Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3234203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32322d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          gr7fi1HYwYnSPMxU6mNmFLrFum9XGqX2CTjH9WkWOaY=
Subject key identifier:   25:5D:92:58:97:02:4B:E6:B8:15:B9:BD:35:65:4B:FF:0D:3B:27:29
Certificate issuer:       /CN=A03118E859EE63EE55CBAA916146177E810F7A20
Certificate serial:       4F36B89AB82F0EB20577E905EEDA6FB0B691FA92
Authority key identifier: A0:31:18:E8:59:EE:63:EE:55:CB:AA:91:61:46:17:7E:81:0F:7A:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03118E859EE63EE55CBAA916146177E810F7A20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3234203d3e20323638323438.roa
Signing time:             Mon 11 Sep 2023 13:38:38 +0000
ROA not before:           Mon 11 Sep 2023 13:33:38 +0000
ROA not after:            Mon 09 Sep 2024 13:38:38 +0000
asID:                     268248
IP address blocks:        45.236.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:36:b8:9a:b8:2f:0e:b2:05:77:e9:05:ee:da:6f:b0:b6:91:fa:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A03118E859EE63EE55CBAA916146177E810F7A20
        Validity
            Not Before: Sep 11 13:33:38 2023 GMT
            Not After : Sep  9 13:38:38 2024 GMT
        Subject: CN=255D925897024BE6B815B9BD35654BFF0D3B2729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e1:38:bb:fd:31:ef:f0:f3:f5:43:56:4e:43:
                    3c:1e:c8:0b:fd:ce:43:70:32:d6:92:2f:3b:40:9b:
                    cc:54:33:f9:af:9a:02:0f:f5:90:69:0b:1e:5a:ae:
                    78:d4:f7:04:8e:0a:f8:1f:28:29:58:cb:70:a1:54:
                    2d:c2:98:33:b8:3c:3c:c3:01:e9:d0:ea:48:75:8a:
                    73:6c:e2:b3:c6:78:dd:9a:d9:98:88:00:86:c3:39:
                    c3:59:7a:bb:1c:26:24:28:88:f5:e4:50:0c:29:75:
                    1e:43:ad:94:c3:a0:a1:22:8d:6b:a6:f5:85:1d:31:
                    30:1d:b4:ea:8f:f9:c2:3a:55:5e:9f:0d:17:3e:62:
                    f8:5b:33:58:2a:3c:8c:da:6e:55:3c:9c:2d:7a:58:
                    3e:73:20:81:0f:5d:6f:bb:f5:45:ee:0f:96:85:e9:
                    10:af:2a:69:cd:b1:67:a5:63:93:ea:f6:80:65:55:
                    5f:db:38:84:66:5d:f4:3a:a2:93:36:a1:10:e0:07:
                    db:74:aa:c2:c9:ba:8d:df:c6:86:d0:4c:01:55:ce:
                    a6:bc:90:ce:77:63:93:b9:ca:27:9c:7e:4b:2d:06:
                    3a:2b:5b:1d:cf:28:7c:fd:a6:3b:d9:a3:50:cb:8f:
                    b6:05:12:18:5a:4c:46:24:85:e8:1a:43:aa:b9:61:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5D:92:58:97:02:4B:E6:B8:15:B9:BD:35:65:4B:FF:0D:3B:27:29
            X509v3 Authority Key Identifier:
                keyid:A0:31:18:E8:59:EE:63:EE:55:CB:AA:91:61:46:17:7E:81:0F:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/A03118E859EE63EE55CBAA916146177E810F7A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03118E859EE63EE55CBAA916146177E810F7A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:57:a5:6b:1c:5e:95:34:d0:e3:fe:d3:b3:37:90:b3:b5:
         09:18:16:de:3c:4f:c3:c4:74:29:6e:b7:35:d7:7e:66:e9:d9:
         ae:ba:60:a3:cc:0e:39:52:34:e4:ee:b9:25:29:7e:5b:67:21:
         b7:9a:27:2c:7f:32:fb:ff:1c:68:2c:8d:12:20:52:37:55:fd:
         4e:1d:96:14:38:00:44:3a:3b:4b:b0:87:f5:ec:4e:29:c1:0e:
         01:ee:74:22:c6:73:84:24:3c:ad:6a:c4:ad:ad:65:b3:8c:57:
         53:8f:3c:43:ad:69:04:4e:07:c7:df:f3:77:70:ea:c5:4d:d3:
         32:1c:42:8d:b1:25:71:64:bb:2a:69:fd:4f:a3:bf:8d:5d:03:
         4e:90:42:a9:ba:d0:69:60:6c:13:0b:20:00:da:d2:d5:d1:3c:
         a3:00:53:fb:64:d8:86:cc:7d:94:84:85:e8:78:27:a9:99:32:
         ea:8f:a5:0c:46:fd:e5:2c:c7:4c:33:36:ca:a6:c4:8d:10:78:
         ff:c6:61:76:0d:0a:f1:39:44:e6:52:ab:67:ca:a6:75:c3:93:
         43:83:0b:8c:db:e4:d3:c9:c8:54:23:65:3c:47:52:fd:a0:7c:
         c5:bf:d8:b8:6f:4f:3b:3d:eb:69:a5:29:2b:e2:9e:82:58:d3:
         05:fb:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org