Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137342e302f32332d3332203d3e20323639343734.roa
File:                     34352e3138372e3137342e302f32332d3332203d3e20323639343734.roa (raw, json)
Hash identifier:          m2sPOGcVBjoTrVH1yYQSKVNo80Vsn5smUhcUAxXg1FA=
Subject key identifier:   C8:22:99:85:93:6D:46:71:03:AA:DE:DA:60:B0:A9:45:E2:5E:E9:88
Certificate issuer:       /CN=D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8
Certificate serial:       1D36391C65DBF295BD603C9284C63350A97E533A
Authority key identifier: D7:18:59:E3:E9:A2:DD:D4:A6:FF:C8:04:3C:1A:8F:E3:AE:1E:07:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137342e302f32332d3332203d3e20323639343734.roa
Signing time:             Fri 26 Jan 2024 18:59:09 +0000
ROA not before:           Fri 26 Jan 2024 18:54:09 +0000
ROA not after:            Fri 24 Jan 2025 18:59:09 +0000
asID:                     269474
IP address blocks:        45.187.174.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:36:39:1c:65:db:f2:95:bd:60:3c:92:84:c6:33:50:a9:7e:53:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8
        Validity
            Not Before: Jan 26 18:54:09 2024 GMT
            Not After : Jan 24 18:59:09 2025 GMT
        Subject: CN=C8229985936D467103AADEDA60B0A945E25EE988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:91:d7:ff:ad:14:11:f1:95:83:6a:0c:f6:
                    22:00:53:01:9c:63:67:a3:1a:51:6d:05:8b:02:cb:
                    dc:fe:f3:9c:c4:0d:f7:06:42:a7:d4:e9:0f:89:e8:
                    45:3d:1b:f0:d3:1c:ca:6d:f7:81:fb:e8:11:db:fb:
                    65:a3:d4:25:2a:11:9e:ca:69:20:40:bb:c0:a5:f4:
                    b3:df:7a:30:02:a9:ef:94:af:1a:90:d5:2f:55:78:
                    32:ad:db:f2:2c:47:57:eb:7b:bc:74:00:a2:b8:2b:
                    76:23:2e:3e:29:dc:3c:55:1d:e2:dd:2c:8c:0b:cd:
                    4a:bf:f6:14:96:b3:38:35:c9:dd:5a:ac:f1:c5:e1:
                    ce:17:a0:a3:a6:d8:bc:e4:f1:56:cd:0a:0c:5d:1e:
                    5d:b6:1d:2b:7a:11:8d:b2:1d:25:c6:43:47:dd:36:
                    84:ba:42:3f:58:17:e0:01:8e:e7:d2:5c:d1:db:08:
                    45:6e:75:9d:ed:61:78:e6:b0:3e:9f:5e:f7:3f:49:
                    bd:49:4f:5a:b5:1a:30:4a:d7:d9:8c:13:f4:de:42:
                    ff:42:54:01:a2:3c:7a:10:5e:68:d5:73:64:4f:8f:
                    b7:5b:e5:3d:f2:05:ea:0d:9b:fe:f7:8b:b3:f2:04:
                    d0:db:5a:09:dd:12:b8:01:ce:d8:ab:d6:f4:13:69:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:22:99:85:93:6D:46:71:03:AA:DE:DA:60:B0:A9:45:E2:5E:E9:88
            X509v3 Authority Key Identifier:
                keyid:D7:18:59:E3:E9:A2:DD:D4:A6:FF:C8:04:3C:1A:8F:E3:AE:1E:07:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137342e302f32332d3332203d3e20323639343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:5a:5e:b9:66:ce:b1:53:06:5f:b3:b7:d7:23:4a:5e:37:
         3b:4b:70:19:33:bd:0b:d1:0b:3a:23:7b:e5:54:7d:74:fa:45:
         8d:72:5a:c5:c0:93:e6:e4:b8:37:d1:a6:6f:6d:5f:ee:6c:d9:
         d6:4e:66:52:f9:f5:87:77:2a:3e:59:c9:f8:03:2d:04:4c:4b:
         c5:fd:76:ee:96:ad:b7:78:35:4c:42:38:bb:bf:bd:03:de:f9:
         61:1a:60:aa:ca:ce:6f:3c:2a:56:9e:54:ee:db:2d:54:6b:7f:
         bf:cf:f3:0b:e5:e8:ea:30:78:bd:fb:77:14:82:04:b2:71:ce:
         27:fa:40:72:82:3a:0e:0c:0e:06:19:65:3e:d3:31:6e:b9:fe:
         be:f1:9c:9e:1a:81:a8:ff:4d:f2:b6:ac:0c:f0:bf:65:c5:d0:
         c0:43:75:29:b4:36:07:f3:fd:30:40:0a:71:c3:ab:a3:5b:3d:
         73:62:1a:35:97:e9:27:c4:7b:a1:f2:ed:0d:fd:70:fc:59:d8:
         e1:af:fe:bf:46:32:1d:80:95:7d:2d:9f:e9:e0:08:5b:27:ab:
         71:cb:71:a2:80:06:91:80:08:aa:b9:fd:2b:71:b8:67:c8:9f:
         91:b5:2e:4b:fb:59:3f:03:bb:1a:0f:03:2a:56:54:16:85:8b:
         12:58:4e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org