Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323939353236.roa
File:                     34352e3138362e3234342e302f32322d3234203d3e20323939353236.roa (raw, json)
Hash identifier:          88XJW5cRlBCEP/vY6JLSjp4S3VYTzeqr/36Jo3gG+z8=
Subject key identifier:   F3:06:52:12:75:EC:EA:04:E6:00:D2:86:3B:3D:BB:CB:56:45:0E:3B
Certificate issuer:       /CN=3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5
Certificate serial:       50FD858564ADABEBD0A42BFB493BB49DF2C9D832
Authority key identifier: 3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323939353236.roa
Signing time:             Wed 31 Jan 2024 16:06:22 +0000
ROA not before:           Wed 31 Jan 2024 16:01:22 +0000
ROA not after:            Wed 29 Jan 2025 16:06:22 +0000
asID:                     299526
IP address blocks:        45.186.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fd:85:85:64:ad:ab:eb:d0:a4:2b:fb:49:3b:b4:9d:f2:c9:d8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5
        Validity
            Not Before: Jan 31 16:01:22 2024 GMT
            Not After : Jan 29 16:06:22 2025 GMT
        Subject: CN=F306521275ECEA04E600D2863B3DBBCB56450E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:12:43:20:9c:00:a7:7d:18:56:50:03:4d:
                    57:50:f4:7e:5d:43:c5:3e:57:f2:83:9f:d0:27:76:
                    43:6b:1c:5d:dc:d3:b3:a4:7d:ad:8a:30:5e:a3:a7:
                    92:9f:b6:34:e5:59:47:68:4e:6c:0e:c5:b9:d2:85:
                    05:4c:34:50:bb:10:ab:29:2c:58:51:78:7c:52:be:
                    68:9e:52:a1:0c:01:1d:c2:f2:b3:b7:b8:1f:a2:06:
                    1a:26:55:ef:05:2e:4d:f1:6e:57:e2:e9:cb:89:a5:
                    c7:50:ec:9c:4f:1f:31:bd:5f:65:33:61:ae:e7:38:
                    b8:82:eb:ac:66:aa:9a:79:9d:11:73:9e:35:40:23:
                    c0:24:bb:c1:52:8e:c1:01:b8:81:bd:dc:d7:ae:f6:
                    39:7c:8d:25:91:74:5c:9f:bc:82:76:45:a8:22:c0:
                    e2:d7:f8:62:ef:f2:4a:bf:8e:50:a3:2f:6f:f5:4f:
                    ba:28:be:67:5c:85:b4:68:1e:1e:1e:81:5b:ee:dd:
                    cb:66:8c:15:fd:cc:1c:2f:53:85:d6:19:36:ce:65:
                    28:81:6a:1e:a6:76:af:ed:fd:a3:b5:43:4b:d1:94:
                    76:08:ae:e9:ce:b2:31:08:e5:7b:6b:30:cd:6a:3b:
                    8f:66:61:31:89:ea:c9:6e:b8:28:4c:fb:52:77:4c:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:06:52:12:75:EC:EA:04:E6:00:D2:86:3B:3D:BB:CB:56:45:0E:3B
            X509v3 Authority Key Identifier:
                keyid:3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323939353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:f1:b9:6c:95:d5:6f:e1:59:79:8a:d3:66:35:13:9b:57:
         35:7a:ba:9c:d1:27:1b:b6:aa:5f:cf:12:1d:4e:ba:cc:fe:a6:
         df:77:8b:cd:86:52:2c:cb:d7:35:57:25:be:91:35:22:4e:41:
         36:43:14:07:6a:2a:27:ee:30:0c:b0:04:47:9a:56:c6:08:7e:
         e0:3e:01:42:5c:2b:df:b7:e3:50:65:ac:6c:5c:1f:ca:3f:c0:
         2c:cc:1e:ea:b3:89:16:cd:77:58:64:2d:db:64:4a:e1:e5:43:
         87:ef:d6:8c:7e:ba:53:00:59:4d:15:f0:07:51:31:41:18:f2:
         7b:08:e0:df:6a:91:2d:d6:9f:d7:fc:47:71:44:c0:d8:71:ac:
         65:34:78:6e:6e:90:d9:99:8b:4e:3d:81:b3:ab:a7:ff:03:41:
         7f:a8:c0:53:c0:53:66:ad:7f:96:ca:7d:12:cb:4e:ee:e3:38:
         85:bb:d4:7f:05:8f:87:87:e3:d2:ec:66:7e:6c:e2:a6:68:9a:
         44:db:db:b9:f8:8c:8f:bf:9f:b7:b0:c4:e4:0d:fd:54:00:39:
         bb:03:9b:51:52:27:d5:cc:87:64:0c:4f:50:e3:d4:a1:5e:26:
         dd:d0:63:90:ae:26:df:03:64:73:a9:76:df:c9:31:9b:d6:72:
         21:36:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org