Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136392e302f32342d3234203d3e20323638373836.roa
File:                     34352e3137322e3136392e302f32342d3234203d3e20323638373836.roa (raw, json)
Hash identifier:          JMYjwUfI+r805m/cpMbxnozhxG9sLTArcD/HMl/MYM0=
Subject key identifier:   DC:B4:84:80:88:B2:B6:68:17:5F:75:D0:58:7B:CE:DF:28:3E:B6:09
Certificate issuer:       /CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
Certificate serial:       05B45478D5EFBAC2D36A0224BF78A26A8288462B
Authority key identifier: A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136392e302f32342d3234203d3e20323638373836.roa
Signing time:             Thu 18 Apr 2024 13:29:54 +0000
ROA not before:           Thu 18 Apr 2024 13:24:54 +0000
ROA not after:            Thu 17 Apr 2025 13:29:54 +0000
asID:                     268786
IP address blocks:        45.172.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b4:54:78:d5:ef:ba:c2:d3:6a:02:24:bf:78:a2:6a:82:88:46:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Validity
            Not Before: Apr 18 13:24:54 2024 GMT
            Not After : Apr 17 13:29:54 2025 GMT
        Subject: CN=DCB4848088B2B668175F75D0587BCEDF283EB609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:43:a6:77:5a:bd:e4:a6:32:85:91:34:d0:
                    3b:01:4d:ce:ef:d2:66:93:b7:d6:08:5a:0d:97:73:
                    93:87:ed:1c:af:08:4f:78:4c:80:bd:79:99:3b:8a:
                    f7:1c:d7:1a:87:d9:90:1e:c9:e0:e7:71:bf:5e:2d:
                    89:93:af:e2:bb:a8:52:7c:ab:09:ef:0e:1d:98:e5:
                    15:c0:a9:e7:a8:47:51:c4:17:9f:0d:e7:d6:b7:01:
                    f0:f3:ff:3a:2e:ed:98:08:ea:5a:5b:b3:71:da:c1:
                    2d:d5:9d:58:ef:d0:d8:79:42:62:f9:91:52:61:ef:
                    ac:00:07:8a:57:9c:a9:c0:91:0c:a7:34:37:f9:07:
                    9a:ad:bc:e3:10:0c:3d:53:5a:cb:ed:27:f7:30:e1:
                    8e:65:a5:30:69:52:1c:26:22:7d:6d:bb:9e:16:ee:
                    3e:28:f7:04:3f:9e:56:f8:f2:a5:30:1f:c5:c5:0c:
                    7e:e4:ce:51:ce:8c:4d:9f:62:d1:7d:48:05:11:7c:
                    8c:24:56:81:1a:34:06:ca:a7:4c:df:92:5b:c8:10:
                    00:68:96:ce:c4:10:f1:bb:b9:a2:48:b4:7a:c2:98:
                    95:de:f0:09:5d:d0:45:bc:66:c2:9b:a4:42:50:85:
                    b2:83:67:f4:f6:98:99:05:d4:01:59:fb:0a:22:45:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:84:80:88:B2:B6:68:17:5F:75:D0:58:7B:CE:DF:28:3E:B6:09
            X509v3 Authority Key Identifier:
                keyid:A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136392e302f32342d3234203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:df:a3:4c:91:0b:e3:51:5a:7e:43:fb:90:21:6d:5a:e5:07:
         21:b1:1b:cd:73:e1:b7:0a:34:1e:d6:29:d7:cd:af:48:e1:36:
         61:9b:71:0f:69:16:ee:a0:75:03:1f:42:0e:ed:61:3d:ce:7c:
         9f:40:ff:6a:29:1e:f7:c7:bd:b8:84:45:61:ec:0b:34:9c:90:
         07:fd:a3:e7:94:d7:e2:a2:76:98:2c:16:b7:05:ec:49:26:c5:
         f7:cd:ae:c6:f9:f4:9c:c6:3a:31:74:7b:bb:8b:34:01:fd:8e:
         09:98:d0:91:a4:13:4a:01:69:91:0e:9c:bf:0a:f0:ae:1f:ee:
         7c:d2:63:f4:b2:17:b4:ff:92:54:b5:da:10:4e:91:d0:77:3c:
         3a:56:04:69:f5:fc:66:19:43:52:51:ff:60:a6:82:fb:51:c5:
         b1:9e:40:42:bb:d3:64:a8:59:28:72:5d:8f:d2:a7:13:bc:fc:
         76:dc:40:8b:ed:39:b9:71:a4:6e:0d:24:4b:15:f9:24:84:fc:
         45:f7:46:d5:5e:93:a5:64:d4:2c:0b:f2:60:f4:4d:5b:6e:5c:
         82:4a:2c:1f:cc:df:eb:53:f7:e0:52:92:33:9d:94:b4:71:41:
         26:d8:81:11:66:07:a4:68:82:2e:84:15:b1:61:d9:d3:ac:09:
         92:e7:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org