Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32342d3234203d3e20323638343038.roa
File:                     34352e3136302e3132342e302f32342d3234203d3e20323638343038.roa (raw, json)
Hash identifier:          4Tbf75r7ysvbGxCWUdDbgcUFZvPc4SypkCwQD48MkVI=
Subject key identifier:   DC:05:C6:71:AD:97:FB:C7:19:28:9E:D0:22:B7:51:EF:C4:9A:30:0A
Certificate issuer:       /CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
Certificate serial:       711996873809120C5847B449076474B0A9425981
Authority key identifier: BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32342d3234203d3e20323638343038.roa
Signing time:             Mon 08 Jan 2024 15:07:55 +0000
ROA not before:           Mon 08 Jan 2024 15:02:55 +0000
ROA not after:            Mon 06 Jan 2025 15:07:55 +0000
asID:                     268408
IP address blocks:        45.160.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:19:96:87:38:09:12:0c:58:47:b4:49:07:64:74:b0:a9:42:59:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
        Validity
            Not Before: Jan  8 15:02:55 2024 GMT
            Not After : Jan  6 15:07:55 2025 GMT
        Subject: CN=DC05C671AD97FBC719289ED022B751EFC49A300A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:b9:36:eb:93:4c:2d:61:7a:1a:fa:03:3a:
                    21:e9:f8:10:5b:42:56:3c:da:f2:9e:9b:e7:2a:ab:
                    5f:99:87:a6:de:a2:5e:07:4e:69:eb:ef:59:fb:f0:
                    ff:d9:aa:38:3e:fd:98:a8:8e:d5:e7:2a:c7:99:91:
                    b6:97:b4:6f:d3:06:5f:60:20:c6:c0:00:b2:f2:93:
                    7c:0e:dd:7c:8d:fe:0a:72:64:28:d2:70:1f:f8:ad:
                    6e:85:5a:30:ef:a8:63:da:36:1e:7e:86:95:65:a7:
                    a4:73:5d:83:be:80:db:67:a1:ec:a9:7c:1f:42:e7:
                    51:46:14:5e:16:45:bd:a9:08:10:3d:31:35:5d:67:
                    9d:a9:cd:a0:a9:35:1a:90:70:e7:6e:3d:f0:8d:b4:
                    21:41:60:df:e7:b9:46:b1:bc:13:23:1a:c6:eb:37:
                    03:47:3b:ea:fc:48:0a:bf:b9:f4:16:7c:d9:ba:88:
                    f3:9b:77:b8:a2:49:4e:5e:08:aa:cd:ad:b4:d2:d9:
                    57:52:48:ad:e7:59:96:1c:9c:ca:2f:78:3c:73:61:
                    28:a7:3a:20:6b:1a:70:52:2c:0b:a6:90:d1:9a:3f:
                    b4:65:0d:0f:97:af:b7:56:d8:28:66:ca:a2:6e:17:
                    31:9d:51:a8:c4:4a:dd:eb:a8:cb:29:89:34:fa:66:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:05:C6:71:AD:97:FB:C7:19:28:9E:D0:22:B7:51:EF:C4:9A:30:0A
            X509v3 Authority Key Identifier:
                keyid:BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32342d3234203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:42:3e:62:40:6d:01:7b:b7:37:d6:42:7c:96:d4:a4:a8:
         36:b6:e5:66:7b:bf:be:db:52:82:63:84:76:d6:36:fe:c3:c2:
         ab:a8:3c:a8:a9:22:07:a8:46:bb:c9:cf:b5:d0:bb:d3:ff:42:
         c2:4d:c5:65:77:86:be:0f:4a:12:ac:22:f8:37:06:b2:b7:ca:
         30:05:9c:55:75:73:2b:34:27:b1:dd:04:f3:2c:44:98:19:25:
         d6:9d:74:ac:24:d0:33:ff:78:12:f0:9b:fb:f9:dc:08:aa:8a:
         02:be:86:c4:a6:99:97:bd:43:18:f3:9a:c8:06:c5:55:9d:90:
         c1:25:ac:ba:81:15:12:c2:73:f6:b7:41:61:4b:f0:5d:af:61:
         48:19:8b:36:5c:dd:b7:7e:03:0c:ca:a3:1e:29:7d:5e:c4:d0:
         00:66:63:b3:79:f9:1e:45:19:0d:1a:8a:2c:ec:55:de:e2:88:
         94:e6:21:ce:d2:88:6a:fc:c2:98:03:4d:ea:aa:8f:a7:4e:95:
         56:01:85:d8:4c:64:33:f9:eb:b1:80:ba:55:57:0a:ac:31:cc:
         19:ec:b6:f8:11:64:b4:43:7a:e8:d3:4d:2a:36:1a:3d:bf:49:
         09:cc:15:bd:ec:b9:95:75:1d:86:a3:6d:40:b7:c1:09:a3:26:
         37:9c:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org