Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/34352e3138302e38342e302f32322d3234203d3e20323639313339.roa
File:                     34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (raw, json)
Hash identifier:          4OjSze0hujDgJEe0to0RdG3m2sTcCkQc2Runauzz3so=
Subject key identifier:   17:F9:39:4B:02:C8:67:91:B7:72:0C:FD:EF:38:AF:2A:AF:16:76:72
Certificate issuer:       /CN=DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1
Certificate serial:       593A076B361DABEDDA74EB55624B6E372F2279D3
Authority key identifier: DE:A4:6C:6D:CA:6F:3B:35:A1:0B:8A:9B:45:6D:1F:7E:13:75:07:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/34352e3138302e38342e302f32322d3234203d3e20323639313339.roa
Signing time:             Mon 25 Mar 2024 20:34:06 +0000
ROA not before:           Mon 25 Mar 2024 20:29:06 +0000
ROA not after:            Mon 24 Mar 2025 20:34:06 +0000
asID:                     269139
IP address blocks:        45.180.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3a:07:6b:36:1d:ab:ed:da:74:eb:55:62:4b:6e:37:2f:22:79:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1
        Validity
            Not Before: Mar 25 20:29:06 2024 GMT
            Not After : Mar 24 20:34:06 2025 GMT
        Subject: CN=17F9394B02C86791B7720CFDEF38AF2AAF167672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:5b:d6:8f:fc:23:57:0b:65:92:31:04:1d:
                    01:a6:98:56:a6:21:58:14:17:47:cc:fe:34:64:30:
                    cd:f2:31:b4:72:fa:ec:17:68:09:a0:8d:99:8e:e5:
                    df:8c:b6:c3:f4:1f:5a:a7:53:4a:e2:7d:bc:e3:75:
                    be:1c:28:29:0e:20:7f:8f:11:30:81:85:a1:f5:af:
                    0d:f3:ef:fd:e7:e3:7b:89:03:de:36:b4:6f:6e:86:
                    a0:0d:c2:78:3f:f8:b0:78:5e:44:87:ca:28:c0:15:
                    c0:e2:85:c9:0a:a7:54:35:b7:ea:f7:2a:54:6e:10:
                    7a:ab:d9:73:35:8a:f4:95:c5:28:0f:d4:00:b6:35:
                    f2:5b:0b:33:17:33:69:ce:b0:7c:f8:94:95:cd:c5:
                    01:02:9a:35:53:86:a9:c1:0d:45:66:36:e2:6f:01:
                    f2:05:d4:75:58:75:d2:30:81:c6:fc:b4:d1:a7:c9:
                    21:a5:62:6a:2a:ca:3e:e1:7f:fa:d8:21:f7:ba:84:
                    fb:27:5f:36:71:0e:5a:18:2e:07:33:b7:99:c9:d9:
                    56:4a:4c:22:fb:fb:b5:cb:ff:be:9f:c5:68:09:0b:
                    49:8f:bb:d0:d8:5f:db:4c:ea:4e:47:54:9d:43:b4:
                    b0:d6:21:5a:26:ab:77:36:25:03:26:76:66:d3:ea:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F9:39:4B:02:C8:67:91:B7:72:0C:FD:EF:38:AF:2A:AF:16:76:72
            X509v3 Authority Key Identifier:
                keyid:DE:A4:6C:6D:CA:6F:3B:35:A1:0B:8A:9B:45:6D:1F:7E:13:75:07:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/34352e3138302e38342e302f32322d3234203d3e20323639313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:30:b9:66:36:75:33:c5:24:e2:28:1b:9a:db:5e:25:1a:85:
         88:19:07:9f:98:bf:0d:50:d3:ce:2a:d6:d1:5e:20:85:99:d9:
         ef:42:bf:be:2f:2a:06:7c:f5:0d:b3:e5:ac:bd:53:f2:95:56:
         2b:8d:91:08:5a:53:01:1c:4c:5c:1a:f8:10:5d:35:f7:84:76:
         d2:bc:bb:a5:84:ac:ca:96:a5:c8:0f:74:70:57:f0:e3:5b:9e:
         2a:46:54:02:45:5b:82:ca:fa:81:2d:08:5d:67:e8:5b:49:31:
         49:a4:79:1e:0d:39:93:a5:62:40:93:f5:06:e8:f7:99:d7:9a:
         60:e0:f3:ba:c0:cc:9c:34:75:fd:ed:22:ce:c8:58:a8:44:f8:
         60:5e:84:82:7e:a0:3a:a1:d9:cd:dc:40:ca:96:81:44:d6:da:
         11:19:38:5e:d3:15:22:19:70:c9:60:ef:73:fe:21:b0:cb:03:
         07:09:64:c8:78:21:03:b0:d0:f8:f7:a7:77:4c:4d:e6:55:50:
         42:c3:2c:ef:9b:d4:13:0f:c2:8c:8c:d7:f1:e6:7d:ce:e3:eb:
         f7:68:97:0e:8f:ab:20:78:79:61:e8:fa:fe:9e:03:11:78:49:
         78:24:d7:27:ae:89:65:9b:dc:83:67:e5:7d:1b:16:9c:c4:10:
         2a:56:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org