Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39392e302f32342d3234203d3e20323639313238.roa
File:                     34352e3138302e39392e302f32342d3234203d3e20323639313238.roa (raw, json)
Hash identifier:          rOYxVcuWRF3RQoAQpxarSS5fZ0xLMY3nOyzrBxycgAc=
Subject key identifier:   1F:20:2C:9D:F0:CE:53:79:E0:F0:59:A0:AA:A2:99:D6:04:19:37:B8
Certificate issuer:       /CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
Certificate serial:       34489781E907A7DD424DB0C6A8C49EA19185EE70
Authority key identifier: BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39392e302f32342d3234203d3e20323639313238.roa
Signing time:             Tue 16 May 2023 02:18:57 +0000
ROA not before:           Tue 16 May 2023 02:13:57 +0000
ROA not after:            Tue 14 May 2024 02:18:57 +0000
asID:                     269128
IP address blocks:        45.180.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:48:97:81:e9:07:a7:dd:42:4d:b0:c6:a8:c4:9e:a1:91:85:ee:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
        Validity
            Not Before: May 16 02:13:57 2023 GMT
            Not After : May 14 02:18:57 2024 GMT
        Subject: CN=1F202C9DF0CE5379E0F059A0AAA299D6041937B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:b0:e7:5b:73:7f:5d:bd:c4:00:48:6e:1f:
                    7e:58:b6:6f:18:fd:ed:df:6e:f6:b2:cd:d0:03:65:
                    d2:f5:65:8b:1d:93:11:37:0d:81:c8:05:a8:b9:14:
                    da:cf:35:ac:b0:3d:47:be:d7:97:96:55:af:f2:f5:
                    23:0e:22:59:49:63:b8:6b:77:e6:8b:b9:88:e7:97:
                    b4:29:f9:b7:f1:16:24:cd:5c:28:6b:03:90:4f:3a:
                    18:3a:56:e9:f7:a7:42:b7:6e:46:71:86:72:5d:29:
                    52:a4:83:42:ec:1c:49:92:c4:79:bf:8c:7f:c3:a4:
                    4f:3c:62:8f:a2:db:9b:d6:9e:31:3a:3c:96:9e:b1:
                    ef:fc:a7:af:ba:d5:1e:80:0a:3f:3b:c7:2d:da:66:
                    5b:34:d1:5b:cd:ed:75:cf:55:45:2e:30:93:43:e9:
                    4c:67:a9:9a:c0:39:b9:a3:4a:b2:eb:d3:d7:44:7d:
                    76:6b:22:d2:e3:0c:a2:7f:01:ba:5e:4a:08:ea:86:
                    66:97:93:cb:10:5c:00:63:ee:2a:3d:e4:2e:1f:60:
                    7b:a6:dc:cb:65:4a:d4:97:30:b3:5f:ba:39:ba:ba:
                    e2:15:f9:30:0b:69:7f:c2:ef:1a:43:6a:07:62:3a:
                    1f:33:6e:35:7a:e5:3b:c2:71:da:f5:df:ed:75:5a:
                    d4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:20:2C:9D:F0:CE:53:79:E0:F0:59:A0:AA:A2:99:D6:04:19:37:B8
            X509v3 Authority Key Identifier:
                keyid:BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39392e302f32342d3234203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:a4:ef:d7:87:d6:3a:56:e9:46:94:36:5a:8a:a1:3f:a9:6f:
         1c:a5:e0:e6:50:6f:8a:6b:87:a4:b8:0d:56:1e:fa:17:cf:80:
         e9:f2:4b:24:e1:ba:a3:63:62:d0:5e:90:20:6d:ff:1f:34:d9:
         20:1b:57:6c:99:e4:6c:21:f6:1e:ea:f2:1d:60:8a:a4:45:22:
         a3:e7:a4:90:a5:bf:31:65:71:96:56:fe:c3:67:95:f0:c6:93:
         02:bf:a1:51:f3:67:41:d4:d5:ce:2d:78:da:0a:53:22:77:4c:
         61:0c:4d:e2:2d:06:b6:ad:f2:b4:ee:a3:d6:fb:47:70:ef:b6:
         c0:1c:f8:10:b6:29:c0:3b:b6:b9:28:61:81:f2:9e:ba:33:a9:
         62:f0:8f:ea:b1:0f:f5:76:0a:e7:f6:65:75:87:4e:a3:1b:ea:
         d0:54:0e:d3:c8:48:af:0a:3c:ca:9c:ce:cd:1c:28:4f:65:d4:
         b2:c1:93:43:dd:6e:e9:6c:ac:49:ab:f1:db:ab:9c:41:d0:ed:
         d2:27:9b:38:b1:98:58:a3:42:df:29:a3:30:05:ca:d9:bf:57:
         24:4a:d1:84:64:9d:1e:ab:1f:ef:69:5f:a0:67:b1:2e:ce:87:
         11:2e:00:be:cf:a6:08:ca:b0:ab:18:1f:86:f6:2b:f6:7b:be:
         b0:4e:e5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org