Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33332e302f32342d3234203d3e20323638303438.roa
File:                     34352e3136382e33332e302f32342d3234203d3e20323638303438.roa (raw, json)
Hash identifier:          9zdG+2U6wzpoLAmmiO1h8dYfrRejcqYJZN5THJHOu5Q=
Subject key identifier:   15:D6:21:6E:4C:F7:3C:1B:E3:E7:55:6D:87:E3:67:D0:A1:06:B4:B5
Certificate issuer:       /CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
Certificate serial:       250CADEB2266116BFD3678DCFF4FD5D18F788DAD
Authority key identifier: 30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33332e302f32342d3234203d3e20323638303438.roa
Signing time:             Thu 02 Nov 2023 20:02:16 +0000
ROA not before:           Thu 02 Nov 2023 19:57:16 +0000
ROA not after:            Thu 31 Oct 2024 20:02:16 +0000
asID:                     268048
IP address blocks:        45.168.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0c:ad:eb:22:66:11:6b:fd:36:78:dc:ff:4f:d5:d1:8f:78:8d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
        Validity
            Not Before: Nov  2 19:57:16 2023 GMT
            Not After : Oct 31 20:02:16 2024 GMT
        Subject: CN=15D6216E4CF73C1BE3E7556D87E367D0A106B4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:54:e0:1b:f0:e9:f9:50:12:fb:8a:30:c8:
                    d0:2c:c8:10:70:0e:af:ce:e1:d8:de:08:e8:c0:d5:
                    d1:b8:5f:f1:1b:c6:07:74:95:3c:37:a3:e6:b3:38:
                    04:a4:a9:b4:68:b8:b1:fc:65:71:ca:0e:80:01:1b:
                    35:ae:94:f3:c2:dc:77:8d:d0:40:da:87:4d:01:f1:
                    55:55:3f:6f:3c:17:58:82:f0:6f:d3:bc:d8:47:23:
                    e6:0c:82:d6:4c:5e:93:69:29:9a:48:51:47:83:96:
                    0c:43:d8:cc:48:96:18:da:57:ca:bb:20:74:7b:e3:
                    f2:2f:21:b7:00:97:13:b6:65:a8:1e:d9:3c:a2:97:
                    1b:0b:27:7e:72:2f:0b:27:17:92:2b:80:99:88:ef:
                    c9:f6:d0:95:43:bb:56:6e:a9:fb:2c:83:35:e9:eb:
                    92:e5:44:81:c2:07:2d:5a:e6:0d:3a:96:8b:d2:7c:
                    52:ff:ad:74:80:ba:7a:fb:b8:76:49:ae:bc:ca:c9:
                    ba:1c:3d:14:71:d6:cc:d3:81:9d:27:31:0f:c2:9c:
                    d3:90:5b:55:37:87:39:a7:d3:af:9c:ba:71:11:aa:
                    9b:f7:c9:0b:8f:bd:1f:00:e9:7b:2d:70:5d:c3:e3:
                    ab:10:59:d1:dd:cd:a5:4a:85:4f:04:2c:58:60:94:
                    7a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D6:21:6E:4C:F7:3C:1B:E3:E7:55:6D:87:E3:67:D0:A1:06:B4:B5
            X509v3 Authority Key Identifier:
                keyid:30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33332e302f32342d3234203d3e20323638303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:6e:0e:b4:f6:42:2e:00:40:4f:f0:d4:e2:21:09:c9:2c:9f:
         e7:33:b1:24:06:27:5d:ff:40:cd:6d:3c:b3:43:39:df:21:0a:
         dd:f5:94:67:9c:5f:81:fc:91:68:5e:39:61:d6:8e:13:8c:ab:
         d8:d7:39:28:c4:32:fe:96:c0:d9:1c:54:5f:bd:b3:28:0f:0f:
         79:5d:82:0c:05:08:1f:17:f4:28:73:48:b4:35:eb:25:8b:35:
         f4:e3:cf:8e:64:30:4e:39:a2:03:16:f0:c9:a4:54:80:ab:4b:
         b2:60:39:f4:da:0e:e1:e6:12:45:b2:bc:3e:5f:1c:d7:1c:5b:
         16:5e:6e:c8:6f:d1:6c:ff:9a:50:b9:1d:92:3d:9d:db:27:46:
         dc:26:50:f3:68:17:58:e0:8a:52:43:41:19:05:2a:7a:d3:13:
         39:eb:8b:18:d1:e9:1c:70:ba:db:f4:fd:a9:a5:94:a9:64:88:
         da:a1:32:13:e5:55:2d:c9:53:9b:44:b9:2c:60:49:6d:5f:cc:
         75:68:89:72:48:4d:8d:c9:d7:ca:32:64:f2:be:a1:27:1a:9d:
         11:1b:36:7b:62:c3:fd:bc:19:36:c1:cd:5f:1b:23:ac:91:43:
         32:85:da:f0:b1:30:58:1a:d4:f1:f5:30:b0:11:d5:6b:56:3e:
         4d:23:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org