Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233342e302f32332d3234203d3e20323731363536.roa
File:                     34352e3138362e3233342e302f32332d3234203d3e20323731363536.roa (raw, json)
Hash identifier:          Q1GhAnO/kV7ysDnd+VfOMEGinsL5VwCZXcuW+BRtF7Y=
Subject key identifier:   78:82:22:D5:F2:6B:9C:F2:1A:A7:08:E5:DC:54:90:E7:44:22:47:E0
Certificate issuer:       /CN=8D24ABD2CD282876D19E9E8E10198ACD520BC95C
Certificate serial:       4E86FCD02150E2EF37A0670F69BFE3FC23041A35
Authority key identifier: 8D:24:AB:D2:CD:28:28:76:D1:9E:9E:8E:10:19:8A:CD:52:0B:C9:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233342e302f32332d3234203d3e20323731363536.roa
Signing time:             Thu 15 Feb 2024 20:44:00 +0000
ROA not before:           Thu 15 Feb 2024 20:39:00 +0000
ROA not after:            Thu 13 Feb 2025 20:44:00 +0000
asID:                     271656
IP address blocks:        45.186.234.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:86:fc:d0:21:50:e2:ef:37:a0:67:0f:69:bf:e3:fc:23:04:1a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D24ABD2CD282876D19E9E8E10198ACD520BC95C
        Validity
            Not Before: Feb 15 20:39:00 2024 GMT
            Not After : Feb 13 20:44:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:37:7c:6a:3d:9a:5a:f2:17:94:26:e7:33:
                    6f:d8:49:d3:5d:e3:d2:e7:05:56:32:ca:cf:4b:dd:
                    94:46:71:2f:83:0c:a4:a6:6d:c0:c1:89:a9:ff:57:
                    a1:31:ad:a3:cb:61:48:71:7c:b7:52:4f:a9:8c:22:
                    f7:7b:b5:17:2d:db:ec:ee:58:0d:8e:67:44:85:bb:
                    17:e2:55:68:7c:14:bb:ef:e8:15:b0:bb:3a:eb:f0:
                    89:11:57:c3:a9:a8:3c:ba:04:73:44:84:04:49:2b:
                    f7:bb:d8:9e:34:77:99:f2:36:10:c3:d1:f0:b1:9f:
                    cf:b1:cf:ee:a8:30:35:c8:ae:68:f2:bc:09:54:75:
                    a6:16:25:d2:d3:2d:62:30:d7:2a:f6:9b:56:fa:ce:
                    93:a4:df:e3:8b:50:1a:cb:ad:ce:db:85:41:10:0d:
                    8d:a8:7b:3b:93:6a:e0:5f:fa:94:c3:93:2a:e9:f5:
                    e5:a7:3f:ff:d8:1a:b6:35:f9:af:af:22:ab:a4:1c:
                    0e:29:d4:b8:cc:fc:a7:e7:d3:4d:42:f5:2b:18:50:
                    31:26:88:6d:c5:49:ac:ab:83:11:2d:ef:a1:a9:8a:
                    e7:c3:f4:88:e2:f1:d6:85:4e:c2:1d:e0:c3:3a:b4:
                    27:4b:52:cf:ed:f6:60:b9:31:bd:10:94:d5:54:0a:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:82:22:D5:F2:6B:9C:F2:1A:A7:08:E5:DC:54:90:E7:44:22:47:E0
            X509v3 Authority Key Identifier:
                keyid:8D:24:AB:D2:CD:28:28:76:D1:9E:9E:8E:10:19:8A:CD:52:0B:C9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233342e302f32332d3234203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:b4:f8:35:97:f3:f3:5d:8c:bc:45:70:cb:a8:e3:f9:6c:2f:
         32:26:d4:59:12:fc:0a:fd:e8:2c:e2:7b:3c:05:f8:6b:fd:f6:
         c2:d0:d0:91:f4:7a:9f:e0:04:3d:8f:a8:b6:29:85:08:e1:c1:
         b6:ea:7b:97:6f:2e:11:58:ff:8c:f5:3c:70:29:7f:1d:92:78:
         10:00:98:22:6b:df:62:17:41:48:9c:8c:d2:fd:3b:be:b7:4a:
         83:16:7e:4e:fa:e6:10:99:cb:12:7f:31:d6:f7:e2:20:c0:c8:
         4f:41:4c:2e:5a:0d:b8:fb:98:bf:de:68:0d:d6:7d:d4:18:1a:
         0c:40:a0:3e:39:f2:51:87:f2:47:b5:a2:04:6a:8d:e0:12:4d:
         1d:cc:c3:76:f5:c0:de:49:e1:53:2e:d8:79:d3:14:28:7c:9c:
         10:db:d5:c3:3e:77:ab:3a:06:53:7b:0a:d8:f3:b9:43:72:f6:
         21:78:99:dc:b9:4d:91:62:cf:ee:e9:20:18:a6:6f:31:e7:47:
         1f:f4:63:ea:39:5c:81:7f:d4:12:07:a6:f5:61:ad:b7:f2:67:
         4c:55:23:83:ff:56:ba:19:ed:d0:00:bc:82:ae:dc:a2:59:a0:
         59:c0:2a:55:70:e3:ec:4d:ce:79:ec:0f:f3:32:c8:b0:b0:3a:
         88:53:6f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org