Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232342e302f32322d3232203d3e20323637333330.roa
File:                     34352e3233332e3232342e302f32322d3232203d3e20323637333330.roa (raw, json)
Hash identifier:          8z9OXrgLB8mLBZYsxtPRM6NtMEzAbV9PBI3mH5V4nSs=
Subject key identifier:   77:51:A7:30:B4:CD:33:73:61:C0:34:92:D5:60:32:F9:72:59:1C:83
Certificate issuer:       /CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Certificate serial:       1913E90BEB4F4006909DE229910474D643941E86
Authority key identifier: D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232342e302f32322d3232203d3e20323637333330.roa
Signing time:             Wed 03 Apr 2024 21:51:57 +0000
ROA not before:           Wed 03 Apr 2024 21:46:57 +0000
ROA not after:            Wed 02 Apr 2025 21:51:57 +0000
asID:                     267330
IP address blocks:        45.233.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:13:e9:0b:eb:4f:40:06:90:9d:e2:29:91:04:74:d6:43:94:1e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1522A5217E184CA7B071011FCF96A20332AF33F
        Validity
            Not Before: Apr  3 21:46:57 2024 GMT
            Not After : Apr  2 21:51:57 2025 GMT
        Subject: CN=7751A730B4CD337361C03492D56032F972591C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:66:b6:7e:0b:0f:49:68:15:25:52:a3:5f:
                    8a:3a:26:87:95:bd:93:18:e1:ba:34:30:63:46:59:
                    f3:04:88:a4:50:55:e4:58:7f:99:17:d0:a8:26:5f:
                    c6:23:8d:77:2f:56:17:ff:e7:5f:26:6b:90:72:ee:
                    f5:8d:d6:2c:15:5a:58:5c:9f:ab:7e:1b:54:dc:31:
                    aa:d7:2d:b2:d6:1e:bf:0a:06:2d:6d:44:0f:8f:8c:
                    14:08:1b:41:8d:41:15:5b:25:2a:5a:5e:aa:8c:6f:
                    73:f1:65:1c:7e:dd:d7:ff:bc:57:a8:40:3a:bd:46:
                    bc:f7:5d:e2:3b:97:42:9b:66:11:c3:fa:42:f1:b7:
                    f3:ff:bd:8d:c0:c6:c7:4d:40:a2:23:5c:43:3b:2c:
                    d2:f8:fc:df:75:41:68:bc:b7:6b:4e:34:fe:dc:fd:
                    35:74:0f:f7:5b:38:61:6f:ad:8d:7f:8f:0c:56:b2:
                    17:10:55:16:1b:da:ec:3c:a2:99:1a:09:25:4d:e0:
                    44:99:cb:43:54:87:3d:e0:6f:f6:a8:92:a0:16:a4:
                    2a:dd:f4:4e:bb:fc:19:64:b1:c9:ab:41:e6:56:f1:
                    21:26:67:bd:bb:79:1c:d2:0c:ee:d7:1f:2c:f2:4c:
                    8b:e1:d5:c9:3a:09:ae:e9:e3:3a:9a:39:42:8a:ee:
                    ee:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:51:A7:30:B4:CD:33:73:61:C0:34:92:D5:60:32:F9:72:59:1C:83
            X509v3 Authority Key Identifier:
                keyid:D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/D1522A5217E184CA7B071011FCF96A20332AF33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232342e302f32322d3232203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:10:8e:be:c5:7e:74:9b:34:f7:60:b1:48:19:58:a5:03:
         0e:6d:2d:bf:72:17:f2:b3:a9:f6:b2:f0:9e:d5:64:7f:57:71:
         9d:74:45:58:d8:27:c1:3e:00:5e:3a:4b:89:49:44:bd:7e:29:
         1b:2c:3d:b5:20:64:63:ef:c7:88:01:88:4a:57:63:6f:68:6d:
         97:c2:d2:6f:62:fb:85:9f:23:c7:01:d4:03:fb:cc:25:63:cc:
         dc:66:63:3e:38:9c:c8:c5:2a:14:cf:be:b7:38:85:ae:21:90:
         bf:fc:55:67:84:6b:e1:8d:a9:1a:ba:d8:c7:26:bd:62:70:4e:
         72:f3:f6:6f:37:70:d7:1a:10:15:3e:64:4b:a7:6c:0d:3a:75:
         56:aa:3b:14:fd:77:da:9a:ba:18:50:52:90:7a:d4:41:98:f0:
         88:5b:c4:ce:ce:86:6e:04:b8:05:1b:e8:a8:ea:af:52:37:de:
         80:a4:4e:c6:5c:a4:07:2f:a8:36:8f:26:78:0b:54:32:41:72:
         72:2a:a3:9a:fa:c8:d9:95:23:ec:a0:7d:c3:0f:74:e9:54:ac:
         25:50:ad:d1:58:04:12:11:6e:24:ca:6b:70:79:1a:8c:d8:e2:
         a0:7e:8d:09:26:40:4a:d5:48:3a:6e:e0:11:f5:47:12:73:24:
         96:16:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org