Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/34352e3138342e3138362e302f32342d3234203d3e20323639333338.roa
File:                     34352e3138342e3138362e302f32342d3234203d3e20323639333338.roa (raw, json)
Hash identifier:          rWOj9pNFp7UKyKHu6ol0voiB6YWK0FF9ZBRT/6GMTi0=
Subject key identifier:   0A:F9:E1:DF:4B:9C:6E:08:35:22:B9:AA:A2:A2:42:2D:28:4D:BC:9C
Certificate issuer:       /CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
Certificate serial:       5358E5A1DF56E01006C7E83B4598A11EB613FF7B
Authority key identifier: 28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/34352e3138342e3138362e302f32342d3234203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:07 +0000
ROA not before:           Sat 13 Apr 2024 16:11:07 +0000
ROA not after:            Sat 12 Apr 2025 16:16:07 +0000
asID:                     269338
IP address blocks:        45.184.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:58:e5:a1:df:56:e0:10:06:c7:e8:3b:45:98:a1:1e:b6:13:ff:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
        Validity
            Not Before: Apr 13 16:11:07 2024 GMT
            Not After : Apr 12 16:16:07 2025 GMT
        Subject: CN=0AF9E1DF4B9C6E083522B9AAA2A2422D284DBC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:45:5d:9c:0b:0c:7d:4a:2d:3b:2a:9a:70:51:
                    d3:44:e0:4d:84:d8:88:94:4a:95:06:0d:86:b7:62:
                    d9:5b:d0:4b:ff:1e:a8:72:b8:90:f0:1e:a7:51:87:
                    6f:71:4a:16:34:0f:96:ba:28:00:5f:da:ef:fb:a7:
                    09:62:b0:b5:20:b9:25:c1:59:90:e0:6c:66:55:01:
                    82:eb:65:53:08:f7:09:e3:26:ae:9d:52:df:1d:94:
                    7a:e6:ad:df:12:66:df:65:b9:03:29:a5:84:9a:a1:
                    90:23:ca:b8:34:8e:bb:0d:4c:5c:33:45:69:50:c8:
                    f2:7d:be:61:fc:3f:c6:dc:6f:75:1c:f1:57:8d:8d:
                    99:51:be:12:4b:6b:f3:f4:e7:f6:95:ee:f7:68:88:
                    62:4e:59:41:81:40:30:a1:aa:40:55:04:f4:77:da:
                    8b:03:d7:0d:b4:c2:5d:e1:94:a1:72:a9:85:44:58:
                    8f:b0:4a:ac:f8:d7:39:72:aa:f9:fd:b2:89:7b:d5:
                    a8:1c:d0:ef:c7:9f:4c:d9:4a:e3:ab:76:97:5b:90:
                    ad:08:d7:44:6f:1a:e2:02:eb:3e:03:b0:50:e4:46:
                    6f:ff:b2:fb:42:bd:cb:b5:57:04:91:2d:69:77:2a:
                    0c:3f:12:77:c5:d8:21:5e:5a:cc:69:ed:66:f4:14:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F9:E1:DF:4B:9C:6E:08:35:22:B9:AA:A2:A2:42:2D:28:4D:BC:9C
            X509v3 Authority Key Identifier:
                keyid:28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/28EE46D4F099B24B9DA8C80842FED277ABB924AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/34352e3138342e3138362e302f32342d3234203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:89:21:bf:b7:59:9d:ce:8f:a4:2c:7e:62:af:53:2c:45:b5:
         58:47:73:f2:2b:a3:a4:90:ce:9e:f2:d6:2c:3e:51:0e:64:e9:
         e1:35:7b:a2:4a:8b:1e:c7:75:98:2b:09:28:b9:fa:e6:f9:9b:
         6f:b5:69:65:08:f0:39:50:cf:b6:db:f6:0b:ec:6f:5d:df:55:
         9e:78:bc:76:1f:70:3a:2c:18:bb:0d:d3:94:aa:6a:c4:f7:d8:
         68:be:27:0b:36:c8:7d:f1:66:53:8d:db:42:0c:0a:8a:ff:de:
         d0:c5:3f:70:2b:9d:5e:60:d8:d2:60:d1:4e:3e:d6:c8:1f:4d:
         83:36:2d:0c:15:ac:2f:c7:f6:2a:21:81:af:be:3d:01:76:a2:
         37:1a:3a:b4:62:8b:d2:7e:da:44:6a:02:0d:ac:74:d5:93:20:
         e0:b1:6a:9d:44:8a:af:2a:24:c9:16:a9:56:e1:45:b2:d0:f0:
         1b:44:db:34:b1:f6:8a:0a:2c:65:c6:d6:c5:ec:fd:ce:cb:0b:
         26:e5:72:7b:7b:ed:41:85:c5:cb:5a:8d:40:f4:26:58:06:2a:
         52:c7:74:7d:d9:fb:38:d0:dc:8e:3f:81:a0:e7:9c:02:8f:e1:
         4d:8c:4b:1a:b6:55:4c:e3:ab:b1:1a:29:0e:24:8b:9b:72:c4:
         61:9c:cd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org