Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230322e302f32332d3233203d3e20323638313434.roa
File:                     34352e3136382e3230322e302f32332d3233203d3e20323638313434.roa (raw, json)
Hash identifier:          rGolOnayquNo6Y2yO7BsTEaVypQXF9OQsI8cjI7dPYg=
Subject key identifier:   40:31:83:8F:05:DC:14:3C:8E:D0:56:B0:10:92:2F:8D:79:9D:15:37
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       30F95F0371198358556163CCFB3C6A8D2A05E726
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230322e302f32332d3233203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:03 +0000
ROA not before:           Fri 15 Sep 2023 16:51:03 +0000
ROA not after:            Fri 13 Sep 2024 16:56:03 +0000
asID:                     268144
IP address blocks:        45.168.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f9:5f:03:71:19:83:58:55:61:63:cc:fb:3c:6a:8d:2a:05:e7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:03 2023 GMT
            Not After : Sep 13 16:56:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:5d:f1:e7:8d:bb:c5:39:6b:3e:7e:df:73:
                    c2:dd:d9:b8:3a:ee:e7:73:7a:c8:3b:6f:90:4b:1f:
                    83:92:bb:4e:2e:a9:73:20:74:a8:34:d5:2d:cb:38:
                    20:18:87:33:4b:fe:8a:a7:08:0b:46:69:f6:d2:bb:
                    38:9a:da:e5:7c:1a:b4:41:3b:01:1a:a2:78:01:ac:
                    2d:8b:d4:c4:0c:2d:f5:fa:ef:44:15:b3:cd:9c:7e:
                    cf:57:97:9e:40:d8:55:77:55:1b:24:29:03:d8:5b:
                    06:5c:f3:33:32:2d:51:47:59:59:4c:8b:f7:cc:96:
                    89:37:aa:9b:70:41:65:8f:7a:43:a2:16:b1:ae:99:
                    0c:2b:26:18:57:77:cb:1b:79:92:5b:a1:e6:69:25:
                    33:a2:67:60:02:62:1c:85:29:76:42:11:eb:b3:96:
                    31:01:40:27:1c:5d:57:55:ea:24:4e:d8:30:2f:7c:
                    a1:85:99:19:6b:a4:7f:e8:8b:a7:6e:36:e3:3b:2f:
                    75:07:ac:9c:dd:aa:75:cf:2e:f3:4d:45:fd:0f:7b:
                    c2:67:43:32:24:09:a1:78:7c:1a:33:99:03:b2:4d:
                    9b:2f:37:d2:33:02:3c:42:29:92:1e:b8:40:39:8f:
                    d3:cf:40:18:ee:3d:32:36:e9:48:82:54:03:a4:eb:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:31:83:8F:05:DC:14:3C:8E:D0:56:B0:10:92:2F:8D:79:9D:15:37
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230322e302f32332d3233203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:d0:20:27:81:49:08:1f:50:d8:88:3a:b2:34:a9:63:ef:a1:
         c3:a3:a1:b6:5d:ba:33:5f:a3:c4:3e:78:3e:ab:2f:5c:dc:9e:
         0d:d2:78:aa:d7:3c:6f:14:d5:5b:df:55:5b:a8:e2:8e:86:1f:
         b3:0e:09:bf:f7:93:51:af:74:40:bd:85:3b:be:82:14:49:0b:
         60:6a:02:f0:89:6f:d3:31:4d:c6:36:35:15:c4:5f:94:2b:ea:
         a2:4b:9c:ef:34:99:c1:8a:75:62:f6:cf:cd:ba:a6:e2:b5:a2:
         e4:26:17:27:96:6d:6a:b9:22:4d:9d:e9:4a:eb:c5:6f:d9:76:
         08:65:33:3a:ba:bb:c5:4e:38:dd:57:de:33:3b:b5:ef:77:b7:
         22:e4:ae:b1:0c:c9:22:15:b4:33:f0:18:07:43:04:be:78:0f:
         25:75:fa:b1:c3:d2:c7:25:f1:fb:84:17:ae:78:8e:8b:33:a1:
         1d:f4:b4:d2:7b:a5:7a:59:27:e9:58:55:03:06:cb:66:f0:ff:
         15:a6:e7:4b:f4:f6:26:38:01:f0:53:2c:bc:d8:57:4d:4c:e1:
         cd:ab:f2:1e:9a:f6:47:7b:30:92:8a:31:d8:90:81:bd:4a:a4:
         a6:02:07:d0:6a:8e:d3:63:89:56:6f:01:ce:0c:82:6f:ef:ab:
         77:76:b3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org