Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          B5GpfZxP78FbTJbbQNRNjy8OwUE6dinrkjYOPfnfbJI=
Subject key identifier:   AD:DF:66:99:28:20:95:D5:98:D4:8B:D8:25:65:2A:40:98:CB:EC:D7
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       67C26D623DAE32A0E12343AB0F363EF16A48F341
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:46 +0000
ROA not before:           Mon 04 Mar 2024 14:51:46 +0000
ROA not after:            Mon 03 Mar 2025 14:56:46 +0000
asID:                     268248
IP address blocks:        45.236.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c2:6d:62:3d:ae:32:a0:e1:23:43:ab:0f:36:3e:f1:6a:48:f3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:46 2024 GMT
            Not After : Mar  3 14:56:46 2025 GMT
        Subject: CN=ADDF6699282095D598D48BD825652A4098CBECD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:7c:ab:43:48:f9:72:eb:fb:82:09:4d:c6:
                    78:4d:5f:fd:ee:4a:af:21:9f:14:97:33:eb:b2:9e:
                    f7:4d:2d:88:47:28:67:1b:aa:7e:65:36:2e:c9:71:
                    65:7b:24:5c:eb:20:ad:11:05:b6:1a:d6:83:1d:4b:
                    30:24:19:5d:2b:eb:a9:d3:4a:72:ef:ba:dd:01:a6:
                    71:c3:5a:9c:ef:bc:34:01:31:c3:83:c8:34:c2:ba:
                    ac:58:d2:75:41:fe:90:59:72:a0:5c:f6:8f:60:7b:
                    7c:9b:1b:f7:22:96:01:c5:4b:47:51:98:2b:9a:41:
                    03:98:28:d5:86:8a:67:69:ac:1b:89:fd:92:a6:3b:
                    c4:53:eb:5d:e7:9c:25:dc:c9:e8:f3:92:ab:aa:bb:
                    a7:15:7f:3b:93:6e:93:f0:b7:87:56:a0:51:a2:0a:
                    02:c0:ac:88:4d:e5:88:53:28:6e:84:cf:b8:d7:53:
                    72:77:eb:8d:35:bb:fe:95:f2:0c:d5:ce:b8:1a:58:
                    30:a6:3a:06:bf:89:d4:5a:2f:8e:71:24:3c:8f:72:
                    a6:b8:a1:ef:99:9e:02:37:cc:cf:4c:da:36:73:1d:
                    7d:f0:f8:18:97:76:75:43:07:a8:df:b9:13:92:36:
                    98:d3:5c:68:e9:43:08:09:8d:2d:bf:e5:e6:c8:d4:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DF:66:99:28:20:95:D5:98:D4:8B:D8:25:65:2A:40:98:CB:EC:D7
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:50:0b:0f:cb:c2:e5:31:13:6a:ea:69:ec:3c:9e:a3:10:ad:
         16:96:a9:c2:80:7b:a1:1e:56:b4:c2:c2:d3:77:ee:36:40:39:
         02:49:4e:97:c5:5a:15:bf:da:8c:88:c4:5e:28:19:ce:9c:47:
         96:5a:95:2b:fb:fe:c4:84:66:33:38:d0:9c:ef:07:fc:44:16:
         9f:9e:0b:ad:17:5e:13:70:05:15:60:af:af:45:68:f6:6d:90:
         b0:f9:3e:95:1e:fd:6a:f6:3a:52:2c:74:3a:a3:c1:2b:72:9f:
         15:37:e0:10:c2:ce:0c:b6:e6:d9:cc:40:13:49:84:75:9c:84:
         02:3d:c5:c4:f2:2f:50:d1:16:a1:60:c8:fe:bb:55:88:66:0f:
         5e:ee:6d:fa:29:fc:fc:7e:1d:43:df:07:30:92:df:10:cc:18:
         5c:ba:bd:ba:87:39:87:32:da:99:f6:20:a8:f8:bc:84:4f:ac:
         c3:28:bd:b4:35:eb:90:20:6b:fb:f6:5d:d6:c6:bd:c7:13:ba:
         3b:96:53:84:cc:55:99:a0:ba:3c:72:83:f6:5a:a0:e6:a8:8e:
         78:4f:f4:76:b7:26:4c:9e:04:72:14:3f:90:97:13:ff:75:3f:
         b4:9e:4e:79:7b:dd:a0:b6:40:93:28:54:da:b9:32:bc:a5:a1:
         22:57:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org