Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/34352e3233342e31372e302f32342d3234203d3e20323637333336.roa
File:                     34352e3233342e31372e302f32342d3234203d3e20323637333336.roa (raw, json)
Hash identifier:          ILOF/6K6kfjR3nb8+uKDsLOya22YwYgmlbQKuily4vo=
Subject key identifier:   7C:31:80:C2:35:C6:35:BA:A1:FE:B0:21:2C:BE:24:6D:39:61:A9:6A
Certificate issuer:       /CN=B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D
Certificate serial:       5E121FF45A2171D13E094A523556D4EB9CE25ABB
Authority key identifier: B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/34352e3233342e31372e302f32342d3234203d3e20323637333336.roa
Signing time:             Tue 18 Apr 2023 18:12:04 +0000
ROA not before:           Tue 18 Apr 2023 18:07:04 +0000
ROA not after:            Tue 16 Apr 2024 18:12:04 +0000
asID:                     267336
IP address blocks:        45.234.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:12:1f:f4:5a:21:71:d1:3e:09:4a:52:35:56:d4:eb:9c:e2:5a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D
        Validity
            Not Before: Apr 18 18:07:04 2023 GMT
            Not After : Apr 16 18:12:04 2024 GMT
        Subject: CN=7C3180C235C635BAA1FEB0212CBE246D3961A96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:e7:ca:d7:29:93:a8:ef:09:67:75:aa:e0:
                    6a:6b:2c:e0:17:d4:2e:c3:4e:d9:3b:1d:44:ff:29:
                    33:7f:19:77:97:e0:74:61:5b:65:c6:4c:a3:ec:a0:
                    cc:fd:24:9f:32:19:fa:26:9a:6b:87:81:cf:28:13:
                    0d:5c:c2:45:6b:b3:e3:67:97:d0:bd:e2:06:1b:ee:
                    84:32:54:5e:bb:ad:59:d5:50:40:89:f8:a9:85:5d:
                    9b:21:1e:e6:fb:c3:f7:23:60:65:cd:1b:8b:9c:fc:
                    5e:c9:e6:90:32:77:c5:3f:89:01:17:cf:24:f0:52:
                    a2:5a:3e:b6:e5:82:af:60:6b:90:2e:70:ee:b2:40:
                    44:57:03:1f:f6:ec:df:0b:2f:f1:bc:4a:da:08:f1:
                    3f:cd:70:d2:e6:d8:ad:68:60:a8:f6:cb:9e:37:65:
                    84:56:b6:91:22:44:21:53:27:63:bc:89:2a:57:ad:
                    f3:59:d4:4b:1d:c5:5d:68:4a:40:2d:c0:97:c6:c4:
                    36:bd:7a:58:1b:ef:4b:5c:2b:43:b5:6c:db:8e:ea:
                    c3:ce:7e:2c:be:84:aa:d0:45:c1:a5:7d:26:c2:b6:
                    d9:b8:90:39:04:d9:24:19:72:e0:1b:8a:74:70:eb:
                    05:e1:82:f7:10:68:55:be:f4:57:e2:6d:a3:d9:4f:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:31:80:C2:35:C6:35:BA:A1:FE:B0:21:2C:BE:24:6D:39:61:A9:6A
            X509v3 Authority Key Identifier:
                keyid:B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/34352e3233342e31372e302f32342d3234203d3e20323637333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:76:a8:87:22:46:83:8d:aa:46:76:c8:8d:8e:c1:7d:22:67:
         f1:b0:b7:ef:9f:4d:9a:d6:48:fb:71:ac:8d:61:2c:52:b4:cf:
         ba:94:d8:54:69:ab:2e:dd:47:f3:8c:57:64:3e:df:1e:4e:1b:
         58:de:6f:9e:94:10:ee:d6:92:61:97:57:02:98:aa:83:e0:96:
         b7:99:e7:58:a8:a2:be:0f:74:0d:71:20:bd:bf:5a:99:f7:80:
         2b:75:b7:b1:e1:e3:97:3f:ca:8c:0f:35:85:95:cc:e9:69:4b:
         d2:7b:15:a6:86:c6:10:ac:8e:10:e3:ec:90:32:4c:02:41:56:
         b5:2b:06:49:1d:3a:5c:84:46:f9:0e:0e:d6:47:51:e1:06:4c:
         81:dc:39:71:78:fe:fa:a5:ed:bb:eb:db:d4:57:90:a1:0a:7a:
         66:eb:9a:c6:d8:b9:7f:c2:8d:b1:2a:19:f3:e3:8b:bb:82:47:
         ea:b7:4b:0d:6d:23:72:40:d5:4d:62:fd:c7:cc:b2:e5:7b:d8:
         08:e7:eb:79:2e:73:1d:f7:f7:55:ba:39:cb:62:7a:7d:af:a1:
         57:ee:69:f6:9d:af:8a:87:3f:a8:7a:cf:c0:5f:05:eb:7e:46:
         54:3a:fb:dc:c7:6f:90:0a:80:8b:0f:19:ba:11:7a:5c:42:c1:
         cc:78:3a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org