Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39322e302f32342d3234203d3e20323638323637.roa
File:                     34352e3233372e39322e302f32342d3234203d3e20323638323637.roa (raw, json)
Hash identifier:          NtHQoaDhxbl/WSi5RtcEaix/eZ6MSNvUquUfgPlHM5U=
Subject key identifier:   39:17:31:B8:96:AA:33:C3:75:65:75:93:4E:FC:EC:40:71:7D:F0:C9
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       3C7DF2ACC2BCDBC5C62EA4E10B968F279B3E48F8
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39322e302f32342d3234203d3e20323638323637.roa
Signing time:             Mon 02 Jan 2023 19:47:23 +0000
ROA not before:           Mon 02 Jan 2023 19:42:23 +0000
ROA not after:            Mon 01 Jan 2024 19:47:23 +0000
asID:                     268267
IP address blocks:        45.237.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7d:f2:ac:c2:bc:db:c5:c6:2e:a4:e1:0b:96:8f:27:9b:3e:48:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Jan  2 19:42:23 2023 GMT
            Not After : Jan  1 19:47:23 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:da:c3:98:26:a7:44:d5:c7:93:e2:3b:ad:
                    23:d4:1f:26:5e:c2:30:52:36:de:90:e6:d9:53:ed:
                    1f:73:f2:63:cc:58:a2:bd:d5:2f:bf:f7:23:8d:d0:
                    bf:c5:c6:85:97:e2:d1:db:8c:01:d3:9e:80:6f:eb:
                    6f:7a:1c:3e:d2:ea:c7:e7:1d:c4:79:2b:cf:f6:36:
                    af:a1:ad:fb:86:87:13:a5:0d:1b:0d:49:d1:4f:a1:
                    5a:80:5d:6b:2f:20:c3:1b:3f:40:47:4a:39:96:b3:
                    8f:88:d2:2a:ce:bc:e8:bf:a8:aa:28:d6:cf:1e:0c:
                    eb:fd:88:a2:e1:30:16:0a:95:d6:f8:bf:df:4a:b7:
                    e1:d3:11:9c:82:b6:79:e8:38:c0:cc:f2:36:7c:41:
                    f3:88:7e:b0:c8:12:a7:8d:9f:64:8b:e7:7b:15:3a:
                    1d:66:1e:40:50:ab:ed:c7:67:63:a8:93:87:10:a9:
                    1d:76:d2:49:4e:48:a2:7b:da:5a:6f:ee:db:f5:cf:
                    62:0c:c4:6d:e4:0e:2c:e4:7c:25:48:c3:a3:63:97:
                    d0:9b:8d:35:8f:d9:23:d2:8e:33:a9:df:e0:4a:d3:
                    49:3e:e7:62:a0:ae:f7:aa:05:f2:70:1f:3b:f6:bd:
                    10:8a:a1:c5:a2:64:91:68:b3:79:b4:2d:e4:47:3e:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:17:31:B8:96:AA:33:C3:75:65:75:93:4E:FC:EC:40:71:7D:F0:C9
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39322e302f32342d3234203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:24:fb:0d:29:33:39:d8:ab:c7:dd:66:7d:ba:b9:a0:da:
         3c:e4:5a:8f:95:c8:38:3e:9f:a5:87:8f:66:52:a8:3f:33:8f:
         d0:31:62:32:37:ad:a9:c9:4f:58:ff:f3:19:bd:4d:91:b9:fc:
         cc:5b:c3:e9:d6:cb:2b:aa:2e:1c:4a:e1:9d:1e:18:95:8e:73:
         39:5b:f9:80:41:26:2b:bd:b7:95:9a:0d:c5:5d:b7:d1:19:00:
         f4:79:ca:57:54:a2:b0:e5:cc:df:dd:3c:7a:ce:fa:1a:36:95:
         aa:ae:b4:c4:24:83:4f:57:0c:12:74:77:39:74:22:63:f8:c6:
         1a:3d:c5:30:1e:6d:06:bd:ce:32:e4:7c:43:57:d7:13:51:82:
         12:3f:ea:5e:15:d8:cd:34:8b:17:be:8e:06:52:b3:dd:75:3f:
         31:65:ef:25:df:b2:07:a5:e0:98:3e:c3:a8:74:2e:45:5c:ad:
         e4:d4:47:74:67:6e:d6:c0:2a:ad:a9:01:e8:e6:35:a3:8a:04:
         d1:9f:d2:68:73:00:ff:e7:75:e4:db:86:aa:21:26:8d:27:e4:
         c0:a3:17:90:1d:ab:6b:0a:56:7d:3c:4b:a8:29:c4:2e:8b:16:
         c8:3a:f1:8f:4e:b4:5a:66:43:b1:b4:ec:10:96:d6:b9:8a:60:
         fe:96:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org