Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/34352e3233322e3133382e302f32342d3234203d3e20323637333231.roa
File:                     34352e3233322e3133382e302f32342d3234203d3e20323637333231.roa (raw, json)
Hash identifier:          rS1/+GkEzG0EgIxbSpq653GULkQQcMf7eCoRVB+BkYU=
Subject key identifier:   57:4B:BD:F8:87:1E:F8:9B:E4:48:1F:79:85:32:08:65:82:8F:BA:9B
Certificate issuer:       /CN=579DF23540432B30BFE18FA378AD1C45E5ED6034
Certificate serial:       1B2207E395A23ADF6B46EC7F22CCE8A9542EC3CE
Authority key identifier: 57:9D:F2:35:40:43:2B:30:BF:E1:8F:A3:78:AD:1C:45:E5:ED:60:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/579DF23540432B30BFE18FA378AD1C45E5ED6034.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/34352e3233322e3133382e302f32342d3234203d3e20323637333231.roa
Signing time:             Sat 09 Sep 2023 19:46:35 +0000
ROA not before:           Sat 09 Sep 2023 19:41:35 +0000
ROA not after:            Sat 07 Sep 2024 19:46:35 +0000
asID:                     267321
IP address blocks:        45.232.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:22:07:e3:95:a2:3a:df:6b:46:ec:7f:22:cc:e8:a9:54:2e:c3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579DF23540432B30BFE18FA378AD1C45E5ED6034
        Validity
            Not Before: Sep  9 19:41:35 2023 GMT
            Not After : Sep  7 19:46:35 2024 GMT
        Subject: CN=574BBDF8871EF89BE4481F7985320865828FBA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:d0:1a:3c:b8:a9:94:d9:50:a9:2f:41:c1:
                    c3:44:e8:25:cc:e2:56:cd:a9:32:b8:64:03:9a:57:
                    dd:9f:be:29:b2:41:5b:99:e5:8e:1c:cf:05:39:c5:
                    75:4c:76:ea:3c:59:11:00:ab:8b:89:22:89:52:49:
                    64:f6:e5:39:94:a7:31:ca:76:0d:98:f8:a1:e8:f9:
                    e6:f3:91:e9:14:66:07:26:68:f6:80:c4:24:96:8f:
                    70:37:69:46:b8:35:bb:d1:f9:8f:59:44:2b:b9:81:
                    aa:4d:d6:01:c8:25:a1:22:c5:46:38:19:74:c7:55:
                    c7:46:fe:ca:7c:a0:56:6e:78:5e:92:28:ac:3b:f7:
                    83:3b:96:9e:06:19:6f:47:40:a6:3e:9d:29:d5:f1:
                    b6:cb:25:cc:07:7b:59:4d:da:3b:38:88:ce:3d:c4:
                    a1:b4:3b:c0:c5:90:37:c0:81:59:08:bb:de:a7:4c:
                    49:cd:d5:2c:c8:a7:85:51:c6:c8:af:ad:0d:5e:18:
                    76:8e:d3:1e:f9:4b:79:8e:3f:5a:fe:76:f2:1a:7e:
                    b8:e2:e8:1c:2f:af:de:c0:07:56:60:2f:c0:f9:e1:
                    4d:80:66:e2:13:cb:7d:85:4e:c5:ac:d9:88:ab:17:
                    4c:01:58:53:c8:f4:b2:aa:b3:c0:61:52:a9:c3:f3:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4B:BD:F8:87:1E:F8:9B:E4:48:1F:79:85:32:08:65:82:8F:BA:9B
            X509v3 Authority Key Identifier:
                keyid:57:9D:F2:35:40:43:2B:30:BF:E1:8F:A3:78:AD:1C:45:E5:ED:60:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/579DF23540432B30BFE18FA378AD1C45E5ED6034.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/579DF23540432B30BFE18FA378AD1C45E5ED6034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/34352e3233322e3133382e302f32342d3234203d3e20323637333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ad:3c:5d:c7:88:bc:24:51:dd:61:b6:ca:fc:89:0a:5b:68:
         b6:83:46:91:fe:7d:29:5a:fc:b8:f7:d3:40:73:8d:04:7c:4b:
         50:00:3b:d5:71:6c:21:c6:83:04:85:f9:1e:71:8a:cb:c0:18:
         a9:2a:6d:72:e0:43:18:7d:16:37:62:df:1e:c5:bf:24:77:25:
         7a:b3:f5:53:94:2d:b4:33:1b:ed:9f:44:16:3e:b8:97:eb:9d:
         d2:22:f0:c2:23:59:05:96:63:36:47:ab:fa:be:f3:6c:6c:5b:
         20:6f:20:51:1c:8c:49:e6:4e:81:56:58:0b:a1:64:39:4c:d4:
         62:0a:96:bf:95:fa:89:bd:8c:97:1f:28:3a:85:a6:f1:5b:dd:
         29:40:b5:78:6d:a8:a4:3b:ab:89:ea:7f:28:d0:c4:db:7c:9c:
         a7:22:5b:ad:a9:3b:fd:d0:68:94:b1:f6:d4:53:07:0c:f7:36:
         b4:dd:0f:3d:9d:a9:d1:c3:7f:59:43:75:2e:29:da:cd:79:9d:
         63:2f:d2:5d:12:ec:b7:ba:a6:56:18:dd:78:f5:e3:4d:67:c7:
         e5:72:db:46:0d:23:94:4a:3d:c4:ba:93:c8:58:c1:de:05:25:
         57:97:75:2c:86:ce:55:79:9a:3a:21:47:51:71:88:7d:05:c9:
         66:3a:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org