Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/34352e3232392e3233342e302f32342d3234203d3e20323637313336.roa
File:                     34352e3232392e3233342e302f32342d3234203d3e20323637313336.roa (raw, json)
Hash identifier:          QF46Hsq7mdYGopWfs07F5WVaOmpy3q07Ld51g1JL5BU=
Subject key identifier:   5E:2C:8A:8F:84:AD:E4:B1:83:8F:FE:3A:B7:11:39:E1:88:63:E4:0C
Certificate issuer:       /CN=2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51
Certificate serial:       4C8AA3FD6216A6CF5AEB906984E0A5F218DB9D6D
Authority key identifier: 2A:5D:4D:DF:4F:A4:1D:02:0B:22:B8:CD:6A:CF:66:FB:AB:A3:1A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/34352e3232392e3233342e302f32342d3234203d3e20323637313336.roa
Signing time:             Sun 27 Aug 2023 15:46:36 +0000
ROA not before:           Sun 27 Aug 2023 15:41:36 +0000
ROA not after:            Sun 25 Aug 2024 15:46:36 +0000
asID:                     267136
IP address blocks:        45.229.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8a:a3:fd:62:16:a6:cf:5a:eb:90:69:84:e0:a5:f2:18:db:9d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51
        Validity
            Not Before: Aug 27 15:41:36 2023 GMT
            Not After : Aug 25 15:46:36 2024 GMT
        Subject: CN=5E2C8A8F84ADE4B1838FFE3AB71139E18863E40C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:34:87:4c:1f:68:9f:03:12:b3:e4:97:65:
                    78:32:0c:6d:bc:44:d1:7f:d8:32:19:4a:65:65:93:
                    b4:a7:32:7e:e4:5b:46:31:c9:73:50:5e:73:19:4f:
                    6f:82:8f:7e:21:bb:85:f8:87:3d:8e:e3:70:f0:89:
                    3b:28:57:65:1b:56:93:29:e0:25:f6:e2:60:e5:02:
                    45:85:4d:0a:6f:e9:47:d7:42:f0:44:31:1a:1b:aa:
                    7b:ab:47:25:c5:07:3c:23:39:eb:a8:0c:96:cf:b2:
                    1f:d7:60:07:08:7c:72:35:2c:b0:68:bb:a1:91:f0:
                    bb:8c:8f:14:84:18:7e:fe:82:d1:e5:43:af:a0:00:
                    eb:12:f7:74:3a:ac:37:21:29:05:09:67:f0:98:7d:
                    e1:f2:1d:57:29:b2:3a:29:98:21:92:fb:b6:e1:66:
                    06:07:50:db:15:b6:2c:92:5c:1b:b5:b2:46:6b:25:
                    53:a3:21:9c:64:cd:59:69:42:c4:d9:b8:8c:c2:be:
                    b0:95:5a:36:94:55:04:47:fc:ea:4f:42:4b:ba:33:
                    5a:14:2e:e1:ab:02:10:b0:18:d7:b3:3f:ee:aa:0c:
                    9f:75:82:bb:ec:8e:bd:b8:d2:75:03:97:6d:54:37:
                    2b:e3:58:d8:99:a7:3a:7a:48:ae:50:46:f7:5d:1c:
                    c3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:8A:8F:84:AD:E4:B1:83:8F:FE:3A:B7:11:39:E1:88:63:E4:0C
            X509v3 Authority Key Identifier:
                keyid:2A:5D:4D:DF:4F:A4:1D:02:0B:22:B8:CD:6A:CF:66:FB:AB:A3:1A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/34352e3232392e3233342e302f32342d3234203d3e20323637313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b9:a8:02:45:45:c4:6e:5a:e9:c4:1f:81:d2:90:1b:9e:c1:
         4b:08:ba:26:e1:21:e2:9a:8a:79:c5:31:98:14:f2:95:6e:9d:
         9a:f5:67:9d:ff:b4:83:a2:c0:8e:38:66:1c:b0:0e:0b:81:39:
         8d:fe:75:90:87:c8:5b:6a:e5:36:20:04:a2:2f:95:52:62:c7:
         cb:bf:4c:18:71:fa:f1:d0:06:c2:84:be:ee:e9:dd:9f:5d:36:
         6e:47:95:5b:d2:a7:eb:ec:b4:d8:24:24:6a:62:95:e4:68:21:
         6c:92:5f:fe:b9:b8:7d:ee:54:2d:71:25:e9:be:73:d5:0f:71:
         22:f8:fb:e2:b5:3d:65:2e:b3:12:b8:0b:6a:79:99:cf:e0:8d:
         51:25:58:23:ca:39:10:7a:7a:d1:a2:33:e1:74:6e:1e:2d:f8:
         a6:b3:d5:96:e0:e4:e4:68:b8:17:c7:fe:85:86:1a:9f:c8:cf:
         8a:77:9f:43:8d:0c:d4:82:fc:4b:aa:db:79:5a:6c:2a:94:d7:
         9b:a0:98:57:e7:1e:ff:e0:1a:e5:f5:11:b3:e5:7c:e2:1f:b2:
         b9:a8:83:05:06:71:27:df:f0:a5:c2:f8:d1:0e:94:c3:c6:49:
         78:02:96:2a:22:4f:be:f9:d6:3d:88:df:cf:33:ba:7d:a5:ed:
         5c:50:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org