Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32342d3234203d3e20323638383432.roa
File:                     34352e3137342e34302e302f32342d3234203d3e20323638383432.roa (raw, json)
Hash identifier:          R/5m/8b4XztuBx36Q1ADC11eC95KiBsj3jMb9cHF79k=
Subject key identifier:   C3:79:B3:F8:15:19:94:3A:83:06:56:53:D5:D8:4E:0C:FF:C9:CF:0D
Certificate issuer:       /CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
Certificate serial:       71E0381FD20FA131FFEBDFEFC5E1BDA3048B2E70
Authority key identifier: B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32342d3234203d3e20323638383432.roa
Signing time:             Wed 20 Jul 2022 15:51:17 +0000
ROA not before:           Wed 20 Jul 2022 15:46:17 +0000
ROA not after:            Wed 19 Jul 2023 15:51:17 +0000
asID:                     268842
IP address blocks:        45.174.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e0:38:1f:d2:0f:a1:31:ff:eb:df:ef:c5:e1:bd:a3:04:8b:2e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
        Validity
            Not Before: Jul 20 15:46:17 2022 GMT
            Not After : Jul 19 15:51:17 2023 GMT
        Subject: CN=C379B3F81519943A83065653D5D84E0CFFC9CF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:20:59:23:3f:7c:27:39:3a:33:a4:ff:aa:
                    af:b4:57:d6:27:7e:81:c5:c8:b1:15:66:e5:c8:47:
                    8e:f2:a8:f0:63:12:40:c0:39:0d:6b:5a:a9:34:11:
                    9e:dc:86:64:79:a4:81:80:6c:5a:c8:9f:0e:a3:db:
                    4f:93:7c:67:88:8e:7e:82:a1:d6:19:23:8f:eb:5a:
                    30:2a:fe:0f:09:9d:01:9d:46:0a:0d:15:d3:8b:d2:
                    58:b5:af:2d:4b:74:87:dd:4c:52:e5:2b:fd:6b:cc:
                    5f:6b:73:ea:14:5d:9e:ce:27:ce:f9:36:b6:9f:c6:
                    6e:b0:cd:4c:cb:50:50:e5:0d:1b:54:39:c2:34:3c:
                    4c:a3:de:43:db:4f:32:f6:99:cd:7d:44:2a:04:cb:
                    8c:e2:97:5a:64:af:7c:6a:6b:32:aa:e5:65:11:79:
                    ef:b6:b5:dc:76:61:ed:a7:cd:d8:53:a0:9a:fd:06:
                    06:01:7b:44:d8:a2:4a:88:4e:58:4e:62:b0:7d:8b:
                    75:5d:df:e2:11:1f:5e:2e:72:11:76:cb:5e:b2:9e:
                    c9:13:20:4a:10:25:f3:01:70:a6:05:1e:18:4f:92:
                    b2:b8:c5:79:d1:df:37:28:7b:41:57:2c:18:19:6a:
                    d5:a8:eb:48:f0:5c:70:81:75:f2:d7:d1:4e:29:5c:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:79:B3:F8:15:19:94:3A:83:06:56:53:D5:D8:4E:0C:FF:C9:CF:0D
            X509v3 Authority Key Identifier:
                keyid:B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32342d3234203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f6:fe:e7:f1:3e:ab:d7:1a:bc:43:c0:3f:20:02:fd:74:9f:
         b3:71:6e:5a:e5:07:f9:c3:de:4c:78:2e:28:de:37:00:b5:3a:
         2c:42:9f:60:2d:77:89:30:6b:a8:a6:c1:7d:4e:2e:03:6a:3f:
         33:f5:1f:c1:68:77:45:cf:52:cf:a7:77:dd:fd:d7:07:b2:ee:
         ae:5a:db:17:cb:89:98:82:a0:65:00:df:2a:5f:15:c4:96:f7:
         12:e1:2c:19:4a:41:0b:25:88:97:7a:ed:5a:78:93:bc:ee:2f:
         65:32:a9:f9:00:8f:d7:2a:6e:e0:4b:c7:4f:47:c9:81:f5:d4:
         c3:7a:38:64:5b:63:6a:a1:29:2a:e3:18:7d:bd:a0:ce:c8:1c:
         06:3b:45:de:41:e1:0c:1b:61:ff:11:78:32:4d:d0:a2:92:2e:
         c6:ad:95:92:64:b0:0b:59:fa:ae:0c:1e:b3:48:e0:01:2b:a2:
         b5:41:b8:27:7c:27:0a:56:4a:52:a0:b5:f2:6b:65:c7:c7:67:
         de:4f:fe:8e:c4:a0:c3:d3:d5:5b:e5:a4:5e:2d:06:62:71:98:
         ef:d8:7d:82:b6:db:f6:7d:64:c5:ad:81:36:92:1a:5b:56:20:
         11:ae:9d:b4:c0:66:a5:8d:1c:c5:fd:79:cf:33:8d:08:b2:b0:
         04:bd:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org