Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32342d3234203d3e20323637333639.roa
File:                     34352e3233342e3137362e302f32342d3234203d3e20323637333639.roa (raw, json)
Hash identifier:          wHNfxcszJkZrelnE+PUJeY3a4ZSMvpBgp2GkX5YllJo=
Subject key identifier:   70:F0:CB:B2:A2:4D:94:BD:FF:25:CA:17:CE:65:71:3E:CD:05:98:CE
Certificate issuer:       /CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
Certificate serial:       6064AEAC2E26F6941E28B9EE107BA675FFC93B83
Authority key identifier: DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32342d3234203d3e20323637333639.roa
Signing time:             Sat 21 Oct 2023 14:54:12 +0000
ROA not before:           Sat 21 Oct 2023 14:49:12 +0000
ROA not after:            Sat 19 Oct 2024 14:54:12 +0000
asID:                     267369
IP address blocks:        45.234.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:64:ae:ac:2e:26:f6:94:1e:28:b9:ee:10:7b:a6:75:ff:c9:3b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
        Validity
            Not Before: Oct 21 14:49:12 2023 GMT
            Not After : Oct 19 14:54:12 2024 GMT
        Subject: CN=70F0CBB2A24D94BDFF25CA17CE65713ECD0598CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:4c:cd:e7:a7:a7:a4:09:a2:22:d6:79:d5:
                    f4:83:eb:45:13:e3:30:24:c9:90:05:f0:82:63:f1:
                    28:71:a2:56:a1:1b:71:82:bc:b4:f5:08:2f:05:9e:
                    ec:7f:21:97:2f:58:43:7c:5b:0c:ff:b3:92:0f:ba:
                    71:73:77:16:03:47:cd:ec:4c:d3:91:c7:13:fc:7f:
                    2d:c8:19:13:69:9b:29:7f:fe:5a:8b:af:02:12:20:
                    10:05:97:b6:ad:58:ac:9c:b1:6e:00:89:93:aa:8f:
                    40:9a:6b:be:fb:12:47:9a:09:2c:f0:bc:32:53:e7:
                    49:58:92:40:67:50:23:0d:53:db:fc:6e:43:1f:68:
                    21:22:01:eb:a6:36:a8:a0:bf:01:f1:25:c6:ef:33:
                    f2:95:1e:63:73:62:96:e6:53:05:b4:da:7c:f0:9b:
                    54:7b:30:06:39:79:0c:88:8f:3a:17:a9:58:d2:08:
                    ff:5b:90:d7:87:61:bf:2d:39:cc:f5:34:a9:f4:1c:
                    07:1f:c4:41:4c:7c:8b:8e:b0:71:81:eb:3d:3f:84:
                    82:e4:a2:9b:10:ce:d7:06:f2:61:ea:98:5b:90:2f:
                    4a:ce:d8:ff:1e:23:c1:6f:9e:f2:01:03:31:13:88:
                    4e:20:b2:8d:23:0b:f5:78:2a:0c:c1:da:bd:11:ec:
                    3b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F0:CB:B2:A2:4D:94:BD:FF:25:CA:17:CE:65:71:3E:CD:05:98:CE
            X509v3 Authority Key Identifier:
                keyid:DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32342d3234203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:16:cf:77:03:71:16:cf:68:e5:05:ce:d7:f7:96:b3:d4:e8:
         68:ea:fd:de:1b:43:6e:31:ea:42:f4:10:10:a3:46:1d:28:ac:
         83:bc:e6:e3:af:6a:85:d8:1f:7b:f9:64:32:3e:ba:53:0d:0f:
         40:b7:ba:f4:32:1e:0e:67:f7:5d:62:6e:39:d7:6e:f6:81:98:
         16:0c:44:91:4e:bf:80:81:18:32:97:24:20:13:49:61:16:ad:
         8e:1f:ac:15:a5:1c:17:d6:67:ff:c7:83:74:98:f6:95:4d:54:
         2f:e0:09:65:90:fe:06:36:3c:b8:81:31:89:4b:5e:0e:a6:ea:
         76:43:24:61:85:d0:0f:08:dc:08:c1:1f:ed:16:66:4c:59:46:
         4e:01:f1:de:eb:c0:89:2a:2e:d7:97:e7:d0:b9:a2:e8:50:7c:
         90:94:1e:d0:1f:25:e8:ab:53:c8:b1:0d:54:61:02:19:c9:cf:
         e7:27:1a:d3:ae:da:7f:78:b9:88:49:58:8d:10:d7:82:96:8f:
         e3:f2:cf:73:ca:cd:0c:d4:fc:36:8d:9d:75:3e:b0:f6:87:10:
         98:d2:ca:fc:4c:50:a0:6f:5e:55:3e:30:94:f5:31:76:24:4a:
         05:8d:4c:26:67:de:87:95:e8:8a:7f:51:c4:d6:f9:4c:53:52:
         7b:bc:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org