Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233372e302f32342d3234203d3e20323637313736.roa
File:                     34352e3233302e3233372e302f32342d3234203d3e20323637313736.roa (raw, json)
Hash identifier:          QexDJTfQqh2hHAY7xNFeh1GmdPISDtigS/X1DetIoIQ=
Subject key identifier:   14:89:0E:33:F2:F3:9E:97:2E:EF:B1:AD:6B:2C:8E:CD:1F:7A:DC:1D
Certificate issuer:       /CN=5EA554640E24C8A21AF8DE1A497FDC6F9592F374
Certificate serial:       717B0954C3E3DFCBB180FA23533429D71A96AAF5
Authority key identifier: 5E:A5:54:64:0E:24:C8:A2:1A:F8:DE:1A:49:7F:DC:6F:95:92:F3:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233372e302f32342d3234203d3e20323637313736.roa
Signing time:             Wed 18 Oct 2023 17:45:10 +0000
ROA not before:           Wed 18 Oct 2023 17:40:10 +0000
ROA not after:            Wed 16 Oct 2024 17:45:10 +0000
asID:                     267176
IP address blocks:        45.230.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7b:09:54:c3:e3:df:cb:b1:80:fa:23:53:34:29:d7:1a:96:aa:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA554640E24C8A21AF8DE1A497FDC6F9592F374
        Validity
            Not Before: Oct 18 17:40:10 2023 GMT
            Not After : Oct 16 17:45:10 2024 GMT
        Subject: CN=14890E33F2F39E972EEFB1AD6B2C8ECD1F7ADC1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:24:b8:77:59:11:64:7e:83:cd:d9:50:70:
                    a6:54:95:30:f1:7b:2b:cd:2e:f2:0f:f3:b3:f9:d3:
                    f9:c1:52:12:fb:26:d7:e7:46:1d:bb:52:9e:91:1e:
                    5f:d9:c9:ad:a1:42:3b:e2:33:52:a9:83:71:5c:7d:
                    f7:32:6d:38:d5:ab:cb:89:53:2c:cd:c9:22:00:21:
                    81:97:41:8a:02:3f:f4:5b:1b:01:bd:6e:60:6e:57:
                    0c:d6:27:69:fb:94:ed:d3:6d:68:f7:67:db:c4:36:
                    c5:b7:bb:bc:fa:61:33:07:a8:a2:73:52:b0:48:3e:
                    86:51:33:5f:5b:5f:2c:d7:58:2e:f4:24:1a:6f:07:
                    d2:b8:a9:7a:f5:b7:a4:8b:a4:18:4d:12:9c:fd:19:
                    e2:02:c9:a4:b9:65:b4:59:86:af:98:09:7c:f0:62:
                    53:00:ff:a7:cf:10:a4:b3:31:33:f6:ea:e2:b4:e5:
                    06:30:b3:bf:bb:4d:1e:b6:0c:d3:9e:8a:74:6e:50:
                    fc:80:22:3d:8e:56:81:bd:e6:8d:a3:9a:55:88:54:
                    a4:f7:1d:80:9a:48:98:fd:18:c7:8b:ed:09:79:63:
                    85:a0:09:a7:64:bb:90:3c:2d:61:86:17:3e:3c:ec:
                    be:c4:db:95:c6:00:2d:e1:4d:59:29:0e:9c:d5:66:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:89:0E:33:F2:F3:9E:97:2E:EF:B1:AD:6B:2C:8E:CD:1F:7A:DC:1D
            X509v3 Authority Key Identifier:
                keyid:5E:A5:54:64:0E:24:C8:A2:1A:F8:DE:1A:49:7F:DC:6F:95:92:F3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233372e302f32342d3234203d3e20323637313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:e1:b8:4d:92:4c:2d:e4:38:45:d1:a5:41:df:99:18:4e:
         3c:4a:fe:4c:ab:1c:80:df:21:c6:e1:0f:1a:1c:e5:b7:28:15:
         35:d2:f0:6a:a6:a4:22:f4:84:1d:a0:72:31:74:6f:b2:27:6e:
         6d:9f:22:b3:00:b1:5f:54:61:a8:b7:8f:f8:60:cc:82:4b:8e:
         ff:b3:cb:a3:24:de:b5:9c:c9:69:77:e0:19:8f:dc:fe:96:74:
         14:ae:87:84:83:28:41:df:14:48:63:f3:f2:fe:66:9c:26:32:
         8e:0e:83:b0:b5:ba:12:f8:3c:bf:b2:ee:1d:34:7d:06:15:a0:
         74:2d:ca:ee:11:0d:1e:5e:91:92:90:b1:80:37:f6:4d:ea:ee:
         ad:23:72:7c:0c:b9:e8:2c:29:b9:2e:f3:56:c2:de:85:85:84:
         ee:7b:84:8c:ec:28:14:57:95:ad:5f:8e:bc:bf:38:c0:2d:ae:
         e4:9a:ef:09:3d:2a:ce:78:ee:e3:59:3c:3c:cf:a9:70:6a:a6:
         1f:b3:01:2c:d2:fc:90:e1:04:d8:e5:6c:76:42:80:76:76:af:
         e4:c3:40:3a:88:8e:49:55:19:2e:ff:dc:26:a9:13:57:86:66:
         94:3b:56:6f:e8:42:be:d2:5a:ab:73:0a:e4:61:1c:21:f7:ac:
         d4:96:fe:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org