Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3234203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32322d3234203d3e20323638373236.roa (raw, json)
Hash identifier:          rV+Al1lORTxTPemUzrOVyZ4T/H9xJ3tEr27VynZhljo=
Subject key identifier:   57:E6:6A:08:44:7E:8A:DE:8C:3B:C0:5E:2A:DE:EB:EA:67:11:49:06
Certificate issuer:       /CN=F12330437029319CF92F0C3BFC9280B143870D6D
Certificate serial:       257ED4B9DD796971308CD147FB1B3CFCD4F60A7B
Authority key identifier: F1:23:30:43:70:29:31:9C:F9:2F:0C:3B:FC:92:80:B1:43:87:0D:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F12330437029319CF92F0C3BFC9280B143870D6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3234203d3e20323638373236.roa
Signing time:             Tue 23 Jan 2024 15:00:00 +0000
ROA not before:           Tue 23 Jan 2024 14:55:00 +0000
ROA not after:            Tue 21 Jan 2025 15:00:00 +0000
asID:                     268726
IP address blocks:        45.171.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7e:d4:b9:dd:79:69:71:30:8c:d1:47:fb:1b:3c:fc:d4:f6:0a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12330437029319CF92F0C3BFC9280B143870D6D
        Validity
            Not Before: Jan 23 14:55:00 2024 GMT
            Not After : Jan 21 15:00:00 2025 GMT
        Subject: CN=57E66A08447E8ADE8C3BC05E2ADEEBEA67114906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:5e:5d:0f:78:26:cb:cb:0f:3d:fe:61:cb:
                    83:a9:09:a2:a1:75:11:20:c7:ec:2a:57:f7:4e:b8:
                    58:ee:7f:3d:41:25:36:44:41:fd:a6:59:47:ca:27:
                    6e:47:e7:db:08:34:e2:a9:b3:ff:df:5b:1b:44:a9:
                    a9:f2:8c:73:7e:80:77:85:d2:50:e8:75:57:19:8d:
                    68:9e:dd:8b:cc:ec:b5:71:40:6b:9f:05:b5:4f:4e:
                    be:52:cb:71:18:72:3c:db:2d:f0:0f:49:a7:b2:cd:
                    e6:08:ce:3b:83:8c:21:be:9a:b8:da:6a:38:0b:91:
                    af:5f:f0:a6:36:37:89:37:a8:87:36:b0:7c:4a:5f:
                    80:e3:f5:98:89:5b:1b:59:4d:68:c5:a4:7c:c0:56:
                    4e:d3:68:1b:67:2d:31:fc:c3:b6:e0:28:cb:42:44:
                    f0:27:9c:2f:d4:52:97:d5:73:71:96:fe:21:47:bb:
                    f7:a7:78:fe:e4:2a:c6:cd:19:12:da:df:bc:dc:37:
                    f7:97:36:fa:be:9e:01:ab:78:c2:2e:5b:2b:c2:ab:
                    74:b3:94:ef:71:3d:12:e2:ed:92:39:6e:75:97:f7:
                    a4:74:a1:0c:e8:4b:14:95:db:26:91:5d:cf:2d:75:
                    8d:8d:ba:4d:ec:3f:6a:0e:fc:b0:9b:1d:a5:21:16:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E6:6A:08:44:7E:8A:DE:8C:3B:C0:5E:2A:DE:EB:EA:67:11:49:06
            X509v3 Authority Key Identifier:
                keyid:F1:23:30:43:70:29:31:9C:F9:2F:0C:3B:FC:92:80:B1:43:87:0D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/F12330437029319CF92F0C3BFC9280B143870D6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F12330437029319CF92F0C3BFC9280B143870D6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3234203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:2c:75:ca:4d:88:60:9d:be:9d:82:50:f5:76:ce:90:c4:
         03:78:ff:9a:54:98:3a:ea:5d:88:ba:1e:9f:a4:47:e5:c4:1b:
         1e:a4:ac:63:a7:a9:a8:1f:be:09:93:a7:e6:03:8d:3d:4f:24:
         89:d5:6f:bc:ce:f3:2e:e5:81:99:47:a6:79:7e:a3:b6:e0:51:
         6a:04:bd:6d:13:45:1d:75:8d:16:a4:1e:b3:8a:b3:15:c3:d5:
         97:68:50:4e:0f:f5:d6:1e:61:a9:7d:d8:4d:8d:a4:cd:96:8c:
         4d:cc:04:c0:45:3e:33:2f:c6:94:e2:ff:0e:af:a6:46:fc:2e:
         6e:f9:db:6f:e3:ba:71:bb:fb:58:c5:42:45:63:99:53:1b:40:
         e4:68:14:13:cc:e4:e1:a1:cf:1b:68:41:5f:b8:d4:a1:4a:10:
         93:50:0f:41:f8:cd:44:92:92:0b:b2:fe:75:d0:1f:d0:16:b8:
         ef:c0:a6:5a:fd:9e:95:f1:b5:14:25:a1:a6:21:4f:03:80:29:
         82:92:92:1c:b8:93:47:f0:4b:af:33:12:68:68:d1:d0:c4:42:
         ec:cc:81:dd:d3:5c:bb:01:91:2d:b7:87:18:48:de:8b:9c:8e:
         7a:04:72:61:7e:02:f0:13:a5:b3:28:86:41:7d:02:b1:8d:20:
         f3:59:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org