Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32312e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          e/E1Y72LCg6w/OcgiG5XA7tkD+OtPDENCx48SEX/tIk=
Subject key identifier:   34:09:74:92:0A:DB:65:64:28:16:7C:3A:BF:44:F2:A3:6B:08:E6:37
Certificate issuer:       /CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
Certificate serial:       1041E4DBC5F46167DD125F9CBBEBB6F22F6FB6F9
Authority key identifier: D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa
Signing time:             Thu 22 Feb 2024 07:05:57 +0000
ROA not before:           Thu 22 Feb 2024 07:00:57 +0000
ROA not after:            Thu 20 Feb 2025 07:05:57 +0000
asID:                     267091
IP address blocks:        45.229.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:41:e4:db:c5:f4:61:67:dd:12:5f:9c:bb:eb:b6:f2:2f:6f:b6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
        Validity
            Not Before: Feb 22 07:00:57 2024 GMT
            Not After : Feb 20 07:05:57 2025 GMT
        Subject: CN=340974920ADB656428167C3ABF44F2A36B08E637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:8a:07:35:69:37:e2:47:9d:79:76:56:85:
                    67:3a:5c:2e:14:a1:18:76:96:86:c8:6a:ae:37:d9:
                    9e:86:aa:9e:a0:73:de:d6:18:79:9a:23:1d:70:68:
                    bc:80:b1:dd:d2:a7:03:d2:be:dd:0a:ec:01:56:02:
                    d0:25:32:a6:7c:09:78:e6:0a:d8:c9:d9:81:2b:48:
                    fc:1c:20:16:0a:36:9b:bf:e1:26:3c:ec:17:82:03:
                    4f:a9:42:e4:c7:24:27:2d:11:8c:8d:aa:2a:ff:b9:
                    72:0f:bf:f2:83:b9:89:8c:fd:6b:7a:44:4d:32:29:
                    db:b3:74:8e:f9:71:bc:6f:c3:a6:29:b8:3c:aa:ef:
                    0d:1e:29:b4:1f:70:d2:a3:44:73:c9:00:0c:99:58:
                    ac:37:ea:55:7b:c4:6b:23:14:4b:42:d7:cc:fb:99:
                    42:de:7c:8c:3a:09:d2:1f:f1:7f:57:0c:a6:88:50:
                    40:78:91:77:e3:9f:e0:a5:b4:03:f0:49:6c:5a:a0:
                    b7:38:be:a6:76:d5:99:75:8b:4b:ca:04:e7:2c:a5:
                    68:42:21:d2:43:be:70:ff:63:f8:bc:19:a4:21:dd:
                    24:7a:ba:4a:91:30:aa:84:0a:9f:8e:43:22:d8:2a:
                    d9:4b:62:e9:33:59:2d:21:6d:d4:a5:b1:5a:00:ba:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:09:74:92:0A:DB:65:64:28:16:7C:3A:BF:44:F2:A3:6B:08:E6:37
            X509v3 Authority Key Identifier:
                keyid:D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:12:3b:0b:01:5a:1f:05:f8:41:36:d3:60:c7:eb:e0:2d:e6:
         16:c6:e5:77:33:49:e2:de:d2:f0:e6:8f:88:99:f8:d8:0c:b8:
         f1:c8:49:8d:4e:75:6a:31:24:d5:7b:41:02:dd:ed:2b:00:74:
         7b:b7:af:db:4d:01:0d:6b:e3:9d:b6:a8:aa:bd:37:f2:06:e3:
         1f:4a:f9:b6:74:a9:fb:3f:b5:23:b1:d0:62:f5:6e:77:e7:e9:
         55:29:d8:94:01:6b:ad:eb:58:fb:85:4c:f4:24:d2:b5:9f:12:
         2b:ca:07:21:65:a3:fd:2c:36:ba:d3:ac:6e:ad:e3:3e:16:83:
         ab:2b:80:a4:d4:36:09:db:77:d4:d6:13:0c:c9:fe:1c:fe:7b:
         2f:f7:a6:c9:6c:dc:9d:f9:66:5e:af:52:30:47:cc:41:71:1e:
         c9:29:de:4d:3f:ec:ce:80:a0:37:74:fd:f8:c9:5d:7e:56:84:
         f3:d2:98:fa:e8:60:1e:ac:fd:a9:3c:12:38:0d:b9:7a:07:66:
         67:f8:bf:26:2e:97:e8:3f:3b:49:38:1f:8d:53:d1:b2:7e:33:
         82:2d:83:dd:8c:9a:b9:8f:ef:d3:68:3d:bb:ab:4a:48:98:aa:
         38:8c:fb:51:c8:54:99:82:12:18:01:7d:6f:1e:e9:11:61:a9:
         34:82:49:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org