Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31362e302f32342d3234203d3e20323637333336.roa
File:                     34352e3233342e31362e302f32342d3234203d3e20323637333336.roa (raw, json)
Hash identifier:          61zinTwQsvCwhfdZaosjYzEXxCYodixskzwutqjGDPk=
Subject key identifier:   8F:C6:CB:4F:38:41:E1:0C:52:2C:A1:53:81:DB:6D:B3:A6:57:C4:B5
Certificate issuer:       /CN=108C048048A7574A82BE3D8E849203BD34D76390
Certificate serial:       20C6761CD6D0741BBE28D10A8B9A92ED2534CF07
Authority key identifier: 10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31362e302f32342d3234203d3e20323637333336.roa
Signing time:             Fri 24 Feb 2023 16:11:11 +0000
ROA not before:           Fri 24 Feb 2023 16:06:11 +0000
ROA not after:            Fri 23 Feb 2024 16:11:11 +0000
asID:                     267336
IP address blocks:        45.234.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c6:76:1c:d6:d0:74:1b:be:28:d1:0a:8b:9a:92:ed:25:34:cf:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108C048048A7574A82BE3D8E849203BD34D76390
        Validity
            Not Before: Feb 24 16:06:11 2023 GMT
            Not After : Feb 23 16:11:11 2024 GMT
        Subject: CN=8FC6CB4F3841E10C522CA15381DB6DB3A657C4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:ba:e4:d3:52:14:1e:1e:98:96:e9:dd:af:
                    bd:96:5f:f6:3d:64:3e:52:a9:1f:9a:55:0c:48:8c:
                    0a:18:60:6d:4f:31:91:dd:50:bc:cd:d0:21:0e:b2:
                    76:28:cd:23:b7:87:06:6f:f3:df:63:02:15:ab:f3:
                    b4:98:9a:8f:f3:b6:55:55:d9:be:68:b3:16:7d:97:
                    48:5a:cf:09:a4:17:bd:03:0c:c2:c3:79:de:b3:d0:
                    ce:e4:6d:29:99:7e:34:8c:a0:34:da:e8:72:1a:29:
                    ec:0d:99:ba:b4:e8:7c:c0:ef:15:3c:c2:d6:b6:fe:
                    7a:60:92:77:e2:cc:9e:b1:a3:9c:36:dd:41:48:21:
                    80:8b:b8:63:a3:6a:71:83:8d:a8:aa:8f:6e:c0:d8:
                    c2:bb:dd:b3:c2:8a:ca:97:f2:8f:f5:ff:cf:9e:4d:
                    fe:e8:9d:ee:a5:a0:00:6c:cc:65:91:69:46:69:2b:
                    61:89:5b:02:64:c4:44:d4:07:89:8a:42:0a:51:9d:
                    22:b7:b7:f2:c6:5a:9b:f7:7a:98:40:2f:13:e5:9c:
                    70:f2:69:02:96:ed:55:3d:98:40:88:1e:d9:55:44:
                    3c:1d:ab:63:9e:30:24:27:a7:6d:77:00:88:22:89:
                    21:15:2b:34:5f:8c:32:d7:d7:76:8d:40:c5:cc:e6:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C6:CB:4F:38:41:E1:0C:52:2C:A1:53:81:DB:6D:B3:A6:57:C4:B5
            X509v3 Authority Key Identifier:
                keyid:10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/108C048048A7574A82BE3D8E849203BD34D76390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31362e302f32342d3234203d3e20323637333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:53:93:74:e3:e7:32:15:60:d7:0d:db:77:73:58:db:64:
         18:aa:0c:aa:73:7b:09:e6:78:0d:32:c7:e5:65:07:70:d3:55:
         76:de:6e:0c:16:2d:48:0b:b9:2e:e2:48:cc:b6:d9:23:18:c2:
         58:fd:47:29:b4:6b:92:d5:c5:5c:52:55:7f:7b:66:4a:dd:75:
         9e:b8:b1:17:41:25:a6:1c:39:5f:dd:43:c3:8a:e2:ab:70:96:
         a4:57:1a:2e:60:63:8b:87:9e:1c:2c:6c:a5:74:0a:b4:c6:59:
         2f:41:1c:94:d3:cb:39:94:c3:02:a1:3d:7e:37:dc:b4:81:3d:
         b1:7a:d3:3e:e2:f2:ef:63:fc:9c:03:51:1e:c0:1d:52:45:86:
         8b:b8:65:37:fc:e4:0c:99:40:73:93:60:05:20:2a:ce:9c:94:
         98:ef:02:48:d1:d3:84:1d:9f:70:64:cc:dc:8c:9c:58:7b:3a:
         a2:74:ea:6c:d6:59:73:90:cb:a3:aa:c2:28:dc:4d:af:c5:6a:
         41:7e:99:37:bb:c9:aa:0d:aa:cc:7d:45:c5:39:24:01:04:24:
         d2:27:34:36:60:51:35:4f:d4:3e:7f:61:8a:21:57:9d:32:a9:
         34:cd:f1:46:70:2c:24:ae:f2:fe:89:a7:a7:31:e0:de:ff:82:
         78:51:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org