Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131372e302f32342d3234203d3e20323636303438.roa
File:                     34352e342e3131372e302f32342d3234203d3e20323636303438.roa (raw, json)
Hash identifier:          MIHwiQXmbH6S0VRHRPn8VfLP8q0gbWm8W3LuWPKcQaA=
Subject key identifier:   2F:0E:F3:DA:5F:49:11:8D:81:53:64:F0:69:F8:F2:86:16:92:9B:E5
Certificate issuer:       /CN=2DB41A3BC0B44F47245BA46320F4817897477307
Certificate serial:       0DA866CE5A1C7E9E9D05A43956CD25AAA21D5670
Authority key identifier: 2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131372e302f32342d3234203d3e20323636303438.roa
Signing time:             Tue 28 Nov 2023 23:15:11 +0000
ROA not before:           Tue 28 Nov 2023 23:10:11 +0000
ROA not after:            Tue 26 Nov 2024 23:15:11 +0000
asID:                     266048
IP address blocks:        45.4.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a8:66:ce:5a:1c:7e:9e:9d:05:a4:39:56:cd:25:aa:a2:1d:56:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DB41A3BC0B44F47245BA46320F4817897477307
        Validity
            Not Before: Nov 28 23:10:11 2023 GMT
            Not After : Nov 26 23:15:11 2024 GMT
        Subject: CN=2F0EF3DA5F49118D815364F069F8F28616929BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:6c:e7:6c:d7:51:c0:3c:27:60:72:ae:2c:
                    63:d7:16:91:f5:ad:d4:2e:be:a7:ef:1c:43:c0:1a:
                    0d:4c:66:b9:53:56:b9:50:80:bd:60:2b:eb:d0:e4:
                    36:3a:1e:39:c9:2f:51:2d:ef:a8:34:06:09:9e:40:
                    e4:1c:77:b7:1d:a4:d8:84:23:7b:77:ac:71:ff:a0:
                    7b:c0:36:eb:a1:71:13:f6:3b:21:54:d5:63:ba:6a:
                    41:a7:8c:94:bf:68:b6:0e:9e:b3:35:69:76:a9:34:
                    32:5f:6f:6e:44:be:b4:2f:c2:66:69:a3:39:b7:24:
                    df:99:ca:18:4f:74:40:ef:fa:30:04:ae:56:98:d5:
                    73:92:ed:0a:62:cf:de:12:a6:a4:25:9e:9b:65:93:
                    2a:33:dd:4f:bd:77:0e:50:8d:90:89:95:9e:7e:13:
                    19:4b:76:7b:15:f2:18:50:f3:b7:78:f6:35:e5:54:
                    8b:f4:90:ea:74:db:7d:7b:c8:16:17:b2:44:b9:78:
                    84:98:17:f5:fa:cc:09:98:b0:02:03:0e:f5:19:a0:
                    ca:40:f4:1a:06:4a:c3:68:ee:44:d7:47:6d:77:6b:
                    e3:1c:67:d1:37:c4:1f:ee:5d:b3:5a:03:2a:6c:bf:
                    d5:02:25:26:c4:61:17:e5:d0:fb:ce:51:64:06:65:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0E:F3:DA:5F:49:11:8D:81:53:64:F0:69:F8:F2:86:16:92:9B:E5
            X509v3 Authority Key Identifier:
                keyid:2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131372e302f32342d3234203d3e20323636303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:b4:bd:d8:39:13:e4:24:f2:94:b2:ed:62:1f:20:9b:33:
         94:7b:a4:8c:e0:9d:4e:8c:e8:c6:f6:88:37:c0:ca:a6:97:07:
         ea:37:e5:97:6c:c4:c9:24:b4:96:ac:fc:21:47:8c:6b:b3:c2:
         91:76:79:4e:28:8a:99:7c:d2:2d:8e:51:49:24:0d:1b:a0:b9:
         c9:83:24:4c:10:fe:10:df:70:f9:ae:8a:b2:82:b2:66:d6:d4:
         12:63:06:26:7d:64:a7:af:21:60:33:0d:cf:66:7d:17:ea:59:
         92:1e:a0:03:12:6d:5d:52:5d:97:26:dd:59:d7:d3:ad:50:18:
         95:20:28:e0:a9:20:98:0e:06:5c:95:2e:14:15:86:63:b5:ac:
         5a:20:ff:ef:53:c1:db:51:06:6e:ad:bd:77:b6:4d:46:d5:e4:
         eb:b0:d4:af:3f:a9:ed:a8:4b:39:c8:ba:00:22:e7:07:2a:4c:
         ed:1b:24:d5:e0:15:9d:ab:85:fa:c3:1f:08:7f:ea:db:c8:64:
         08:3f:41:09:6f:45:b6:ef:1f:2b:ee:06:6a:3c:e4:aa:75:88:
         31:d2:c0:18:90:b8:31:b6:45:ea:ec:ce:48:5e:5b:49:8e:ea:
         1f:a9:fa:ac:e7:05:f1:b2:8f:f7:3a:d9:ff:9d:eb:c9:3b:c3:
         fe:d1:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org