Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/34352e3233372e3231352e302f32342d3234203d3e20323638333033.roa
File:                     34352e3233372e3231352e302f32342d3234203d3e20323638333033.roa (raw, json)
Hash identifier:          uFBdxuzj1cjpEFRkKpCpIwMgKdwZK6/kRAySuvqodgI=
Subject key identifier:   02:43:02:14:97:F5:54:86:21:03:5D:F0:C7:58:06:AC:4E:4B:DE:05
Certificate issuer:       /CN=130888861C156DEDFFE5F171F7DBBCF43993D81C
Certificate serial:       446A78A1E7644675D05167A79AE65EBB302753EE
Authority key identifier: 13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/34352e3233372e3231352e302f32342d3234203d3e20323638333033.roa
Signing time:             Wed 03 Apr 2024 18:30:53 +0000
ROA not before:           Wed 03 Apr 2024 18:25:53 +0000
ROA not after:            Wed 02 Apr 2025 18:30:53 +0000
asID:                     268303
IP address blocks:        45.237.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6a:78:a1:e7:64:46:75:d0:51:67:a7:9a:e6:5e:bb:30:27:53:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130888861C156DEDFFE5F171F7DBBCF43993D81C
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject: CN=0243021497F5548621035DF0C75806AC4E4BDE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:82:28:2c:fb:a6:dc:14:fb:c7:2d:af:2c:c1:
                    3b:f8:e8:cc:91:83:3a:e4:99:85:c1:60:fd:49:d9:
                    fb:a6:30:c0:a4:8c:e3:9c:b9:58:ad:15:c8:f1:bf:
                    30:5c:83:c8:20:fe:f9:89:c4:d8:06:25:0f:42:93:
                    5a:a8:81:31:30:57:4b:4b:30:c1:1a:5a:5e:a3:47:
                    b5:9b:b0:bb:52:e2:d5:5b:a3:fe:a6:59:f2:27:d6:
                    7b:29:7e:e3:67:af:eb:85:f2:9f:47:c0:d4:31:dd:
                    be:a7:2e:79:41:ef:08:4c:74:53:82:3c:1b:d9:fb:
                    cc:dc:83:9c:74:85:ef:ef:8f:ab:46:84:16:37:15:
                    51:5d:68:c6:83:8a:99:3d:f5:fa:a0:23:f6:b8:99:
                    48:c2:8f:ba:66:cb:4b:1f:a0:f0:2d:23:3b:e0:e4:
                    70:b7:7a:5a:07:60:8b:7a:11:5a:4c:77:8e:af:a0:
                    09:c9:da:7c:cf:1e:d2:53:25:db:c2:ba:3a:a3:b8:
                    8c:cf:ce:06:d5:72:3c:b4:09:fa:2a:5c:3c:01:ee:
                    e4:15:54:ac:39:c8:d5:18:f3:ae:fd:d3:3f:40:ad:
                    7b:06:d0:a5:2a:05:1d:68:98:81:8f:5f:c9:0d:7c:
                    0b:83:0f:e4:24:ec:1a:56:ce:ac:62:86:55:5a:8e:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:43:02:14:97:F5:54:86:21:03:5D:F0:C7:58:06:AC:4E:4B:DE:05
            X509v3 Authority Key Identifier:
                keyid:13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/34352e3233372e3231352e302f32342d3234203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:eb:49:c4:cb:d9:3f:71:60:ea:aa:45:fe:9a:36:5e:01:50:
         b1:0e:16:60:bf:46:8c:ba:e1:da:04:3a:4c:cf:fc:57:e4:c5:
         30:c3:26:c7:42:7e:15:68:d0:58:3d:26:56:77:a6:1b:03:c0:
         67:bd:64:69:37:5d:91:2c:3c:6c:38:c5:ba:cf:2c:6e:25:b3:
         15:e1:01:85:dc:b7:97:46:53:41:23:c7:f5:7f:87:99:1b:86:
         6f:46:8d:c7:8f:96:13:f3:eb:7c:63:81:8e:19:ac:8c:6e:e9:
         31:fa:2e:ed:85:2c:8f:2f:1c:f6:55:d0:65:90:28:71:3f:e2:
         79:ec:94:d0:24:95:79:64:4f:ee:97:ea:72:7a:ae:b1:6d:af:
         11:48:01:20:ba:74:bc:e8:df:c2:ea:d3:05:26:82:16:05:bb:
         b7:8d:ce:26:05:33:a9:d8:bf:80:16:98:74:45:10:6b:08:2a:
         cb:84:48:8e:cd:94:f0:66:0b:8b:02:3b:86:3c:d7:af:87:22:
         0e:0f:50:51:57:84:50:54:65:33:26:6c:bd:7a:8a:38:4b:d3:
         53:07:aa:f7:d1:2f:a7:20:7f:ac:b3:db:ec:e0:25:28:33:80:
         30:f0:e9:3b:45:bf:d9:1b:2b:38:5b:18:44:9e:46:11:f6:01:
         ee:03:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org