29:39:15:16:a1:ad:b3:5d:9b:
                    8d:e1:a0:3f:18:7e:08:8a:0b:14:75:26:10:22:6a:
                    27:d0:4f:fd:2a:e7:3c:a7:90:bb:8e:1b:16:d1:22:
                    75:c2:79:da:32:d0:04:1b:21:be:18:65:a4:91:87:
                    a5:ca:ac:b6:51:d6:cd:c6:41:e9:f7:6c:09:26:f7:
                    33:a4:0e:be:29:f5:d6:4b:53:c9:d6:22:0c:16:b9:
                    7f:ec:8d:eb:a5:35:9c:58:7d:5d:a2:2b:50:c3:31:
                    ca:12:40:b4:af:97:3d:e4:c1:83:6b:74:3e:ed:5b:
                    51:ec:52:73:2c:f8:7b:fc:49:92:85:e1:3d:d2:c0:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:86:0B:1F:CB:22:E8:22:35:61:11:85:DC:90:4B:89:08:63:A3:E7
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32352e302f32342d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:5a:d4:ec:ef:ee:12:78:da:3a:8c:93:f5:aa:01:f2:9c:4f:
         ee:78:f2:37:bd:88:41:5f:59:b9:df:3d:f8:17:28:19:6a:92:
         61:1e:cd:52:00:1b:99:83:52:e0:8e:0b:1c:19:74:95:31:ea:
         97:9e:50:b2:ba:90:01:eb:9f:de:dc:f6:13:24:54:57:64:09:
         41:b0:80:5f:96:25:21:3c:00:46:77:e0:9c:a1:59:bd:22:c2:
         19:f4:ee:48:71:9d:4d:e3:9b:b0:c6:3f:65:dd:bb:47:9f:5a:
         50:95:e0:95:8d:7c:65:9e:d7:3e:6f:59:d1:22:5d:bc:f9:79:
         3c:b1:9a:3f:da:7f:97:f8:45:a8:bb:0b:7a:97:0a:0f:ce:2e:
         f1:54:88:84:ae:61:2a:23:77:e2:4e:84:c4:71:b7:34:43:83:
         1e:54:eb:0e:f1:b9:f7:3e:d7:5d:f6:7a:84:2f:9e:eb:6b:bf:
         cb:c3:8f:e2:e0:0a:8e:f1:bf:3c:1d:3e:d5:ea:e5:10:0a:8a:
         4a:87:42:a1:1e:8f:fc:6f:8e:3a:f4:e1:d5:ae:49:94:ba:ed:
         b4:c2:e2:bf:d1:6a:71:e2:ae:22:38:29:76:11:4e:3a:60:30:
         23:b0:42:f5:da:cd:6c:45:9a:b9:a7:79:ee:6b:27:a2:0d:df:
         88:90:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org