Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132392e302f32342d3234203d3e20323638363136.roa
File:                     34352e3136342e3132392e302f32342d3234203d3e20323638363136.roa (raw, json)
Hash identifier:          sYz9A47XeUfyFx9w7yCIDhTQ0NFxJ66iGQV/B1lpzvU=
Subject key identifier:   E9:C7:72:4D:5C:A5:76:7C:62:21:CE:D0:2A:03:82:D3:0A:E9:3A:9C
Certificate issuer:       /CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Certificate serial:       DA3D4997C633DBA528469B3E669B268EB4056F
Authority key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132392e302f32342d3234203d3e20323638363136.roa
Signing time:             Tue 05 Sep 2023 14:04:38 +0000
ROA not before:           Tue 05 Sep 2023 13:59:38 +0000
ROA not after:            Tue 03 Sep 2024 14:04:38 +0000
asID:                     268616
IP address blocks:        45.164.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            da:3d:49:97:c6:33:db:a5:28:46:9b:3e:66:9b:26:8e:b4:05:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
        Validity
            Not Before: Sep  5 13:59:38 2023 GMT
            Not After : Sep  3 14:04:38 2024 GMT
        Subject: CN=E9C7724D5CA5767C6221CED02A0382D30AE93A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:3b:0c:4f:dd:fd:f0:94:34:9f:c3:97:6d:
                    fd:14:7a:43:fd:fd:98:5c:b1:90:5b:c6:05:82:ef:
                    14:21:c5:b3:88:80:ef:2f:92:c9:bc:53:ba:54:0f:
                    4c:13:d3:e2:83:07:94:b8:69:9f:1e:da:d4:af:27:
                    cf:f8:97:b1:30:97:fb:46:57:ef:6a:bf:ab:e2:65:
                    4a:4f:05:b8:62:6b:4a:68:08:41:6c:36:ad:0a:8f:
                    ce:d2:6a:f4:a1:3e:17:04:27:80:dd:a7:48:2f:6e:
                    e2:5c:80:ad:60:cd:d0:83:02:b1:01:59:90:7a:94:
                    24:75:ea:2c:2f:37:02:af:5a:e9:42:0d:ab:d5:91:
                    8e:6f:34:d2:bd:00:a0:39:db:fa:8e:b5:98:50:99:
                    60:aa:75:74:10:ee:e8:d7:47:d1:17:1c:6b:aa:c7:
                    6e:eb:16:cf:55:fc:d8:c6:eb:42:50:ba:47:71:14:
                    01:0c:86:ee:cc:29:52:70:37:ea:3a:30:6d:3f:12:
                    f7:7d:6c:15:7b:23:59:ba:84:90:ca:19:7c:0c:50:
                    37:fb:cf:cd:1e:4f:53:c0:a2:a1:4f:88:01:ee:93:
                    6b:d5:65:e2:d5:5f:bc:0e:97:33:e8:e6:32:d6:70:
                    b6:72:f0:47:cb:3a:94:c7:18:02:7d:e7:72:fd:15:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C7:72:4D:5C:A5:76:7C:62:21:CE:D0:2A:03:82:D3:0A:E9:3A:9C
            X509v3 Authority Key Identifier:
                keyid:42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132392e302f32342d3234203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:83:b1:dd:82:a1:ab:cb:c9:2b:93:a2:fd:aa:ed:c7:70:
         f8:8c:eb:78:69:aa:8e:35:d2:d0:e9:bd:c8:8a:dd:b6:15:40:
         7c:2d:5e:89:a4:ea:5e:dc:0a:93:8a:f1:b6:ad:ba:03:01:7f:
         90:78:2b:8a:b9:57:f0:de:5a:03:94:ff:2e:52:dc:5d:1b:0a:
         64:48:2d:9a:c8:c3:a5:9e:b2:fd:97:5c:92:26:3a:28:97:df:
         a4:ca:95:b6:1c:34:06:cb:e3:34:62:86:fa:77:72:0a:e5:18:
         9d:26:86:f2:f0:34:18:7d:31:5a:ac:fa:f5:97:cc:5c:72:4c:
         9c:22:88:ab:c6:c2:2e:51:fc:f2:45:cb:01:aa:fe:2a:b3:2b:
         10:24:24:c4:e1:a6:97:cd:3c:a2:ad:48:74:1f:ba:1b:1c:9c:
         31:9c:70:77:b9:76:24:41:39:33:f1:de:8a:be:99:82:99:4e:
         84:84:9a:47:57:5b:17:44:01:66:01:7e:09:48:90:00:ba:34:
         87:7d:02:7b:ed:03:f0:70:fb:a3:20:30:9b:e7:ad:d6:ba:5d:
         8d:97:79:66:8e:01:f0:a0:51:2e:4d:9e:22:0d:56:f1:e7:c4:
         dc:5c:72:18:80:4a:15:06:35:e8:1f:28:72:92:e0:af:8b:18:
         c5:82:d0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org