Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134322e302f32342d3234203d3e20323638393434.roa
File:                     34352e3137362e3134322e302f32342d3234203d3e20323638393434.roa (raw, json)
Hash identifier:          +EkJfNXDRxPR5t3dP/yUFK7SYdQMjI3WmpsTCbmNTmw=
Subject key identifier:   B1:38:EC:EE:27:0C:56:A1:C6:58:94:73:F3:C3:04:E0:14:A4:E8:83
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       1A25C14EE9A779B8CB4E45E9FCB7DDFF640F5D5A
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134322e302f32342d3234203d3e20323638393434.roa
Signing time:             Mon 24 Jul 2023 17:48:58 +0000
ROA not before:           Mon 24 Jul 2023 17:43:58 +0000
ROA not after:            Mon 22 Jul 2024 17:48:58 +0000
asID:                     268944
IP address blocks:        45.176.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:25:c1:4e:e9:a7:79:b8:cb:4e:45:e9:fc:b7:dd:ff:64:0f:5d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: Jul 24 17:43:58 2023 GMT
            Not After : Jul 22 17:48:58 2024 GMT
        Subject: CN=B138ECEE270C56A1C6589473F3C304E014A4E883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:01:77:a3:ea:30:7d:0b:75:79:d4:96:be:
                    e5:f6:39:bf:e5:77:bf:83:77:b9:3c:00:62:e7:c8:
                    36:78:5a:b6:20:d9:d6:c6:02:c2:6d:f2:b5:a6:c1:
                    b8:71:1f:1d:c5:62:79:bc:d2:c4:16:80:02:13:8e:
                    e9:25:b1:69:c3:21:aa:08:33:92:3f:f7:0a:cd:f8:
                    36:0e:57:a5:f1:e4:9a:28:ab:23:b8:49:c3:69:86:
                    a8:6f:32:57:ab:19:2d:b4:0b:ca:3e:59:66:52:d2:
                    3e:b4:30:70:00:f1:a4:5e:2d:72:7e:9e:99:e8:e3:
                    82:99:5b:6b:f6:ba:e4:2a:a4:02:7d:04:1c:f8:26:
                    ea:57:85:9a:9d:b8:36:e1:de:53:43:cc:d6:5a:cf:
                    5f:48:5e:e2:14:f3:2f:3b:58:14:28:26:b1:59:12:
                    b6:33:2a:cc:a2:07:47:4c:07:0f:13:54:63:e0:5a:
                    b1:f2:6f:b5:4b:01:de:8b:b0:ab:48:71:18:8e:11:
                    94:88:59:10:c7:2a:f5:7b:be:6d:c7:13:55:9f:14:
                    80:24:90:37:e1:df:6f:26:41:b2:01:37:60:1d:55:
                    bc:57:eb:85:10:5b:90:23:e6:1b:c7:ca:ae:22:5a:
                    4a:b2:a0:a3:64:38:9e:93:61:f8:8b:84:bc:7b:17:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:38:EC:EE:27:0C:56:A1:C6:58:94:73:F3:C3:04:E0:14:A4:E8:83
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134322e302f32342d3234203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:75:5a:df:93:6d:60:28:8f:01:e8:46:2f:4c:c9:02:8e:db:
         d2:1a:e4:a2:4b:d5:d9:c3:b0:19:5b:93:0c:9a:bf:8c:29:68:
         52:c2:e6:12:af:75:b8:6a:da:b8:bd:2b:cd:bb:0a:d9:99:85:
         13:df:09:d2:9e:ad:46:36:d5:d3:21:9c:a4:91:a8:2c:51:07:
         9e:d6:d5:21:b8:ca:02:a3:2a:39:1a:da:d2:d9:f9:8a:8b:40:
         6b:e8:47:a2:92:cc:2b:49:8c:8d:5d:37:06:ee:7c:a7:2c:a1:
         16:3f:13:72:fd:93:6f:2e:b9:32:88:6d:8c:f7:98:bd:c5:3e:
         0e:26:6e:28:2a:d5:d4:45:7c:84:d1:0c:0b:38:fc:62:7f:86:
         9c:60:95:b8:41:d1:95:68:1e:b9:a7:ee:37:0a:d7:d1:6f:0b:
         81:10:23:8c:0d:93:86:90:0d:e5:93:f6:cc:62:6a:3b:07:cf:
         1d:54:09:28:00:e7:a5:38:bd:25:c9:6b:e9:c4:68:33:9e:b8:
         18:4e:9a:58:2b:b9:76:80:ca:f1:7e:f7:e4:5b:18:11:62:d3:
         e0:1e:72:22:b3:ce:ad:6e:3f:fb:ed:87:f8:e2:5f:ce:cb:5d:
         b8:f4:3b:71:c7:21:4e:84:cd:12:31:eb:d4:24:08:09:5e:f7:
         e8:40:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org