Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa
File:                     34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa (raw, json)
Hash identifier:          atJ/bXtcN6IhwQPVMjxQgRbP6J50JATRbxF1TnSsL4g=
Subject key identifier:   56:08:33:DF:7E:A1:5A:F3:32:58:D4:83:17:19:FE:16:25:C1:9D:69
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       11E9AAB133AD169668D6A2740C4A45EA04C6344D
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:55 +0000
ROA not before:           Sun 07 Apr 2024 03:16:55 +0000
ROA not after:            Sun 06 Apr 2025 03:21:55 +0000
asID:                     269514
IP address blocks:        45.186.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e9:aa:b1:33:ad:16:96:68:d6:a2:74:0c:4a:45:ea:04:c6:34:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:55 2024 GMT
            Not After : Apr  6 03:21:55 2025 GMT
        Subject: CN=560833DF7EA15AF33258D4831719FE1625C19D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:c7:ab:8f:a7:49:71:25:4b:04:01:6e:30:
                    4e:76:9e:06:38:9f:bf:dc:84:7d:ba:a8:c8:ed:4f:
                    b1:88:58:98:b5:0d:5e:57:7c:75:c7:29:6d:12:f2:
                    37:26:e2:a9:d2:c4:67:9c:1d:dd:e3:80:06:55:d1:
                    4c:01:9d:93:98:4e:ee:43:4d:6e:a0:f9:73:53:0e:
                    ce:dc:0b:0e:6b:68:31:08:a0:4b:87:b7:98:5e:38:
                    48:d3:90:fd:f5:f6:40:31:0a:a2:7d:94:64:b2:a4:
                    00:c3:db:28:b0:ae:64:b5:b5:ef:04:72:70:81:58:
                    65:e5:62:a1:1a:8c:e7:72:5c:2e:99:7c:a7:1a:28:
                    89:c6:c1:c2:db:6d:83:ef:0e:c1:7d:c8:5c:38:4c:
                    59:ac:bd:de:1f:37:3d:e6:bf:a8:a1:fd:fd:17:d7:
                    c5:06:4e:74:15:cf:d3:17:26:75:ae:f8:45:0e:ed:
                    da:d1:fc:eb:f0:b3:c3:e5:9a:78:a5:ea:43:71:12:
                    13:56:01:94:47:a3:73:41:6f:63:81:e1:b8:c3:c5:
                    32:d0:1e:73:bd:cb:2d:24:78:ed:f6:bc:d9:4d:f4:
                    72:37:4c:42:7d:09:1a:7b:20:05:d7:ac:03:bb:6a:
                    53:81:c5:22:c8:83:f9:3b:94:40:c5:aa:ad:5d:f1:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:08:33:DF:7E:A1:5A:F3:32:58:D4:83:17:19:FE:16:25:C1:9D:69
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6d:0a:19:c6:c0:f1:f9:b6:3a:0a:9d:b3:51:39:d0:df:e9:
         30:4b:e6:c4:b2:c5:aa:9a:20:83:ff:95:9b:08:54:29:32:43:
         7e:80:3b:9f:cc:d5:91:1a:5e:d0:e2:1c:d4:38:d0:ff:28:fe:
         4a:39:75:00:e1:e9:d7:7b:ed:f0:09:ff:5b:04:b1:ae:ff:9b:
         ff:a3:f1:7f:5b:40:8a:a5:c3:62:c9:c3:8a:c2:e7:99:79:61:
         e5:32:9c:5e:20:94:45:e9:a3:f1:1c:70:ae:01:45:25:da:e8:
         50:66:24:36:2f:47:86:f9:38:ad:5c:20:12:74:ea:31:97:6e:
         47:24:35:20:c6:52:18:2f:28:18:b9:bd:2e:e9:61:c2:c6:7e:
         6c:b5:47:83:d8:b9:d8:c5:3d:ba:ec:94:21:1e:b0:4f:11:d1:
         dc:b2:78:ff:e0:4c:9e:87:7e:c1:bb:18:d7:8f:28:70:60:33:
         f4:84:fe:ed:1f:26:18:14:5a:fd:12:4f:6c:bd:6b:1f:50:29:
         93:db:1b:62:77:f9:ab:04:b4:ba:88:7b:9e:19:4f:99:fb:5c:
         fc:96:9a:9d:4b:d1:68:8a:bf:e0:fa:2f:28:91:60:49:af:76:
         f5:e1:e4:aa:a6:23:71:ef:cf:52:c1:62:7f:ab:3a:cb:9f:47:
         db:c2:00:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org