Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/34352e3233392e342e302f32322d3234203d3e20323638333439.roa
File:                     34352e3233392e342e302f32322d3234203d3e20323638333439.roa (raw, json)
Hash identifier:          36uGdnlW31gdTE5aK06/YYU+cxHZPh+dC38K7rdFhoA=
Subject key identifier:   E9:BD:13:D5:20:01:EF:AB:7D:02:B1:90:C8:C5:16:84:30:4E:A5:BB
Certificate issuer:       /CN=CB7A76C2666109A977B1A4CC005601156FA43A1A
Certificate serial:       62C197B12F5341BD80069161FBE79E283D2BE61A
Authority key identifier: CB:7A:76:C2:66:61:09:A9:77:B1:A4:CC:00:56:01:15:6F:A4:3A:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB7A76C2666109A977B1A4CC005601156FA43A1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/34352e3233392e342e302f32322d3234203d3e20323638333439.roa
Signing time:             Tue 31 Jan 2023 15:11:39 +0000
ROA not before:           Tue 31 Jan 2023 15:06:39 +0000
ROA not after:            Tue 30 Jan 2024 15:11:39 +0000
asID:                     268349
IP address blocks:        45.239.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c1:97:b1:2f:53:41:bd:80:06:91:61:fb:e7:9e:28:3d:2b:e6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB7A76C2666109A977B1A4CC005601156FA43A1A
        Validity
            Not Before: Jan 31 15:06:39 2023 GMT
            Not After : Jan 30 15:11:39 2024 GMT
        Subject: CN=E9BD13D52001EFAB7D02B190C8C51684304EA5BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:ed:49:a2:59:d7:b7:f8:bc:d1:7c:14:f8:
                    95:36:9a:da:cc:87:60:83:f8:3c:b5:47:22:41:7a:
                    4d:e0:f1:67:a6:18:7b:db:f6:36:28:12:a8:86:ba:
                    38:2c:e6:7e:64:da:3e:62:cb:99:3f:ee:56:56:78:
                    b4:95:39:b6:33:b8:d0:94:c2:f1:6e:d1:4a:6a:9c:
                    a6:d0:62:0f:ab:17:61:a8:2a:94:f3:2d:17:ff:13:
                    d2:27:7c:26:e6:cb:a0:fe:d2:de:79:41:a4:01:1a:
                    8b:22:41:9c:44:d0:88:a1:21:8f:f1:c1:72:63:37:
                    a6:8f:91:63:91:66:66:8f:21:d1:7f:53:64:43:b1:
                    a9:ad:1c:80:55:6d:22:61:6c:a6:fb:54:5f:ad:68:
                    a1:c4:73:10:cc:f9:82:98:e1:d0:f2:64:63:9d:ee:
                    75:03:9d:f1:9c:a7:b3:95:5a:70:5c:9d:6a:11:16:
                    06:e5:6f:f8:0a:8d:40:bc:f1:81:2c:4a:ee:15:02:
                    2b:1d:cc:0d:e3:e3:e0:df:a2:69:80:7f:96:cf:58:
                    d7:f4:99:9a:5d:ec:7e:68:02:51:99:4e:03:6d:24:
                    6a:49:91:26:7c:7e:22:3f:d5:bf:2e:4e:1c:f1:b2:
                    0f:23:49:bd:8f:56:73:24:4d:0a:12:ce:40:d5:f4:
                    47:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BD:13:D5:20:01:EF:AB:7D:02:B1:90:C8:C5:16:84:30:4E:A5:BB
            X509v3 Authority Key Identifier:
                keyid:CB:7A:76:C2:66:61:09:A9:77:B1:A4:CC:00:56:01:15:6F:A4:3A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/CB7A76C2666109A977B1A4CC005601156FA43A1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB7A76C2666109A977B1A4CC005601156FA43A1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/34352e3233392e342e302f32322d3234203d3e20323638333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:64:99:a5:28:1b:04:3e:e2:71:2e:f7:62:81:3a:40:a9:30:
         15:a0:2e:9d:b3:c6:9e:58:67:01:58:3e:08:88:ca:ed:54:0f:
         1a:50:73:eb:15:a5:f1:c1:72:c4:6f:0b:da:4f:04:a1:2b:15:
         69:87:3e:29:7a:6a:0f:bc:c0:86:ae:43:71:9d:0e:b4:16:15:
         3a:55:26:3c:52:fd:ed:1e:df:13:0f:37:a1:3d:52:19:d6:6e:
         94:8b:2c:95:35:40:c4:03:58:d5:10:88:c4:a5:61:c3:65:41:
         57:fb:d5:cd:98:94:9b:23:e0:72:64:c1:7a:5a:d5:73:06:cb:
         83:6b:93:e0:a7:13:bc:34:e4:07:6f:30:ff:7e:26:9e:c3:a8:
         bf:a9:c0:51:ed:45:1b:48:93:e0:d3:7e:7b:04:a6:99:49:23:
         df:93:ce:8f:65:3a:66:29:e2:ea:e0:64:20:c9:74:da:1a:ff:
         2f:76:34:1e:7f:85:dd:95:0a:59:d6:73:86:b3:62:64:c1:0b:
         14:4f:d5:63:8d:a0:16:80:4f:97:6c:89:e0:85:ef:6d:ed:82:
         0f:eb:35:55:3e:dd:e4:de:86:fb:44:ea:08:b4:b1:df:5d:70:
         9e:9b:2b:a8:05:13:8d:a7:f3:a7:e4:44:50:f6:39:05:ca:25:
         e9:99:44:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org