Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133332e302f32342d3234203d3e20323731323733.roa
File:                     34352e3232392e3133332e302f32342d3234203d3e20323731323733.roa (raw, json)
Hash identifier:          2Jds5WhLC13fMX482pDl2GjaE+eQxJ3BKm6lVopen7w=
Subject key identifier:   95:36:51:C4:55:6B:17:4B:7E:66:55:B2:09:E7:69:38:89:A1:EF:28
Certificate issuer:       /CN=45B91BE0F81348BD8D38FDD7887981473CE3720E
Certificate serial:       415C73293A4D242FA0899CEF02D91F36AA3FE8E1
Authority key identifier: 45:B9:1B:E0:F8:13:48:BD:8D:38:FD:D7:88:79:81:47:3C:E3:72:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45B91BE0F81348BD8D38FDD7887981473CE3720E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133332e302f32342d3234203d3e20323731323733.roa
Signing time:             Thu 26 Oct 2023 11:54:32 +0000
ROA not before:           Thu 26 Oct 2023 11:49:32 +0000
ROA not after:            Thu 24 Oct 2024 11:54:32 +0000
asID:                     271273
IP address blocks:        45.229.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5c:73:29:3a:4d:24:2f:a0:89:9c:ef:02:d9:1f:36:aa:3f:e8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45B91BE0F81348BD8D38FDD7887981473CE3720E
        Validity
            Not Before: Oct 26 11:49:32 2023 GMT
            Not After : Oct 24 11:54:32 2024 GMT
        Subject: CN=953651C4556B174B7E6655B209E7693889A1EF28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:3c:71:36:9d:e9:3c:87:9e:34:e7:07:66:
                    d2:3b:75:96:19:34:9d:15:13:c7:b0:60:d6:47:10:
                    51:3d:ec:9d:8c:cc:63:20:2b:46:1d:f5:56:d7:84:
                    da:09:d4:1a:9a:70:ae:5c:53:99:1c:e5:74:7b:63:
                    ec:f5:a2:5b:e2:90:66:73:2a:f8:82:b5:f3:77:f4:
                    ed:97:c8:ed:ef:21:4a:1c:c2:f1:15:fa:b6:8b:95:
                    38:84:56:0e:94:5b:f9:8f:3b:d6:ac:87:5d:61:4e:
                    21:c6:78:2c:95:3a:f4:0b:09:e1:96:b7:13:e4:ea:
                    2c:a8:2a:23:68:e5:d1:58:da:03:2a:fe:24:02:d7:
                    15:7d:99:d6:09:dd:56:47:54:69:69:99:7f:b4:76:
                    7d:bf:10:15:8d:13:0c:38:2d:8b:2c:f5:29:5c:38:
                    4f:2b:a7:52:bf:c2:bc:0d:9c:e8:bc:d6:2c:bb:97:
                    c6:03:69:fa:4e:d4:db:94:a2:05:b8:5a:6c:92:ff:
                    1c:0c:fe:e4:13:5b:40:3a:e8:fe:18:c0:6f:23:75:
                    5c:d1:c6:83:2d:4e:97:de:c5:bd:fb:de:04:31:3e:
                    7f:4c:77:62:f0:ee:97:3b:fa:a2:d2:4c:88:04:e4:
                    cc:df:6c:c8:c4:00:1c:81:1c:66:30:34:79:ca:2e:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:36:51:C4:55:6B:17:4B:7E:66:55:B2:09:E7:69:38:89:A1:EF:28
            X509v3 Authority Key Identifier:
                keyid:45:B9:1B:E0:F8:13:48:BD:8D:38:FD:D7:88:79:81:47:3C:E3:72:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/45B91BE0F81348BD8D38FDD7887981473CE3720E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45B91BE0F81348BD8D38FDD7887981473CE3720E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133332e302f32342d3234203d3e20323731323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7f:04:64:4c:f4:f3:b4:68:0c:e7:01:57:88:1b:c9:2f:38:
         ab:3a:60:5a:05:80:a3:d9:e5:78:72:b9:ae:0d:51:21:5f:c4:
         59:f2:f3:ef:1a:7c:d2:bb:b2:4c:3a:a4:f3:a4:09:d6:cf:a3:
         93:a0:d1:24:0d:27:76:9c:6a:6e:db:c5:09:44:02:85:a8:1d:
         76:30:e6:66:de:1e:1e:a0:d2:20:fe:34:9a:aa:e9:6b:77:03:
         fe:db:a3:cf:0b:5c:f9:55:69:59:ee:36:06:5a:ad:e9:79:f6:
         21:ad:6f:3c:08:35:66:45:7b:72:20:d9:1e:30:ad:aa:26:13:
         f0:50:57:52:fc:aa:51:0f:56:67:93:f7:13:f2:45:d0:53:74:
         27:e3:ad:33:45:69:43:aa:d3:e1:b1:38:83:91:15:8e:7c:f1:
         36:10:4e:79:58:d2:90:50:7e:c6:55:bc:75:72:4b:13:34:49:
         bb:d2:77:65:ff:35:81:5b:3a:07:64:2a:ba:08:2b:ca:62:2c:
         64:cb:c0:a9:87:a1:4c:09:48:c2:c8:dc:0d:22:9b:11:37:49:
         ca:08:83:9f:2a:13:c6:dc:b1:e9:12:8a:a3:e1:7f:04:e7:67:
         89:28:67:30:59:28:36:4a:d3:e5:78:9e:7a:10:bf:96:f5:00:
         2e:2f:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org