Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32332d3233203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32332d3233203d3e20323638373236.roa (raw, json)
Hash identifier:          MLYaC64SPs6WoYEnULpX4n1hk3JlVT+CpNKDBvDYu8Y=
Subject key identifier:   34:2A:0A:2F:8F:2A:1B:AB:DA:BE:E8:5E:EC:87:46:07:E4:47:BE:DD
Certificate issuer:       /CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
Certificate serial:       3789014AE5191FAB14B2E845F4191862A570E6E2
Authority key identifier: C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32332d3233203d3e20323638373236.roa
Signing time:             Wed 03 Apr 2024 13:30:54 +0000
ROA not before:           Wed 03 Apr 2024 13:25:54 +0000
ROA not after:            Wed 02 Apr 2025 13:30:54 +0000
asID:                     268726
IP address blocks:        45.171.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:89:01:4a:e5:19:1f:ab:14:b2:e8:45:f4:19:18:62:a5:70:e6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
        Validity
            Not Before: Apr  3 13:25:54 2024 GMT
            Not After : Apr  2 13:30:54 2025 GMT
        Subject: CN=342A0A2F8F2A1BABDABEE85EEC874607E447BEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b0:12:5e:31:7e:86:24:ab:9b:be:78:31:45:
                    13:3a:00:07:3a:d5:3a:5d:13:d5:fb:81:2c:51:c0:
                    2f:ca:0b:67:d0:c9:3e:1b:52:f1:af:61:ef:33:e0:
                    75:86:43:c7:a6:b9:c8:ab:f5:24:17:76:37:7d:6f:
                    14:cc:69:1d:d9:40:88:9e:be:d3:02:1c:0f:c0:56:
                    18:70:31:48:05:d0:2e:19:a3:68:32:c7:14:a3:86:
                    30:71:99:93:32:9b:8d:12:34:09:7e:e1:e1:e1:2a:
                    41:33:c3:cb:33:3d:3b:03:b4:31:0e:ba:87:dc:fd:
                    54:d3:1f:8e:1d:c5:02:24:e2:72:b6:b0:2e:6e:41:
                    cf:2d:a8:1e:2e:33:55:ee:9c:6d:54:86:45:f9:95:
                    92:b1:f8:51:13:c6:3d:00:6a:97:aa:46:0a:e6:d5:
                    dc:7c:0d:34:3f:a0:78:60:97:91:3b:fc:e4:d8:f7:
                    f6:90:5c:bf:d2:79:81:9e:84:a3:01:d5:58:1c:b7:
                    24:00:56:6e:22:d1:8b:89:a9:67:11:cc:73:29:45:
                    9c:33:3b:c4:61:1e:e7:03:6b:46:fe:01:33:31:ef:
                    ce:7c:a6:f8:d0:ee:14:62:62:a6:ec:3c:f4:35:42:
                    a5:78:44:4e:2e:a9:67:88:b4:bc:28:57:4d:64:50:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:0A:2F:8F:2A:1B:AB:DA:BE:E8:5E:EC:87:46:07:E4:47:BE:DD
            X509v3 Authority Key Identifier:
                keyid:C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32332d3233203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:73:6a:59:91:2c:01:95:07:89:24:17:64:8e:08:72:6b:
         62:76:63:18:f3:8e:d3:df:c3:36:62:fb:c8:13:ab:f0:1f:62:
         55:04:1a:ba:cb:fd:3f:d3:2c:7c:7b:f2:2b:c8:c1:4c:d4:9f:
         85:b0:9d:c3:3d:58:7f:ad:8d:64:a4:7e:7a:d4:a5:84:34:70:
         8b:5e:0b:fb:50:e1:01:11:b3:10:6f:03:bc:46:a9:c6:a8:b9:
         5f:17:03:e6:1e:a2:6c:2a:04:09:0b:30:e5:5e:f1:43:56:34:
         b8:ce:e3:7f:48:4f:ba:d3:26:b0:97:9e:cb:7c:fd:d7:b2:5f:
         aa:b1:bf:b5:1d:00:1b:e8:99:3b:3a:c7:a4:95:c5:aa:9d:63:
         0f:a1:67:a8:2f:5f:00:12:94:bc:59:51:6d:22:bf:4a:4b:ab:
         c5:30:6a:e3:d1:94:89:23:c8:4e:d1:a3:ec:d5:d7:bd:fd:b7:
         84:22:fc:e0:0e:39:e5:57:fb:22:e3:bd:fb:e7:a6:58:c0:0e:
         fb:e4:72:76:b9:64:52:4f:6f:8f:3f:0e:03:a4:d3:66:13:cd:
         16:d8:d8:16:53:fe:14:ca:92:bd:2d:75:3a:9b:29:0e:c3:ed:
         38:65:2f:31:e9:b3:b7:f2:5e:3a:5c:d2:18:a5:08:f7:06:12:
         55:91:ca:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org