Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa
File:                     34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa (raw, json)
Hash identifier:          jVMIKbj+5CYC0cTJ5Rk6d08sTTTZwjbrB9HxlnCZIf0=
Subject key identifier:   76:5A:B2:1A:40:43:44:B4:BB:83:E1:93:C4:4B:00:C0:45:0D:2C:0F
Certificate issuer:       /CN=8960917263524044D6C2C72B89F0753C576C268A
Certificate serial:       5C289FEC9BE935732C6049EADB9BBBF5DF8B1AAA
Authority key identifier: 89:60:91:72:63:52:40:44:D6:C2:C7:2B:89:F0:75:3C:57:6C:26:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8960917263524044D6C2C72B89F0753C576C268A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa
Signing time:             Thu 04 Apr 2024 12:56:15 +0000
ROA not before:           Thu 04 Apr 2024 12:51:15 +0000
ROA not after:            Thu 03 Apr 2025 12:56:15 +0000
asID:                     268057
IP address blocks:        45.168.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:28:9f:ec:9b:e9:35:73:2c:60:49:ea:db:9b:bb:f5:df:8b:1a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8960917263524044D6C2C72B89F0753C576C268A
        Validity
            Not Before: Apr  4 12:51:15 2024 GMT
            Not After : Apr  3 12:56:15 2025 GMT
        Subject: CN=765AB21A404344B4BB83E193C44B00C0450D2C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:0f:65:b6:7a:2c:1a:b6:bc:10:61:bd:df:
                    97:07:6c:6b:b5:ab:1f:5f:bd:14:a1:dd:33:93:91:
                    82:0f:da:e6:1f:86:72:0e:8c:7a:5c:6b:a7:1c:85:
                    e4:47:1b:32:ce:3a:c6:9b:b2:4b:bd:ac:d2:bf:c8:
                    28:53:94:79:8d:db:b5:ce:ba:c4:aa:c2:9e:da:de:
                    7c:12:20:f1:cd:44:9f:95:fa:0c:0d:0b:54:ae:df:
                    ce:6a:7e:46:52:bd:71:97:a3:5f:80:4f:d5:c8:76:
                    e5:2e:4e:60:c5:ae:b8:b2:4b:2b:e0:d5:2b:ac:39:
                    48:3f:4c:b0:48:7c:c8:61:2d:73:57:42:24:32:90:
                    1f:35:5a:c8:89:bb:68:b2:40:4e:8d:52:65:eb:dc:
                    fe:a4:cb:c2:4f:29:37:00:af:fb:d6:9c:db:33:81:
                    a0:1f:80:8f:0c:97:e7:ff:10:fe:45:c6:ca:ff:9d:
                    b4:34:c8:3d:75:29:21:e3:46:1c:a1:99:9e:36:f5:
                    5e:95:8b:fa:ee:d5:62:14:6d:f5:b8:49:dc:3c:d4:
                    97:c0:87:32:2f:16:b1:8c:e9:71:ed:28:c6:6f:7d:
                    62:67:b8:3a:45:6b:b4:ec:74:2d:10:dd:27:a7:af:
                    c4:a8:8f:b3:33:14:66:68:f4:d1:05:33:f0:89:60:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5A:B2:1A:40:43:44:B4:BB:83:E1:93:C4:4B:00:C0:45:0D:2C:0F
            X509v3 Authority Key Identifier:
                keyid:89:60:91:72:63:52:40:44:D6:C2:C7:2B:89:F0:75:3C:57:6C:26:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/8960917263524044D6C2C72B89F0753C576C268A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8960917263524044D6C2C72B89F0753C576C268A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f9:ec:6a:ad:6d:15:6f:05:bf:6c:fd:75:6c:e8:61:ee:ab:
         ef:e9:6f:aa:4f:e4:ba:60:dc:ca:1b:08:5b:a8:1b:e7:16:20:
         b6:bb:a5:e5:a4:c4:89:6d:48:39:f5:14:7b:3a:09:65:60:2c:
         05:6b:f4:b5:c9:64:99:7d:63:5b:c5:ff:2a:88:8e:d1:fa:91:
         77:ec:c2:82:1f:ed:77:2c:4a:6e:f4:9e:71:b0:39:58:c5:01:
         df:0e:11:bc:5c:68:c0:89:f4:d0:63:5b:d2:9f:1c:32:fc:da:
         a4:ac:0a:90:65:95:b5:7f:1a:89:9c:c0:da:db:49:ad:31:92:
         6b:20:34:0b:4f:6b:59:3a:ec:92:02:db:2d:cd:fd:15:12:a7:
         b0:93:c0:73:7c:9c:d7:ec:95:a8:9f:e5:d3:e7:d2:ec:77:ab:
         0f:70:ef:3c:46:6f:82:76:81:8c:6a:80:cc:70:da:67:75:33:
         7a:b2:c4:9f:0c:1b:36:d2:bc:31:bf:cc:7e:a0:4f:e9:a0:8a:
         9d:95:ce:9e:5a:f4:0c:89:4a:1b:2c:9d:ca:56:f7:44:24:49:
         bf:24:a4:e2:03:3e:61:0f:2f:00:a0:8c:de:e5:9c:2b:42:48:
         8a:5d:52:b5:5c:6b:3e:5a:17:46:e0:04:7f:f1:a5:b1:e2:8c:
         cb:15:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org