Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa
File:                     34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (raw, json)
Hash identifier:          Z0OYk9QaRyy7NBWIeNwtbFpcJzeZL37G8DEOsMqxlws=
Subject key identifier:   41:E3:70:4F:43:BC:38:B2:70:C7:D8:29:2C:64:CF:90:50:42:02:7E
Certificate issuer:       /CN=F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9
Certificate serial:       43850279D4BA7A148EC4F85885EAD9526D5CB85F
Authority key identifier: F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa
Signing time:             Tue 02 Apr 2024 19:00:00 +0000
ROA not before:           Tue 02 Apr 2024 18:55:00 +0000
ROA not after:            Tue 01 Apr 2025 19:00:00 +0000
asID:                     268254
IP address blocks:        45.236.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:85:02:79:d4:ba:7a:14:8e:c4:f8:58:85:ea:d9:52:6d:5c:b8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9
        Validity
            Not Before: Apr  2 18:55:00 2024 GMT
            Not After : Apr  1 19:00:00 2025 GMT
        Subject: CN=41E3704F43BC38B270C7D8292C64CF905042027E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:54:56:aa:95:3b:98:aa:3e:85:f8:26:4a:
                    2d:8d:3a:6d:5d:fd:c2:26:e2:66:25:49:27:2f:c4:
                    27:2d:e5:08:80:72:2e:35:6e:33:a1:da:10:e8:b0:
                    c6:d9:c9:f5:11:9a:84:bf:7e:a1:56:52:00:8b:04:
                    de:9e:24:e1:89:3a:61:c3:23:f8:f4:cd:3d:3b:8d:
                    04:3e:08:db:bc:2b:ee:d1:bd:f6:28:6e:2d:4b:2a:
                    9b:cc:d1:b2:a9:69:28:f8:81:61:3b:79:76:37:91:
                    5d:e0:18:aa:a3:dc:03:39:08:ac:08:63:f2:16:14:
                    d3:fb:6d:a0:59:df:b0:19:17:ef:b7:87:6d:ba:e1:
                    db:39:3e:98:89:06:db:93:42:15:94:55:f2:b7:75:
                    ce:d6:90:8b:85:15:47:67:24:04:b0:14:3d:f1:89:
                    e8:1e:23:ea:57:c5:23:9e:a1:2b:c4:26:4a:de:b5:
                    29:48:a4:a9:a7:6f:31:cb:ff:1b:54:c0:f9:6c:50:
                    35:78:ab:46:db:66:a3:15:58:f0:39:71:72:d6:3c:
                    d1:2d:79:a1:ca:8f:da:46:76:d5:55:59:07:a7:9a:
                    33:6f:dc:cc:da:8b:d6:19:ee:f5:71:79:49:02:74:
                    56:b7:43:42:46:dc:d1:3c:ec:ee:de:14:9b:41:5e:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E3:70:4F:43:BC:38:B2:70:C7:D8:29:2C:64:CF:90:50:42:02:7E
            X509v3 Authority Key Identifier:
                keyid:F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:64:77:42:6d:2c:af:60:76:a1:01:a5:48:29:71:38:cb:
         b1:d1:45:ab:d1:fd:d3:7b:86:70:cd:07:38:de:0b:68:f5:e6:
         77:97:e0:8e:72:66:37:70:36:38:c9:e3:06:55:79:32:0c:7d:
         7c:79:85:bc:6d:4f:99:67:58:9b:48:fc:52:cb:e9:4d:4a:70:
         1e:53:8e:39:d2:c6:d4:4d:2f:8f:c9:3e:97:22:89:3a:14:54:
         01:62:6a:96:7a:81:47:0f:cd:e8:a9:ca:74:24:8a:f7:e8:11:
         97:a3:cb:04:b9:19:f4:c1:11:28:06:f4:4b:8b:8f:21:4b:d3:
         a2:b9:3d:96:ea:8d:8d:ff:86:43:9f:ba:dd:f4:d3:e7:50:17:
         54:bb:c7:63:e7:62:7c:67:15:e5:cb:f3:39:3b:51:59:e5:66:
         9a:a1:1d:9c:ee:07:a4:47:f8:34:1c:05:66:6d:06:fb:0b:fa:
         ee:e3:cb:d0:61:41:53:9d:1f:d9:51:b6:24:d3:4c:8d:9c:ad:
         18:4c:6b:29:69:0c:7a:ce:cd:d9:f3:c1:42:b6:ef:bd:ba:5c:
         08:cc:09:8c:7e:09:d2:09:94:42:09:b0:47:41:c6:33:f9:d9:
         73:89:90:cf:84:02:16:2c:4c:4e:e7:92:d2:86:f9:6f:c2:89:
         1b:b0:74:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org