Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          vbnO6TjHYJ7HD5dsORgrAHvhWuxgTviUyJMRE1lz74o=
Subject key identifier:   34:6D:97:43:7C:7E:A0:4D:06:78:CA:3A:D9:AC:2A:AB:F0:89:C3:15
Certificate issuer:       /CN=0363C300551869E92BAF6218A3622188861DBE67
Certificate serial:       017482AB0B4F64656031663C517E18747858CC17
Authority key identifier: 03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa
Signing time:             Mon 15 Jan 2024 22:30:46 +0000
ROA not before:           Mon 15 Jan 2024 22:25:46 +0000
ROA not after:            Mon 13 Jan 2025 22:30:46 +0000
asID:                     271632
IP address blocks:        45.172.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:74:82:ab:0b:4f:64:65:60:31:66:3c:51:7e:18:74:78:58:cc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0363C300551869E92BAF6218A3622188861DBE67
        Validity
            Not Before: Jan 15 22:25:46 2024 GMT
            Not After : Jan 13 22:30:46 2025 GMT
        Subject: CN=346D97437C7EA04D0678CA3AD9AC2AABF089C315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c7:bb:71:96:03:95:86:e0:aa:9f:21:19:bc:
                    3d:81:b0:fd:df:32:01:19:45:e7:08:e8:ae:1f:d8:
                    8a:a1:cf:0b:c0:30:19:8e:5e:56:90:e0:9f:2e:e8:
                    e7:10:bc:6f:10:c1:02:12:29:f4:b8:f0:7f:77:de:
                    f9:c1:5b:35:d6:0d:b5:5e:17:7a:e4:e9:cd:cb:b3:
                    3e:ae:5f:d1:53:1b:cf:4c:ee:20:93:64:6a:72:a5:
                    86:a6:a0:a4:ee:4c:a9:46:dd:4c:be:7d:f4:e9:03:
                    11:76:e5:f9:02:6f:c0:99:8a:6f:61:31:78:0b:06:
                    cc:e8:d3:e4:9b:49:0e:02:95:ed:76:a5:8f:fa:c7:
                    37:6a:ae:d2:10:d7:8d:46:f7:be:6f:55:09:9c:d2:
                    6a:e6:55:c7:d2:d0:46:04:57:e1:0f:06:f6:d3:97:
                    58:7d:fc:f3:81:b9:79:46:29:05:6f:fe:ba:91:3c:
                    22:de:5a:3b:cc:3d:b0:c3:67:42:4a:82:af:f5:0f:
                    ba:23:00:23:4b:ac:33:b5:cc:23:8c:af:95:45:89:
                    e1:21:73:4b:30:58:54:52:ef:85:52:3e:24:46:ff:
                    c0:35:04:1d:d8:5e:dd:59:0a:30:6b:27:21:12:aa:
                    0f:36:c2:73:95:f7:47:cd:bb:1c:56:2e:c3:a5:c3:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6D:97:43:7C:7E:A0:4D:06:78:CA:3A:D9:AC:2A:AB:F0:89:C3:15
            X509v3 Authority Key Identifier:
                keyid:03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/0363C300551869E92BAF6218A3622188861DBE67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:22:94:cb:e3:a2:1c:5b:75:3f:4d:36:fa:bd:c9:e9:94:7d:
         00:c1:d8:a0:7d:03:7a:8c:ba:ac:1b:30:56:5b:23:cd:99:33:
         c9:06:f9:08:7b:6f:5b:f3:47:69:5c:61:39:a1:9a:31:8b:23:
         60:dc:0a:25:92:bd:ae:45:27:fa:59:d0:66:ee:91:94:6b:6b:
         92:27:9e:71:df:4c:d2:5e:f9:bb:b1:d5:a7:c7:1f:d3:d2:95:
         81:a4:d6:3a:db:d7:6a:59:c9:bd:ba:16:a6:c3:01:85:e0:1f:
         5a:92:d9:cd:12:6f:26:07:f5:7d:b1:8b:71:5d:23:03:ad:01:
         c9:6d:da:3f:5e:00:cf:f5:33:c5:a9:23:1b:03:39:e9:e6:0a:
         89:c7:eb:fa:52:09:11:03:15:27:84:0e:e2:80:a2:e3:48:11:
         42:93:8b:2a:97:27:9a:4b:fa:a4:27:f1:b6:60:a4:23:0f:1c:
         5f:a8:1d:1e:f3:ed:ac:84:5d:59:65:fd:14:56:76:5d:85:b3:
         a4:cf:6a:b8:c6:e5:26:84:6d:38:30:05:1f:99:70:90:fb:fd:
         36:a3:8e:80:25:2b:46:39:78:a8:2e:02:44:68:cf:db:66:9f:
         79:62:a8:55:17:eb:3d:8d:f5:84:3b:4f:da:68:69:3a:8f:aa:
         70:e8:d7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org