Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3232203d3e20323638303838.roa
File:                     34352e3136382e3130302e302f32322d3232203d3e20323638303838.roa (raw, json)
Hash identifier:          /kq407XyYhOSjZPK0m/4ShpaRPUBnaJFwREMU2SYYjY=
Subject key identifier:   A0:7F:C0:10:19:5E:12:36:AC:46:BE:E9:CC:03:16:AD:DE:9E:84:28
Certificate issuer:       /CN=94A3DB62B012EF07C9AFE1762646CC714080A576
Certificate serial:       71D7E3C48FF601CB6A2044BC40A40C358CB6D50D
Authority key identifier: 94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3232203d3e20323638303838.roa
Signing time:             Fri 27 Oct 2023 15:56:52 +0000
ROA not before:           Fri 27 Oct 2023 15:51:52 +0000
ROA not after:            Fri 25 Oct 2024 15:56:52 +0000
asID:                     268088
IP address blocks:        45.168.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d7:e3:c4:8f:f6:01:cb:6a:20:44:bc:40:a4:0c:35:8c:b6:d5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A3DB62B012EF07C9AFE1762646CC714080A576
        Validity
            Not Before: Oct 27 15:51:52 2023 GMT
            Not After : Oct 25 15:56:52 2024 GMT
        Subject: CN=A07FC010195E1236AC46BEE9CC0316ADDE9E8428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:89:5d:e7:83:71:82:af:17:52:08:e3:33:27:
                    ae:6e:5b:d9:06:65:7f:a4:07:46:73:c4:3b:df:73:
                    3b:71:a8:2d:15:eb:2f:17:b4:92:58:a2:0f:8b:5d:
                    44:ca:8b:f5:4c:b1:8d:a8:5a:40:64:fa:ce:56:fa:
                    55:de:1e:93:d9:28:26:79:34:a0:4c:43:d1:20:62:
                    8c:e4:20:64:95:d3:ab:0a:cc:58:f2:04:b6:58:c6:
                    56:23:60:03:a4:f0:57:c5:00:c6:20:34:26:22:aa:
                    f0:7b:65:e9:cf:42:8a:dd:06:4f:cc:ff:07:09:3b:
                    40:aa:72:19:73:22:27:41:dc:f8:a5:57:26:3e:9d:
                    cf:77:2a:f4:7e:e5:18:ba:70:17:62:83:6b:2c:76:
                    5d:5b:1c:f3:66:de:e6:f0:42:14:35:8e:49:c1:fb:
                    2d:68:d0:4a:91:66:29:21:71:c3:f3:48:56:45:c8:
                    d4:dc:5d:d0:f2:e4:a5:cb:0d:7e:ae:e2:d7:fe:fd:
                    3b:37:3b:38:0a:fe:9e:f2:35:ae:d8:2e:e6:7c:0d:
                    30:45:1d:2a:4d:37:04:46:c6:e7:eb:4f:32:30:11:
                    69:18:fa:8d:80:1b:ad:ba:54:08:ee:88:16:6d:49:
                    52:4e:c2:50:5d:ee:2b:23:22:21:19:35:a6:95:58:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7F:C0:10:19:5E:12:36:AC:46:BE:E9:CC:03:16:AD:DE:9E:84:28
            X509v3 Authority Key Identifier:
                keyid:94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/94A3DB62B012EF07C9AFE1762646CC714080A576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3232203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:8a:e1:e8:3f:1f:b3:dc:a0:59:2c:1a:9c:5c:93:db:ce:5d:
         e0:6c:34:13:29:a3:19:be:c6:af:35:c2:38:93:ff:1b:e0:e0:
         38:68:81:b1:2f:20:58:af:ce:0d:dd:24:e3:11:33:d2:ce:35:
         0c:4b:95:26:d2:86:d2:51:3d:8f:69:cb:91:02:23:15:09:bf:
         8e:07:ac:cb:e6:47:3f:d5:7d:8c:0a:6e:06:1a:d3:3f:32:2e:
         e6:7a:7e:79:55:c0:89:32:c4:62:15:0c:41:ef:c9:d5:11:0d:
         46:a7:69:dd:a0:96:e6:0f:ea:78:cd:95:9c:2a:91:33:7c:b9:
         be:06:ed:c4:fe:bb:8e:e1:9a:97:95:6a:04:bc:f6:76:e5:46:
         60:5d:90:61:2d:16:01:e1:94:f9:2e:e2:69:41:03:77:4c:7a:
         8c:c8:f8:9f:20:b5:37:61:78:fa:06:36:d1:70:0c:c7:79:c1:
         99:9f:4f:d8:75:9c:e4:c5:fa:b6:0d:71:10:ee:52:78:2e:af:
         d2:3b:ee:b0:b1:17:72:18:d9:7a:e3:de:78:5e:a4:0f:06:ed:
         55:23:1c:e6:4e:64:a7:7c:0e:47:21:88:3d:7e:4b:5c:d6:3d:
         41:41:4e:af:db:29:b5:77:f8:7c:d8:01:8e:67:5d:91:d9:9f:
         90:1a:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org