Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34312e302f32342d3234203d3e20323636303534.roa
File:                     34352e342e34312e302f32342d3234203d3e20323636303534.roa (raw, json)
Hash identifier:          9zt1sUG+T5NoGRIasd76RYLF+gP9dzJjxJRbBeAlk5g=
Subject key identifier:   CE:8D:F2:0F:B2:A4:1D:74:B2:4D:83:7B:D2:6A:CD:6E:38:17:AB:68
Certificate issuer:       /CN=DBF158771926EFB8CA7EEE542CF98F947B92A763
Certificate serial:       28ACECEEAAE5D4D59DC456168695D0CA8B82EAF6
Authority key identifier: DB:F1:58:77:19:26:EF:B8:CA:7E:EE:54:2C:F9:8F:94:7B:92:A7:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBF158771926EFB8CA7EEE542CF98F947B92A763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34312e302f32342d3234203d3e20323636303534.roa
Signing time:             Fri 23 Aug 2024 20:04:42 +0000
ROA not before:           Fri 23 Aug 2024 19:59:42 +0000
ROA not after:            Fri 22 Aug 2025 20:04:42 +0000
asID:                     266054
IP address blocks:        45.4.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ac:ec:ee:aa:e5:d4:d5:9d:c4:56:16:86:95:d0:ca:8b:82:ea:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBF158771926EFB8CA7EEE542CF98F947B92A763
        Validity
            Not Before: Aug 23 19:59:42 2024 GMT
            Not After : Aug 22 20:04:42 2025 GMT
        Subject: CN=CE8DF20FB2A41D74B24D837BD26ACD6E3817AB68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:6d:40:8b:c0:94:2a:c4:ff:60:c6:6a:ec:
                    e2:ac:2a:83:68:6f:39:64:ad:55:c4:ed:63:a6:07:
                    d7:09:b8:78:6c:67:7c:b7:b8:28:4f:0b:5f:c2:03:
                    07:a5:71:9e:d0:58:31:52:0e:15:ae:23:d4:22:da:
                    8b:72:1e:d4:f4:22:14:02:69:0d:1c:d8:31:34:04:
                    54:b8:f8:36:19:3a:bf:db:e5:81:2a:a8:31:4c:db:
                    45:84:5e:9a:10:6e:e4:73:ce:c0:d9:cf:95:02:a4:
                    e0:a3:7f:23:2b:5c:10:12:08:d6:15:8b:4c:92:28:
                    92:c8:63:77:7f:c6:cf:18:cb:74:76:05:c4:f4:5c:
                    a6:78:9a:2f:15:ec:31:35:ca:56:d3:73:98:e3:b1:
                    a2:46:a0:d7:35:1f:2e:16:27:e9:6b:38:a8:6f:38:
                    e3:18:35:dd:bc:8e:75:51:69:c6:6f:ad:b5:3b:2c:
                    44:aa:f1:2d:d1:15:53:77:4e:f9:d2:75:c0:77:7a:
                    99:cc:04:0c:db:b9:ba:60:55:79:f9:7d:10:78:91:
                    54:fe:5d:18:7f:e6:bb:4d:62:55:fd:fb:8a:8a:31:
                    79:10:34:df:e6:8a:9e:ab:1d:9b:06:d5:31:ea:5c:
                    ae:d9:00:54:1b:12:d2:6c:bd:02:df:11:32:98:b2:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8D:F2:0F:B2:A4:1D:74:B2:4D:83:7B:D2:6A:CD:6E:38:17:AB:68
            X509v3 Authority Key Identifier:
                keyid:DB:F1:58:77:19:26:EF:B8:CA:7E:EE:54:2C:F9:8F:94:7B:92:A7:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/DBF158771926EFB8CA7EEE542CF98F947B92A763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBF158771926EFB8CA7EEE542CF98F947B92A763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34312e302f32342d3234203d3e20323636303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:ff:62:e0:1a:ae:5d:d0:fe:bd:4a:43:ef:cf:96:32:e6:
         c3:b5:e2:ec:51:c8:35:bf:72:b1:28:99:eb:ea:99:52:96:85:
         02:85:a0:9c:b7:71:51:e5:5c:5a:21:e8:5c:fa:54:75:c5:84:
         a2:46:8b:7f:b3:75:45:f1:72:af:ff:a1:3e:7b:18:ae:b2:aa:
         8f:08:49:0f:e6:d9:48:38:05:bc:07:fc:3f:4c:de:1a:e3:ad:
         c3:19:d0:5f:41:b8:50:09:3c:7b:53:57:82:0a:4b:24:ef:49:
         db:61:f9:4d:65:3c:04:cc:af:5a:ed:d1:f1:10:1e:a7:94:06:
         85:d9:4d:26:6d:b5:e7:c7:a2:72:85:ee:7e:d9:b4:cb:0d:d1:
         32:88:32:03:59:3e:24:ff:cc:4c:4c:b2:0f:c5:d6:c8:12:c3:
         a6:56:80:50:6c:f7:e9:ef:80:74:df:e0:8c:37:1e:a2:85:35:
         e4:26:6a:26:6b:01:92:3d:5c:71:a1:92:2e:a4:c2:c4:2a:3b:
         a6:23:ff:8b:e2:b6:18:59:dc:b3:40:52:7d:01:61:2f:5e:3b:
         02:ce:bd:d3:37:15:47:40:86:a3:6b:7b:10:84:9f:08:40:40:
         34:11:2b:52:16:d0:3e:6c:09:69:00:68:73:ae:67:de:a4:53:
         06:ba:4b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 23:40:49 2024 by rpki-client on console-ams.rpki-client.org