Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/34352e3137332e3138302e302f32342d3234203d3e20323731353036.roa
File:                     34352e3137332e3138302e302f32342d3234203d3e20323731353036.roa (raw, json)
Hash identifier:          THG+4p6+thkMi1yvy1aKeDVpAqdOk9Lcr7LVsk2OlGo=
Subject key identifier:   F3:63:30:82:17:1A:37:D7:C1:3C:88:9D:50:2A:8D:9C:F9:CF:7B:CE
Certificate issuer:       /CN=9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D
Certificate serial:       05BD395B1D47C7B6D5A57F34A41EFAF8F0094D68
Authority key identifier: 9E:9B:34:E6:6E:A4:1B:1D:67:A0:A0:3F:CF:EC:C7:46:38:C5:C5:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/34352e3137332e3138302e302f32342d3234203d3e20323731353036.roa
Signing time:             Fri 03 Mar 2023 14:52:00 +0000
ROA not before:           Fri 03 Mar 2023 14:47:00 +0000
ROA not after:            Fri 01 Mar 2024 14:52:00 +0000
asID:                     271506
IP address blocks:        45.173.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bd:39:5b:1d:47:c7:b6:d5:a5:7f:34:a4:1e:fa:f8:f0:09:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D
        Validity
            Not Before: Mar  3 14:47:00 2023 GMT
            Not After : Mar  1 14:52:00 2024 GMT
        Subject: CN=3082010A0282010100AE14839D171D68574B98AAB28E7AE7CD07F347D74DA1759DB35F92CF71C029484844267A3F6003455F4A8515D2D4F7392ABBE85E94096B1B1168AEE225FAD6092020C43DA3EEB505BB5EF2A2F31B837B98E56A35B7013AD7B12665676451224E8002DE5C7DE79F3C0DA2702ECE6B7126DE8932B17645909BD9AA4A580423FE6E43CEB44512CEA988AF5AAB5468BD374E9FCC95F2A497FDE8FE5D469B5D40F86C3CE64E021AEDC064DB2774EAEE37F010BA03CB57FB48133620C2904D373BCB3161AE7EF2A34E6929A59E1958F7DBCCE99A93DA18C0558A11923A305F9D73EDB02A44357F2A06B35B3126AE1F051F5AEE1870D7AA2CFFCE9D91675C225833AC3F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:83:9d:17:1d:68:57:4b:98:aa:b2:8e:7a:
                    e7:cd:07:f3:47:d7:4d:a1:75:9d:b3:5f:92:cf:71:
                    c0:29:48:48:44:26:7a:3f:60:03:45:5f:4a:85:15:
                    d2:d4:f7:39:2a:bb:e8:5e:94:09:6b:1b:11:68:ae:
                    e2:25:fa:d6:09:20:20:c4:3d:a3:ee:b5:05:bb:5e:
                    f2:a2:f3:1b:83:7b:98:e5:6a:35:b7:01:3a:d7:b1:
                    26:65:67:64:51:22:4e:80:02:de:5c:7d:e7:9f:3c:
                    0d:a2:70:2e:ce:6b:71:26:de:89:32:b1:76:45:90:
                    9b:d9:aa:4a:58:04:23:fe:6e:43:ce:b4:45:12:ce:
                    a9:88:af:5a:ab:54:68:bd:37:4e:9f:cc:95:f2:a4:
                    97:fd:e8:fe:5d:46:9b:5d:40:f8:6c:3c:e6:4e:02:
                    1a:ed:c0:64:db:27:74:ea:ee:37:f0:10:ba:03:cb:
                    57:fb:48:13:36:20:c2:90:4d:37:3b:cb:31:61:ae:
                    7e:f2:a3:4e:69:29:a5:9e:19:58:f7:db:cc:e9:9a:
                    93:da:18:c0:55:8a:11:92:3a:30:5f:9d:73:ed:b0:
                    2a:44:35:7f:2a:06:b3:5b:31:26:ae:1f:05:1f:5a:
                    ee:18:70:d7:aa:2c:ff:ce:9d:91:67:5c:22:58:33:
                    ac:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:63:30:82:17:1A:37:D7:C1:3C:88:9D:50:2A:8D:9C:F9:CF:7B:CE
            X509v3 Authority Key Identifier:
                keyid:9E:9B:34:E6:6E:A4:1B:1D:67:A0:A0:3F:CF:EC:C7:46:38:C5:C5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/34352e3137332e3138302e302f32342d3234203d3e20323731353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:dd:7e:ff:47:3c:55:7f:fc:9f:54:c7:66:96:40:9d:0e:43:
         7e:9f:87:0b:83:fc:f9:6e:a0:48:18:bc:4f:85:86:a4:6b:36:
         f6:93:84:bb:a0:0c:c0:72:25:7c:01:b8:6e:23:cf:a2:84:48:
         17:50:c6:e7:50:7b:cf:5e:cb:78:56:97:9c:5c:c6:08:8d:e8:
         ae:64:ee:41:0b:4d:21:f2:66:e1:d6:8a:f4:d1:50:16:e6:f5:
         b6:66:d8:0c:77:62:39:24:6a:13:3f:0d:0f:9b:86:87:f7:c7:
         a2:2e:36:4e:7d:e3:d2:69:a3:e4:78:eb:c7:2b:2c:bd:60:34:
         e7:cc:c4:f1:57:f7:75:4b:73:ff:3b:33:97:3e:ca:67:c3:45:
         27:a2:1e:14:2e:a5:d1:a0:61:3f:2a:93:6e:9f:34:80:5f:09:
         62:81:18:78:e8:c9:58:bb:5f:fa:28:7b:04:9b:06:6a:8d:ed:
         cd:bc:fa:41:76:f2:00:de:9c:5f:01:87:60:12:bb:71:82:35:
         2c:23:0f:f6:ac:75:03:87:ee:8b:dd:85:c2:f5:d0:66:19:ac:
         80:78:a2:1c:1f:f8:3a:3e:d2:1d:79:b6:ab:07:b3:b2:8e:eb:
         d6:ca:1b:e1:8d:3b:a2:43:36:e5:a2:66:2c:fe:da:60:3d:06:
         78:bf:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org