Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/34352e3138302e33382e302f32342d3234203d3e20323639313234.roa
File:                     34352e3138302e33382e302f32342d3234203d3e20323639313234.roa (raw, json)
Hash identifier:          0XfvvOBoSWEtx9owlEJWw3jCgyDESA0tgdMTdMhTdCI=
Subject key identifier:   7A:05:8E:0F:D3:56:F2:45:5A:09:E1:F6:D6:B0:7E:63:4B:9E:36:39
Certificate issuer:       /CN=93351268B2EE7F59D52332F376182868B4D6E70E
Certificate serial:       0932FDEB54D03C950A5770DE7B8DF501DC874434
Authority key identifier: 93:35:12:68:B2:EE:7F:59:D5:23:32:F3:76:18:28:68:B4:D6:E7:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93351268B2EE7F59D52332F376182868B4D6E70E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/34352e3138302e33382e302f32342d3234203d3e20323639313234.roa
Signing time:             Tue 21 Nov 2023 23:48:55 +0000
ROA not before:           Tue 21 Nov 2023 23:43:55 +0000
ROA not after:            Tue 19 Nov 2024 23:48:55 +0000
asID:                     269124
IP address blocks:        45.180.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:32:fd:eb:54:d0:3c:95:0a:57:70:de:7b:8d:f5:01:dc:87:44:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93351268B2EE7F59D52332F376182868B4D6E70E
        Validity
            Not Before: Nov 21 23:43:55 2023 GMT
            Not After : Nov 19 23:48:55 2024 GMT
        Subject: CN=7A058E0FD356F2455A09E1F6D6B07E634B9E3639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:36:a1:7f:83:f8:79:e8:36:d6:67:ad:6b:
                    99:2a:00:97:6b:b2:22:27:54:9b:6a:49:2d:bf:b4:
                    3c:a3:06:44:eb:68:68:07:00:08:ba:d9:96:f2:98:
                    31:11:dd:86:21:57:5a:ea:29:41:93:ed:44:cc:50:
                    25:da:2b:3f:60:66:57:b6:94:f3:95:5c:dc:64:eb:
                    8e:3e:2a:b8:e6:61:d9:9b:66:37:a1:07:27:33:eb:
                    85:8d:23:df:11:f9:65:33:00:ea:fa:a6:fd:43:af:
                    00:b0:b0:73:d3:2c:14:5a:2c:fc:05:c7:56:fe:05:
                    d1:76:e7:a0:e0:03:12:a0:8e:d3:2f:1b:25:3a:cd:
                    43:5a:f2:a7:60:02:93:67:65:b5:a4:1b:97:d0:51:
                    98:76:a7:5c:93:19:38:70:db:4c:4b:7e:0f:df:ec:
                    20:b2:02:4a:bb:3f:b3:4c:89:2c:85:f6:50:2e:5d:
                    78:59:3d:c6:cd:e6:70:9a:d7:cf:6a:4c:3b:a9:49:
                    d5:ed:d4:2b:3a:9d:7a:50:b1:cc:0d:4c:8e:59:6f:
                    85:ba:7a:08:53:9c:90:70:8b:65:8c:eb:c1:7e:e8:
                    e1:5b:c5:7e:80:c0:7a:bc:86:a9:4b:3b:64:5f:ec:
                    ef:95:db:5a:af:38:a0:21:85:bc:7a:3b:ba:db:9a:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:8E:0F:D3:56:F2:45:5A:09:E1:F6:D6:B0:7E:63:4B:9E:36:39
            X509v3 Authority Key Identifier:
                keyid:93:35:12:68:B2:EE:7F:59:D5:23:32:F3:76:18:28:68:B4:D6:E7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/93351268B2EE7F59D52332F376182868B4D6E70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93351268B2EE7F59D52332F376182868B4D6E70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/34352e3138302e33382e302f32342d3234203d3e20323639313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:4b:14:ef:67:75:55:c1:a2:42:75:82:3f:31:68:a5:bc:
         cd:61:68:47:6f:72:13:9f:4c:36:c4:76:79:a9:e4:c8:37:8d:
         b1:81:a6:e7:b8:43:80:5c:c7:de:01:36:21:56:01:0d:f6:39:
         1f:de:2a:c5:1c:86:87:79:d0:6c:7d:a3:93:67:b0:a1:8a:d0:
         a3:49:d3:c7:15:06:7d:fd:2b:d8:9f:0d:f1:92:8b:a2:df:90:
         4a:40:20:23:ab:7f:e7:d3:41:fb:da:42:ac:fd:76:b4:5a:04:
         1f:ce:a1:17:fe:a3:c4:3b:5a:9b:8d:77:24:7a:51:cb:05:5e:
         9d:f7:5b:5e:c9:a5:b6:42:c6:1d:00:ad:4c:07:13:03:88:37:
         36:17:41:0f:19:93:2c:23:d1:6a:3e:13:03:e6:08:ec:e8:41:
         21:b5:a3:b1:86:d1:73:e1:7f:d1:fe:77:19:39:40:ee:eb:6a:
         27:3a:dd:76:1a:b9:bd:5b:8c:ff:b6:eb:07:9d:ab:87:ae:ee:
         10:8b:c1:ab:ce:8f:1e:c9:c5:f4:02:d1:a8:ad:e3:3b:e7:63:
         ec:02:b4:df:b9:01:9b:9f:31:94:a0:f9:f5:2e:ff:f9:56:44:
         b8:84:9a:a3:3c:65:15:85:d3:fb:b2:92:4a:cc:69:54:98:ba:
         da:c8:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org