Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e33302e302f32332d3233203d3e20323638373839.roa
File:                     34352e3137332e33302e302f32332d3233203d3e20323638373839.roa (raw, json)
Hash identifier:          cGCG5hOyhzx5C34FgLilQQ3I59W/K3gznswyjAvDOVk=
Subject key identifier:   58:44:D2:77:DF:53:A4:9A:E6:40:CF:9E:22:77:D1:0B:79:24:3C:AF
Certificate issuer:       /CN=9836DDAF4A063B35C599D8E74240140479434CEE
Certificate serial:       69CF76EE52EB9F36709C2FCFAE29A3A00A8FCE1B
Authority key identifier: 98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e33302e302f32332d3233203d3e20323638373839.roa
Signing time:             Mon 11 Mar 2024 19:31:09 +0000
ROA not before:           Mon 11 Mar 2024 19:26:09 +0000
ROA not after:            Mon 10 Mar 2025 19:31:09 +0000
asID:                     268789
IP address blocks:        45.173.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cf:76:ee:52:eb:9f:36:70:9c:2f:cf:ae:29:a3:a0:0a:8f:ce:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9836DDAF4A063B35C599D8E74240140479434CEE
        Validity
            Not Before: Mar 11 19:26:09 2024 GMT
            Not After : Mar 10 19:31:09 2025 GMT
        Subject: CN=5844D277DF53A49AE640CF9E2277D10B79243CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:3a:e4:24:55:e6:7b:e7:68:37:db:de:ee:
                    4b:61:98:91:61:5c:79:fc:7a:72:5c:4a:fe:ef:d6:
                    a1:22:51:78:8b:72:43:cc:d9:63:eb:69:34:c3:19:
                    c0:92:39:a9:fc:48:36:52:45:ca:0e:e2:2a:ec:7b:
                    86:b9:62:fb:5e:04:bf:c0:ce:50:f8:84:d1:3c:b8:
                    53:8e:90:b0:ba:d8:03:07:d9:24:2d:d5:bd:fc:c8:
                    8a:e1:1f:aa:3f:aa:7f:fe:9b:63:b5:ee:c3:0a:59:
                    9b:a9:c6:9d:5d:3c:62:ce:c2:86:7b:7b:72:14:92:
                    9c:61:1e:80:88:cf:c7:16:d3:15:45:14:78:99:21:
                    b1:b2:c1:75:2e:85:8f:40:c3:8f:82:1c:24:ed:37:
                    f0:bb:84:38:2e:91:19:de:27:c1:9f:2a:cf:96:8a:
                    ca:d6:63:b6:ad:e6:c6:b7:f7:01:40:2d:a6:be:0c:
                    08:b9:d7:10:58:31:df:f0:35:e7:b4:6a:d3:dd:fd:
                    89:f4:c7:4a:60:11:f3:40:b9:20:f4:ed:46:48:58:
                    6e:f4:8f:b0:13:fa:f8:4d:3f:29:2a:76:d2:4e:1f:
                    17:c0:f9:c3:ce:f6:4b:0b:ec:14:1e:59:83:c6:a0:
                    d6:07:2b:0f:60:cd:2d:61:d5:a2:03:9a:37:a4:db:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:D2:77:DF:53:A4:9A:E6:40:CF:9E:22:77:D1:0B:79:24:3C:AF
            X509v3 Authority Key Identifier:
                keyid:98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/9836DDAF4A063B35C599D8E74240140479434CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e33302e302f32332d3233203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:fd:55:98:16:c0:cf:06:cb:0a:27:2e:8a:cd:8f:ea:b5:a8:
         b2:28:58:22:8e:5e:5b:b4:cb:c4:1b:75:f2:a1:d0:bd:3c:c8:
         12:e7:91:79:cc:06:9d:9b:36:ea:27:b0:a2:95:6e:bd:72:bb:
         e1:0f:56:a2:28:64:2d:9e:d9:f0:2f:33:ce:3d:27:cd:ca:9f:
         8e:d3:ca:c7:66:af:04:75:5c:53:c2:94:d4:63:f9:75:bd:7e:
         af:34:80:dd:7e:2d:ce:d3:90:e5:8d:57:6a:2b:71:09:70:2d:
         65:bb:b2:a4:47:94:8e:50:cf:98:73:c0:c4:4a:09:37:eb:32:
         bb:92:38:bb:e9:55:a7:ec:09:cb:a9:ea:81:56:e8:73:72:ed:
         e4:3e:88:1a:4d:15:cc:ae:89:bb:8e:32:fd:91:15:4f:29:e7:
         8b:26:a1:fc:a2:79:f6:ef:d0:87:f8:b2:9f:30:88:c5:3a:79:
         6a:25:14:ed:a8:b3:98:c6:3b:99:f4:27:5f:cd:a1:0e:24:e2:
         00:1c:3b:0d:92:2e:80:08:99:74:94:b7:47:53:a8:24:37:51:
         59:e5:4e:f1:70:43:12:6f:b2:7c:30:78:24:41:e4:97:5a:9d:
         a4:07:ad:16:73:6d:a7:17:10:ed:d2:8d:58:2e:ee:54:c9:8f:
         8b:a1:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org