Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/1/34352e3137312e32342e302f32322d3234203d3e20323638313833.roa
File:                     34352e3137312e32342e302f32322d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          bpeJ84kGKX0NfCechvuwQ4T+s+uO/BD+N8ak31nW7B0=
Subject key identifier:   55:D8:2A:3C:55:C6:25:26:78:0D:51:0F:FB:C4:1C:70:4B:1C:6D:A7
Certificate issuer:       /CN=34F9F4A4CAAC59248202DBE4090F54B2949C1A48
Certificate serial:       1D48E7F3C068267D0C48884652A60491D54E7E87
Authority key identifier: 34:F9:F4:A4:CA:AC:59:24:82:02:DB:E4:09:0F:54:B2:94:9C:1A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F9F4A4CAAC59248202DBE4090F54B2949C1A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/1/34352e3137312e32342e302f32322d3234203d3e20323638313833.roa
Signing time:             Thu 04 Apr 2024 03:38:10 +0000
ROA not before:           Thu 04 Apr 2024 03:33:10 +0000
ROA not after:            Thu 03 Apr 2025 03:38:10 +0000
asID:                     268183
IP address blocks:        45.171.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:48:e7:f3:c0:68:26:7d:0c:48:88:46:52:a6:04:91:d5:4e:7e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F9F4A4CAAC59248202DBE4090F54B2949C1A48
        Validity
            Not Before: Apr  4 03:33:10 2024 GMT
            Not After : Apr  3 03:38:10 2025 GMT
        Subject: CN=55D82A3C55C62526780D510FFBC41C704B1C6DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:13:4f:93:9e:a0:f2:66:61:b4:de:7c:d8:
                    c9:18:12:84:13:d0:8d:c9:e6:ed:48:cf:79:43:ca:
                    8e:9e:23:fc:02:cc:62:cd:77:f3:00:a3:76:b8:43:
                    f1:d5:77:03:79:99:64:7d:d2:6d:44:7f:e2:1e:bc:
                    2b:10:73:5e:01:5a:30:ef:07:81:52:da:6d:86:d1:
                    cd:4f:b8:8b:f7:04:e5:f1:06:e9:ea:54:86:77:db:
                    c4:fd:dc:ed:d8:71:08:bc:35:54:6a:41:9e:71:17:
                    23:ba:73:7d:ca:81:bf:13:8d:c0:5b:82:8a:4a:72:
                    e3:67:4e:c8:73:2e:bb:bb:40:89:0d:d8:b8:1f:aa:
                    79:e1:a1:ab:7c:7d:8c:55:2b:7f:d9:ed:79:40:ee:
                    b6:e3:39:ad:49:1f:8c:8e:8b:d0:bf:4b:dd:af:2d:
                    31:b5:50:ca:22:e9:04:4b:7b:0d:87:b5:01:f1:83:
                    c7:f3:6a:98:81:fc:ab:08:32:b7:68:2b:ab:44:e2:
                    97:28:30:18:a0:e4:46:1a:04:cc:c3:53:6a:91:64:
                    ff:04:66:42:59:7a:04:f0:66:c9:52:93:c1:1f:de:
                    91:71:ef:d7:7c:55:1b:24:13:39:41:1c:43:60:11:
                    26:5b:11:1a:76:46:29:e9:ef:2b:b1:e3:c5:e1:59:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D8:2A:3C:55:C6:25:26:78:0D:51:0F:FB:C4:1C:70:4B:1C:6D:A7
            X509v3 Authority Key Identifier:
                keyid:34:F9:F4:A4:CA:AC:59:24:82:02:DB:E4:09:0F:54:B2:94:9C:1A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/1/34F9F4A4CAAC59248202DBE4090F54B2949C1A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F9F4A4CAAC59248202DBE4090F54B2949C1A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/1/34352e3137312e32342e302f32322d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:49:ab:f7:45:f3:54:86:88:15:d1:ea:d0:76:87:6f:3c:
         7d:f5:2e:d9:9a:97:d8:f3:db:02:e1:77:60:a1:88:fa:c6:fa:
         8f:e5:b6:c3:f4:0d:69:3a:62:9d:fb:77:61:aa:fd:23:d2:25:
         d9:e1:d5:bf:59:c4:ce:59:5a:e4:6a:17:6c:88:b6:c7:ba:b0:
         41:1c:a9:63:08:62:fc:98:47:e4:71:f0:3d:cc:1b:cd:fd:16:
         b6:32:98:35:dd:b2:4d:00:67:f6:ad:75:39:6c:8f:fd:d9:95:
         1a:9a:69:28:60:cf:9b:25:af:1d:54:f3:bf:bf:fd:87:06:c6:
         17:78:dc:93:3c:0d:39:78:c3:27:e9:e0:b2:f6:08:84:0a:48:
         9b:fc:73:03:44:40:19:ac:97:88:39:4a:e2:55:4b:43:3e:e2:
         de:15:f0:b5:29:dc:78:0e:5d:da:bf:67:75:3e:d1:7d:aa:fa:
         9e:1c:7e:6e:68:a7:85:89:23:b5:78:9f:68:75:be:dd:10:25:
         71:3c:39:86:5f:0c:40:44:5a:fa:8e:38:22:5b:86:89:eb:a9:
         cc:8f:dd:76:5b:45:50:28:10:72:89:bc:da:67:18:8c:6d:c1:
         e2:ac:a9:e0:95:31:ee:c0:f8:b2:ed:f2:01:6f:f4:4a:cf:96:
         86:fc:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 14:39:49 2024 by rpki-client on console-fra.rpki-client.org