Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31382e302f32342d3234203d3e20323637333336.roa
File:                     34352e3233342e31382e302f32342d3234203d3e20323637333336.roa (raw, json)
Hash identifier:          worZOk/QGHsVKWQ8094lq8XXK81GrFfN0cHCWYoq9yc=
Subject key identifier:   6E:3E:47:18:99:47:8D:F3:7F:A9:6F:9C:8E:C0:59:94:04:42:C9:0E
Certificate issuer:       /CN=108C048048A7574A82BE3D8E849203BD34D76390
Certificate serial:       65BC42C1715516883F73B77C989E0112E9406424
Authority key identifier: 10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31382e302f32342d3234203d3e20323637333336.roa
Signing time:             Fri 24 Feb 2023 13:31:21 +0000
ROA not before:           Fri 24 Feb 2023 13:26:21 +0000
ROA not after:            Fri 23 Feb 2024 13:31:21 +0000
asID:                     267336
IP address blocks:        45.234.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:bc:42:c1:71:55:16:88:3f:73:b7:7c:98:9e:01:12:e9:40:64:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108C048048A7574A82BE3D8E849203BD34D76390
        Validity
            Not Before: Feb 24 13:26:21 2023 GMT
            Not After : Feb 23 13:31:21 2024 GMT
        Subject: CN=6E3E471899478DF37FA96F9C8EC059940442C90E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:39:67:b8:d4:6d:10:da:bb:3f:86:cf:99:
                    17:c3:18:12:7a:2e:d9:23:80:d7:ee:fa:ca:e0:4b:
                    12:2d:e4:8e:ce:c1:e5:ff:5e:22:22:1e:20:59:8f:
                    43:07:01:5c:d3:e1:b0:6c:4a:e9:c0:65:65:c0:cd:
                    aa:7c:eb:7a:18:51:2b:6d:d8:36:8a:70:7a:6e:02:
                    21:05:f4:c6:18:34:49:84:bb:cd:95:83:97:de:06:
                    2c:66:6b:4c:10:ed:51:0e:58:ea:ba:19:6e:1c:da:
                    b6:04:d1:b8:ec:0e:fb:08:f3:14:30:0c:d6:e3:f5:
                    eb:d3:26:af:d4:00:2e:a5:e7:03:39:59:5e:96:25:
                    cd:a2:88:e0:a0:57:5c:11:92:4b:95:fd:c6:79:7f:
                    be:82:43:69:b4:9a:c3:2b:b9:30:ce:21:5c:5f:4a:
                    d1:db:d0:53:d5:c2:15:32:29:d6:c8:21:c2:8d:95:
                    24:57:ad:8a:21:7a:68:3f:a3:35:37:fc:c7:50:eb:
                    dd:96:17:bd:59:98:71:38:6a:68:18:54:39:df:a5:
                    c7:2a:cb:4d:4d:fb:55:c6:00:75:d7:da:5e:cb:4e:
                    4a:d9:de:02:de:2a:de:a0:96:7e:e7:fd:27:70:57:
                    04:fe:ac:e9:56:d8:1d:df:52:6a:a2:78:bc:89:9d:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3E:47:18:99:47:8D:F3:7F:A9:6F:9C:8E:C0:59:94:04:42:C9:0E
            X509v3 Authority Key Identifier:
                keyid:10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/108C048048A7574A82BE3D8E849203BD34D76390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31382e302f32342d3234203d3e20323637333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:1c:56:d4:2e:a6:35:e4:fe:80:78:07:cf:df:d5:4b:0c:08:
         0d:12:bf:4e:ad:24:e2:ae:80:84:67:e1:4a:57:f2:4a:92:72:
         81:24:b2:34:10:2d:94:0c:ac:70:19:cc:a6:5c:9f:10:b3:7b:
         81:ef:70:af:91:7b:94:f2:1e:96:65:bb:dd:25:3a:0c:f5:4a:
         6d:4f:ea:e9:b6:10:89:a3:e0:a2:6a:73:bb:7f:f8:4d:04:9a:
         8f:28:f8:1e:10:4b:30:6c:88:4a:5d:b6:cd:a6:6d:01:a2:d2:
         c0:a9:8e:95:a0:03:87:b3:d5:52:b8:aa:5f:78:20:01:52:57:
         96:c4:28:73:74:bb:6e:41:a2:2c:e2:ec:ed:73:15:85:5a:44:
         de:1d:09:86:a1:1c:ed:4b:81:c9:11:09:bc:79:ab:9f:4e:72:
         90:ab:50:31:81:b4:84:6f:3d:af:b0:fb:d4:04:65:a4:00:fa:
         51:cf:43:c2:b0:e0:f8:34:1b:dc:e7:a2:4a:21:6c:b5:42:4e:
         89:f1:a0:56:d1:7e:ad:72:d8:d1:c4:e5:2b:62:1f:ca:fa:12:
         64:cc:70:d8:eb:29:2d:bb:67:e8:1e:72:b6:1c:ef:01:06:99:
         44:75:e3:c9:c0:cd:f4:7f:a1:0c:86:20:75:29:99:70:b9:bf:
         bb:df:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org