Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233332e38332e302f32342d3234203d3e20323638313932.roa
File:                     34352e3233332e38332e302f32342d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          ccD5d1ZkzVpdH+9AULRnLPwidZajlFBRhmzKu+6wVPs=
Subject key identifier:   BE:61:2B:A9:E2:E1:D2:0D:E2:01:50:92:63:88:05:0A:5A:40:75:3E
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       58B07811A18D89057D3CF89568F938AA78DD818D
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233332e38332e302f32342d3234203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:35 +0000
ROA not before:           Mon 14 Aug 2023 15:53:35 +0000
ROA not after:            Mon 12 Aug 2024 15:58:35 +0000
asID:                     268192
IP address blocks:        45.233.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b0:78:11:a1:8d:89:05:7d:3c:f8:95:68:f9:38:aa:78:dd:81:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:35 2023 GMT
            Not After : Aug 12 15:58:35 2024 GMT
        Subject: CN=BE612BA9E2E1D20DE20150926388050A5A40753E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:a6:f9:bb:8c:06:9f:1d:8d:d7:f1:24:ec:
                    21:38:9c:9f:71:4d:e8:c3:de:42:36:c2:cb:b6:ed:
                    b6:24:1b:d3:57:8b:86:76:07:9d:4a:c2:13:04:d6:
                    52:a7:e2:ac:f9:af:e2:fe:9b:56:65:fe:29:83:e9:
                    07:1a:f7:a9:e2:22:21:48:65:28:4a:9c:78:5d:c8:
                    c6:20:03:de:37:f1:1d:24:e4:e3:7e:a6:16:ab:60:
                    e7:70:fe:ad:1f:2e:4b:dc:61:f0:0f:86:41:a3:b2:
                    bd:cb:e1:10:41:93:60:88:93:bc:3b:68:ca:0e:94:
                    44:f6:8c:69:49:ce:f3:b1:0a:12:c9:d2:87:4a:e4:
                    f2:14:66:4d:42:05:f3:5e:88:42:a3:7e:c5:e3:9d:
                    a6:d4:24:4f:37:88:45:7f:71:ee:2b:31:a2:36:b5:
                    a3:d9:e3:f6:7e:86:2c:fa:5f:93:b9:e6:36:e9:91:
                    1c:da:d8:14:89:1d:bd:84:91:7d:f5:d6:b3:1d:3f:
                    3a:bf:ad:fd:54:22:28:61:e7:2b:f6:e3:c4:a3:d1:
                    44:82:be:10:1e:c4:d8:9c:7c:06:68:86:4d:3e:c8:
                    c7:0c:15:e7:6c:a3:ab:ac:d0:ba:5b:e8:58:64:a6:
                    71:38:c8:2c:5b:ef:19:04:0b:29:1f:46:b7:0a:d7:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:61:2B:A9:E2:E1:D2:0D:E2:01:50:92:63:88:05:0A:5A:40:75:3E
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233332e38332e302f32342d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:23:65:14:21:47:e1:5b:b0:b9:f0:c0:8e:f8:ed:41:8d:25:
         67:44:cf:db:3e:bc:b9:0f:90:30:f4:11:cf:71:b1:fc:60:9a:
         b9:ca:84:72:7a:f7:ec:ec:8a:61:cc:03:01:a9:a1:13:c3:69:
         68:a2:62:fa:03:3b:50:09:98:11:f8:79:1f:c3:31:93:a4:ce:
         8b:39:fc:66:9c:f3:d8:23:41:19:83:8c:ea:82:c5:48:34:2f:
         ad:38:59:5d:1e:30:81:40:5a:9e:56:b8:d9:97:f5:1a:bb:12:
         49:06:2e:40:40:f7:46:19:45:7c:61:5b:71:5e:85:b4:28:c4:
         5a:25:0f:0b:be:62:b3:c2:b3:29:69:5c:24:8e:84:ee:03:c6:
         29:2b:15:5c:a1:f5:bf:b7:e9:de:9c:86:de:f6:ee:b9:9f:95:
         54:93:1b:d3:6e:43:80:df:55:cf:03:fc:54:3f:4b:0b:d6:b8:
         2c:31:84:2e:7c:61:b6:cf:0d:1f:3e:01:b2:cc:93:ed:09:3a:
         8f:1f:f3:ee:42:7a:dd:9c:d5:34:4b:60:35:15:dd:f3:4b:8d:
         04:e1:54:c2:de:1c:8a:d0:04:1e:9c:65:a6:b1:7d:45:ac:02:
         ab:30:b1:c8:61:65:3a:4a:81:0d:1a:8f:13:b8:cd:e4:4c:cb:
         24:44:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org