Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa
File:                     34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa (raw, json)
Hash identifier:          x3O7I54jToVDsXDqhruWlQVayX35d+dTJON2axGPGy4=
Subject key identifier:   88:2C:53:C9:D9:18:C2:C8:EC:91:3E:6F:6C:40:30:C6:16:8C:F5:1A
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       0998E93EE9D102824871F5CFDBE7AEA386A5FD3F
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:59 +0000
ROA not before:           Fri 08 Dec 2023 00:42:59 +0000
ROA not after:            Fri 06 Dec 2024 00:47:59 +0000
asID:                     268296
IP address blocks:        45.237.246.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:98:e9:3e:e9:d1:02:82:48:71:f5:cf:db:e7:ae:a3:86:a5:fd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:59 2023 GMT
            Not After : Dec  6 00:47:59 2024 GMT
        Subject: CN=882C53C9D918C2C8EC913E6F6C4030C6168CF51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:73:39:c9:92:37:64:a9:d1:f3:08:43:9c:
                    02:36:42:c2:0e:1c:7f:94:a0:16:d0:57:ae:ed:26:
                    be:98:96:a4:77:78:12:8a:40:6f:1f:80:40:93:44:
                    e1:32:a7:c4:51:d7:4c:76:68:3b:3c:08:53:cb:67:
                    87:30:f0:48:4a:69:6f:99:82:ec:91:09:21:18:38:
                    4f:4e:d0:1a:ee:ed:36:d3:6b:ac:03:17:b2:10:c4:
                    2d:37:76:7c:2e:aa:cf:cc:94:f4:d8:01:1a:b3:46:
                    04:8d:51:50:da:48:62:09:08:c0:8d:dc:d0:80:26:
                    66:1d:42:1f:f7:3b:49:30:3e:7f:49:08:8a:1a:9f:
                    66:41:15:09:d8:56:c5:aa:63:26:b2:92:ba:d1:95:
                    6d:5e:c0:92:05:ae:d6:79:2b:b3:ee:3b:71:aa:de:
                    e6:72:0e:a8:7f:a1:33:3c:54:f5:9f:95:5d:7e:5e:
                    55:96:41:23:b0:f4:b3:bb:68:67:20:81:d0:cb:fe:
                    6a:ca:65:45:06:52:26:b3:69:33:96:55:dc:df:0b:
                    77:6d:b2:53:9d:f5:18:ae:46:fc:4b:8e:c2:93:c4:
                    0c:39:28:bc:58:82:1a:d9:93:fa:af:18:74:8f:14:
                    cc:f9:fb:86:61:ed:55:32:14:ba:72:84:42:2f:70:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2C:53:C9:D9:18:C2:C8:EC:91:3E:6F:6C:40:30:C6:16:8C:F5:1A
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:04:4d:48:53:89:26:0f:43:60:80:e2:63:37:df:b8:b7:46:
         03:da:c7:81:ca:69:9a:14:05:6b:4e:5f:56:70:b2:e6:2b:f4:
         f8:7f:db:87:d2:74:73:68:74:a0:c3:0d:46:ce:11:b6:ca:93:
         a5:ce:16:09:ce:a7:e0:40:b9:83:a6:3c:0e:e4:71:52:ed:32:
         f5:47:cd:52:07:94:6e:93:7e:06:32:c7:88:91:56:58:00:58:
         24:d4:1c:2e:17:d7:b2:d3:e3:68:f6:b5:48:fd:53:40:22:38:
         25:23:95:ab:1f:a7:d8:4f:47:2e:e7:fb:28:0f:84:6a:65:f4:
         3c:6c:0a:0d:cd:99:0e:16:3d:a6:8f:ef:f7:ff:3b:f8:00:92:
         be:a1:43:67:a3:1b:6a:79:23:e9:ce:8a:9e:e7:86:d1:3e:d9:
         5b:9b:71:0a:e2:dd:52:98:40:57:da:7f:44:47:62:3c:f8:e6:
         a8:93:93:0b:00:67:92:36:90:c5:61:7e:e3:16:4a:1a:6c:fd:
         ab:88:c1:b5:4f:75:8b:19:49:43:5f:f2:cf:62:85:a8:24:60:
         a3:b5:6b:40:23:ee:67:d4:db:b4:34:d4:81:df:c3:f1:ed:28:
         49:09:09:a7:d6:e4:40:57:f0:f3:72:7c:27:79:e0:ea:55:40:
         ca:57:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org