Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35382e302f32332d3233203d3e20323637323439.roa
File:                     34352e3233322e35382e302f32332d3233203d3e20323637323439.roa (raw, json)
Hash identifier:          DvNONBFz9fbriHqY0i9R0zVUs5JWFNVxbw/o9ZMnQ+Y=
Subject key identifier:   F1:D3:00:5C:C9:BB:0D:44:83:D8:DC:DC:56:11:1F:DD:2E:D6:06:05
Certificate issuer:       /CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Certificate serial:       60E08EE0FAE77DA1C5B709E9F1BA298CC1BD8CFE
Authority key identifier: E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35382e302f32332d3233203d3e20323637323439.roa
Signing time:             Thu 15 Feb 2024 13:49:29 +0000
ROA not before:           Thu 15 Feb 2024 13:44:29 +0000
ROA not after:            Thu 13 Feb 2025 13:49:29 +0000
asID:                     267249
IP address blocks:        45.232.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:8e:e0:fa:e7:7d:a1:c5:b7:09:e9:f1:ba:29:8c:c1:bd:8c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
        Validity
            Not Before: Feb 15 13:44:29 2024 GMT
            Not After : Feb 13 13:49:29 2025 GMT
        Subject: CN=F1D3005CC9BB0D4483D8DCDC56111FDD2ED60605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:99:73:76:9d:9e:08:22:cf:bb:3c:3a:f4:
                    31:25:15:bb:64:bc:f6:92:f6:5c:e6:87:63:55:06:
                    1c:30:bc:11:c8:80:06:78:44:62:7a:3b:a2:fd:57:
                    35:07:37:13:26:5f:8d:1c:1c:78:7c:80:fe:8c:5b:
                    77:2a:ae:1a:7c:c4:fd:39:00:45:32:df:3b:b7:ce:
                    36:fa:b7:23:ba:87:2c:aa:b5:de:66:c6:90:6e:f9:
                    ee:f9:db:03:5d:48:d4:60:12:98:f2:27:82:13:23:
                    3d:e0:49:7a:14:6b:47:c9:c2:1b:ea:7d:c0:44:ae:
                    19:53:95:f1:57:ef:fe:bb:b0:f2:61:a6:a2:da:1e:
                    02:ff:85:07:e7:da:db:8e:a0:87:0f:3f:21:c7:ef:
                    6a:2a:40:62:e3:9d:19:7e:6e:ae:3a:85:4b:a7:cc:
                    3f:a4:da:c7:df:8b:b7:21:e6:6a:42:92:d4:fa:5f:
                    33:94:00:77:a7:de:f2:ad:e0:ad:e3:eb:32:83:2b:
                    d4:d9:0a:15:e2:ea:e9:37:e3:43:e0:25:07:4b:db:
                    d1:58:0c:0a:56:2c:59:c0:14:c4:43:d2:aa:57:4b:
                    bc:cc:d9:cf:3d:1c:22:da:e4:22:62:fa:14:8c:41:
                    25:34:44:58:9a:a4:1f:5e:93:4b:ca:98:53:fa:f3:
                    b7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D3:00:5C:C9:BB:0D:44:83:D8:DC:DC:56:11:1F:DD:2E:D6:06:05
            X509v3 Authority Key Identifier:
                keyid:E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35382e302f32332d3233203d3e20323637323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:63:46:19:70:e5:49:db:b9:cf:9c:ef:4f:e5:b0:3c:3b:6c:
         b1:4d:04:eb:8f:9d:2d:cf:e7:74:b9:4b:3a:4d:73:a9:3d:dd:
         05:12:94:c8:5e:ca:8a:76:d5:f2:77:7d:98:cd:fc:ab:9f:16:
         ed:ee:ed:89:3f:86:4e:45:c9:07:1f:22:2a:44:93:ac:b8:df:
         a4:31:1f:4a:f5:fd:64:ba:b4:ad:5a:e0:77:f4:d2:e3:7e:b7:
         d0:28:08:65:ed:58:2d:f2:b1:af:b1:83:cd:6a:fe:8d:03:92:
         3e:c7:f2:30:1b:d0:b9:63:5b:74:a8:ad:ed:76:d2:95:da:a7:
         da:88:12:3d:68:b9:4b:83:73:64:36:db:d0:e9:3c:fb:02:f8:
         2a:fe:51:24:c7:00:39:2b:df:e3:f2:e3:12:d6:11:33:86:81:
         33:e7:5a:f9:b0:b1:69:c9:5e:74:94:36:9f:e8:71:ea:46:2e:
         54:97:1f:b9:ce:3c:d2:3b:8c:cc:55:eb:75:14:d1:e8:79:1c:
         82:24:3a:45:8c:05:ba:8d:03:e7:ff:8d:ee:b1:0c:86:f7:f1:
         68:2f:74:60:eb:88:2a:2d:eb:7c:2e:b3:9b:f3:80:6f:f2:56:
         94:cd:e2:6e:5c:69:c9:de:cb:af:6e:98:5d:04:0d:af:52:a2:
         6b:af:c4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org