Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33352e302f32342d3234203d3e20323638303438.roa
File:                     34352e3136382e33352e302f32342d3234203d3e20323638303438.roa (raw, json)
Hash identifier:          3Mkd4Jz24+XTyBUEEBVHOPkj5qg0eW68jlZ/ucAq7DA=
Subject key identifier:   68:7E:0E:1F:4C:A3:32:1E:67:0F:90:7D:1B:D6:11:2D:E3:13:83:C5
Certificate issuer:       /CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
Certificate serial:       3ADDB8DD5EAE2BCC637B81FE90DFBE1A4A276492
Authority key identifier: 30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33352e302f32342d3234203d3e20323638303438.roa
Signing time:             Sat 20 May 2023 19:11:10 +0000
ROA not before:           Sat 20 May 2023 19:06:10 +0000
ROA not after:            Sat 18 May 2024 19:11:10 +0000
asID:                     268048
IP address blocks:        45.168.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:dd:b8:dd:5e:ae:2b:cc:63:7b:81:fe:90:df:be:1a:4a:27:64:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
        Validity
            Not Before: May 20 19:06:10 2023 GMT
            Not After : May 18 19:11:10 2024 GMT
        Subject: CN=687E0E1F4CA3321E670F907D1BD6112DE31383C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:11:9e:65:c5:c2:62:b3:91:99:a1:3e:6b:
                    2a:b3:47:b9:4d:79:2d:84:97:2f:df:10:bd:bb:89:
                    ec:59:3b:57:8c:a7:05:4f:fb:45:55:2a:95:ab:e2:
                    22:3b:2e:fd:cf:f5:17:e4:96:f8:4a:d6:0f:34:71:
                    49:46:64:b6:58:e5:cd:7f:8b:84:dd:1b:7e:11:6a:
                    8e:35:d3:38:7f:63:65:d9:5d:38:d2:9b:f0:0e:6a:
                    08:98:6b:b2:06:e1:10:e2:5b:c2:95:28:bb:7f:88:
                    93:28:e7:eb:09:a8:63:9a:fb:29:52:8c:c0:4c:86:
                    b4:a7:a1:f2:93:09:eb:4b:e7:18:b3:3a:46:4b:f5:
                    3e:0e:e0:e4:78:c2:73:53:ef:bb:41:2e:bc:44:1c:
                    d7:53:b9:a8:4e:e4:b2:df:f0:dd:57:59:ee:52:2b:
                    3e:8f:7b:55:65:1e:86:f1:24:5f:d7:f7:8c:c4:a8:
                    24:0e:45:f9:6f:82:6e:db:03:28:13:ff:49:47:2c:
                    ea:1f:0c:99:76:50:7b:46:80:17:56:57:01:b6:c9:
                    3d:06:ce:af:4b:e8:12:a2:1d:21:16:98:d4:a7:fa:
                    36:bb:8c:62:ff:6b:2f:10:a0:ff:dd:97:d6:52:95:
                    c3:f1:94:71:01:27:d6:0e:17:97:a2:32:fa:55:32:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7E:0E:1F:4C:A3:32:1E:67:0F:90:7D:1B:D6:11:2D:E3:13:83:C5
            X509v3 Authority Key Identifier:
                keyid:30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33352e302f32342d3234203d3e20323638303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:22:65:cd:3f:41:11:ab:18:52:63:e1:28:55:e9:9e:da:
         3d:72:76:49:7d:78:b3:6a:02:0b:ef:b3:a7:fb:bf:90:29:8e:
         28:6e:f8:be:30:81:e3:6e:83:00:d0:dd:24:95:10:73:a2:ad:
         25:b6:a7:f3:4d:6e:5e:f0:68:52:5c:7f:23:1d:19:bc:5f:38:
         a1:b0:64:47:8d:6c:d5:79:e5:60:af:e7:4e:a3:8f:4d:14:ff:
         43:6b:3a:bd:c6:63:f0:a1:9f:68:f7:9a:d5:ff:7d:5b:b4:fa:
         f6:79:37:be:2c:9c:a8:fb:61:0a:6e:ea:4a:5d:c2:ed:06:2b:
         3b:36:0d:5d:76:ad:d9:de:52:0d:92:a6:d4:10:b3:88:6a:e3:
         d1:20:e9:c2:15:97:48:c1:a4:ef:ee:e2:e9:97:38:54:f7:2c:
         bc:05:c9:29:7e:cd:ac:5a:4e:f0:fb:33:ae:aa:a5:87:6b:ee:
         d6:84:5c:e1:d0:ff:d3:8e:7d:50:09:97:15:05:50:0c:13:a6:
         4d:f7:2c:95:99:c2:68:ec:c0:3f:72:23:fa:03:fd:ce:3f:00:
         61:34:45:b3:14:a5:f9:d6:c2:9e:99:95:1b:57:91:81:5e:40:
         c3:77:f4:2e:69:a9:d0:9e:c1:e2:aa:28:91:67:31:61:9d:3e:
         77:b9:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org