Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa
File:                     34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa (raw, json)
Hash identifier:          H1susl+MzUsfEDkfUEtYOzQdAavb9YSwcF+5/1OAjkg=
Subject key identifier:   03:7E:33:D3:7A:4C:B2:DC:EC:55:CB:FD:39:F9:A8:4F:FA:4F:6C:BA
Certificate issuer:       /CN=C44E62B2983D2F0879112A160E42CAF2382FA628
Certificate serial:       0EB0E99D76A09A1D78144B36AE7EC42F181DD82C
Authority key identifier: C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa
Signing time:             Tue 07 Nov 2023 20:35:38 +0000
ROA not before:           Tue 07 Nov 2023 20:30:38 +0000
ROA not after:            Tue 05 Nov 2024 20:35:38 +0000
asID:                     267177
IP address blocks:        45.230.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b0:e9:9d:76:a0:9a:1d:78:14:4b:36:ae:7e:c4:2f:18:1d:d8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C44E62B2983D2F0879112A160E42CAF2382FA628
        Validity
            Not Before: Nov  7 20:30:38 2023 GMT
            Not After : Nov  5 20:35:38 2024 GMT
        Subject: CN=037E33D37A4CB2DCEC55CBFD39F9A84FFA4F6CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:74:de:ca:0e:52:3b:f8:e0:0f:bb:3f:42:
                    23:89:02:35:74:d9:bb:2f:be:60:84:74:cb:13:23:
                    39:b4:b9:ac:94:56:5e:44:12:09:be:ee:56:2f:c8:
                    2d:0a:22:d0:e8:ac:0e:ca:ab:ff:6c:f3:c8:66:db:
                    8d:f1:c1:d2:5d:a5:41:7b:4d:66:5e:41:61:cb:c8:
                    f6:6c:3a:7d:1b:a0:0f:59:22:7d:e5:0b:81:a2:98:
                    43:3d:0f:c5:01:5f:81:b1:22:21:1a:b1:96:f0:19:
                    2d:4c:a7:f4:c4:07:00:b7:2f:19:63:15:e4:ad:37:
                    01:de:46:14:f1:b4:31:ef:3e:96:99:6a:a6:f6:ad:
                    11:ea:34:8a:8c:ab:ea:88:4a:bd:16:3e:51:2b:02:
                    ff:f1:86:d2:25:66:46:49:ab:ac:3e:cb:f7:3f:b4:
                    9c:4e:0a:ee:b9:06:9d:2d:dc:c1:b5:1b:50:5a:4d:
                    20:85:ef:4b:d0:ce:6f:bc:cc:c4:b9:b5:38:ce:fb:
                    b2:d5:dd:4c:63:1e:af:bd:fc:c9:6d:d8:15:05:85:
                    1b:97:4b:15:09:48:fa:ef:19:15:16:95:0b:ae:52:
                    36:55:b6:5a:6e:a9:b7:84:47:3f:5f:15:51:bd:3a:
                    f6:07:de:6e:ce:d9:0b:2a:53:d1:06:a2:46:aa:c1:
                    9e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:33:D3:7A:4C:B2:DC:EC:55:CB:FD:39:F9:A8:4F:FA:4F:6C:BA
            X509v3 Authority Key Identifier:
                keyid:C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/C44E62B2983D2F0879112A160E42CAF2382FA628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:32:7b:9a:42:1d:6b:3b:10:58:ec:a2:dc:d1:3b:58:90:
         0f:c1:1a:36:ed:40:dd:b4:68:83:20:1e:f2:e2:6c:ad:4a:f8:
         80:2b:9f:ff:f6:7a:af:8d:7b:ff:52:c7:62:a0:72:80:f7:94:
         3c:f5:0b:af:36:ab:7b:84:8a:26:b5:be:a0:9f:2f:a7:a9:a8:
         e6:7c:30:93:6f:d3:0c:d4:ae:a6:5b:cb:83:65:4d:6a:a3:b8:
         1a:c6:ac:a6:1e:29:15:18:b0:a9:71:c4:a4:32:ff:ab:46:43:
         dc:6e:09:e0:42:32:dc:44:ec:48:70:81:33:fb:3e:44:d9:f3:
         2a:7b:fb:1c:d9:5d:19:09:79:25:b5:04:1e:55:c6:de:06:08:
         9b:42:f1:cb:d5:2e:c8:97:8f:c2:d0:3d:f6:70:83:68:b6:fc:
         6d:d1:8c:c5:a5:fa:10:90:3b:71:9b:e4:fb:b0:9b:d8:08:03:
         9d:10:15:1e:92:e6:8b:cc:e7:08:1b:01:b5:6f:54:2a:6f:90:
         e7:d6:04:95:57:cd:9a:fe:6a:9d:ad:08:2a:b9:32:4a:17:25:
         6e:a1:24:e1:9d:f0:9f:43:e4:f6:fd:ab:e0:a1:23:07:7b:20:
         cc:ea:28:94:86:9d:95:e3:e6:f7:09:c2:79:f3:7c:0b:10:9f:
         9e:6d:6e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org