Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa (raw, json)
Hash identifier:          jOneFYEIilTtOf0wlSiJkeJIb8YHe7Io9VoKG7uqtyI=
Subject key identifier:   84:EF:43:92:9F:AF:4B:AB:E1:98:1A:25:A1:37:AC:48:BA:09:06:08
Certificate issuer:       /CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
Certificate serial:       4DAFCE1BD58E84695C3BD42A5B4E3E7C83E9B6C4
Authority key identifier: C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa
Signing time:             Wed 03 Apr 2024 13:30:52 +0000
ROA not before:           Wed 03 Apr 2024 13:25:52 +0000
ROA not after:            Wed 02 Apr 2025 13:30:52 +0000
asID:                     268726
IP address blocks:        45.171.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:af:ce:1b:d5:8e:84:69:5c:3b:d4:2a:5b:4e:3e:7c:83:e9:b6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
        Validity
            Not Before: Apr  3 13:25:52 2024 GMT
            Not After : Apr  2 13:30:52 2025 GMT
        Subject: CN=84EF43929FAF4BABE1981A25A137AC48BA090608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:1b:38:9f:02:d0:0b:b0:10:67:25:7d:27:
                    ec:1c:80:35:fe:8a:67:5d:60:1d:a8:fd:b1:e7:84:
                    91:8d:4d:67:44:86:2a:40:5e:89:22:34:71:b0:ed:
                    9d:a5:62:4e:2e:85:1c:36:d4:41:4f:7b:f6:7b:aa:
                    61:f8:3f:83:fc:75:9f:c9:06:ab:63:16:eb:86:4c:
                    5e:d0:fc:82:b8:35:d4:64:90:d0:a4:3c:a7:b8:06:
                    1e:97:b3:b3:91:87:04:de:42:8f:cf:a6:88:bf:c2:
                    e0:2c:57:f0:f5:91:40:a9:c9:5d:3d:28:c8:21:d1:
                    a0:37:cd:a8:0c:28:97:3c:90:9a:1b:42:58:f3:ee:
                    95:63:21:9a:bb:d4:36:d8:1a:7e:64:35:a8:1e:db:
                    c3:07:64:9c:dc:b0:00:b1:72:11:bc:b2:b4:bd:55:
                    7c:ad:01:d8:fc:d1:29:61:2c:90:27:b5:8a:c9:97:
                    61:94:d2:66:2b:9d:01:f2:04:d6:a1:13:ee:96:ab:
                    69:79:54:6d:a7:47:90:ce:a3:bc:96:e6:49:c0:f5:
                    f6:c6:68:85:c5:06:23:21:ad:16:b5:01:f2:49:bb:
                    6d:ea:1a:6e:64:e6:f4:b6:c9:41:1c:41:e4:70:2e:
                    5a:34:78:34:7e:e7:c8:01:82:55:5b:7d:f3:9d:74:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EF:43:92:9F:AF:4B:AB:E1:98:1A:25:A1:37:AC:48:BA:09:06:08
            X509v3 Authority Key Identifier:
                keyid:C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:43:2e:76:f7:19:cd:84:3f:81:83:d6:67:72:72:14:a4:
         b7:73:6a:0a:17:b9:24:70:d1:15:d4:53:6e:82:3a:da:87:24:
         49:85:55:ec:8f:dc:ce:54:b5:e5:69:56:7f:42:89:6d:52:8b:
         c3:5e:64:b4:29:69:b6:cc:86:92:e9:1a:9b:99:22:a8:d2:11:
         bc:64:26:d8:47:0c:36:c6:36:40:cb:90:d4:41:e7:a3:a6:e3:
         e8:37:ae:26:0a:18:cf:cf:15:39:3b:11:f9:7b:fb:51:30:b1:
         c2:4e:01:e2:69:0f:d0:9e:41:95:ef:9f:0b:e5:25:40:35:3e:
         fc:6b:2b:62:b3:1d:66:98:e5:fc:fa:89:0c:6a:f5:c2:a4:14:
         c3:a9:b2:bd:a2:cc:2b:2a:96:0e:01:8f:b4:65:35:20:d2:0f:
         45:90:94:17:01:c5:53:80:6a:e8:2d:1e:03:7d:01:30:5d:bd:
         15:64:fa:19:37:3a:5b:10:9d:c0:bd:07:ed:ac:38:ca:dc:1e:
         e5:4d:04:8f:bc:80:67:5d:87:57:88:b8:13:49:5b:4c:53:92:
         1b:ac:45:84:0a:fb:cf:0f:a2:77:32:4d:c9:1e:99:12:29:cd:
         f5:4e:f7:b7:ea:94:9d:51:1b:f5:13:d8:41:8a:59:04:49:0a:
         db:1f:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org