Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132372e302f32342d3234203d3e20323637333734.roa
File:                     34352e3233342e3132372e302f32342d3234203d3e20323637333734.roa (raw, json)
Hash identifier:          cfFmpHSkegUwuUBOuSNPRFBBplPbCZ7iRQ3nlo7sSaU=
Subject key identifier:   04:2F:DA:50:A8:D9:BB:AA:B7:AA:5A:13:B9:9C:8F:D4:77:F8:BB:02
Certificate issuer:       /CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
Certificate serial:       7714F46E6ADBE49C5FC8309FC7111E71CCE372AD
Authority key identifier: C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132372e302f32342d3234203d3e20323637333734.roa
Signing time:             Wed 31 May 2023 15:01:53 +0000
ROA not before:           Wed 31 May 2023 14:56:53 +0000
ROA not after:            Wed 29 May 2024 15:01:53 +0000
asID:                     267374
IP address blocks:        45.234.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:14:f4:6e:6a:db:e4:9c:5f:c8:30:9f:c7:11:1e:71:cc:e3:72:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
        Validity
            Not Before: May 31 14:56:53 2023 GMT
            Not After : May 29 15:01:53 2024 GMT
        Subject: CN=042FDA50A8D9BBAAB7AA5A13B99C8FD477F8BB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:e1:92:bc:98:ad:7f:18:f7:b1:75:61:83:
                    7b:79:58:5b:39:f8:0e:5c:4b:36:9b:f2:25:1f:91:
                    6a:11:58:73:c1:58:2c:33:9f:0e:e9:2d:4d:05:1a:
                    0b:b2:cc:d4:94:fb:45:f6:24:c5:32:cf:81:81:ff:
                    d5:d2:a1:ce:c3:3a:ed:64:72:f0:c3:3a:0f:bc:57:
                    b4:62:3b:52:96:5e:54:d6:ae:24:ad:f4:51:1c:97:
                    2f:eb:f2:c4:1d:81:6d:e5:69:b8:3d:e5:8b:58:a1:
                    29:2b:cf:77:fc:6e:9f:03:20:4e:5d:f9:ac:63:ca:
                    f9:21:0d:ee:7a:e1:bf:f7:9b:2d:cd:e8:22:37:c1:
                    7c:87:21:24:41:37:3f:e6:c3:19:92:39:62:47:d4:
                    e2:ad:a9:97:0c:9c:19:a4:97:92:76:74:11:13:11:
                    8c:b5:8b:ce:cc:ff:9f:13:96:c2:43:e1:83:61:e7:
                    4d:1a:ce:0c:8f:4b:d1:3d:a3:cc:7b:a0:72:e4:80:
                    f9:5f:21:60:43:b5:48:46:c5:a7:fc:e3:12:32:c0:
                    6a:75:2d:8b:40:8d:da:f2:b6:33:83:27:13:42:f5:
                    71:04:14:0f:d0:a8:a8:52:87:63:5b:24:71:b8:15:
                    43:c5:0c:b2:90:a3:d7:23:88:64:57:95:a9:50:60:
                    23:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2F:DA:50:A8:D9:BB:AA:B7:AA:5A:13:B9:9C:8F:D4:77:F8:BB:02
            X509v3 Authority Key Identifier:
                keyid:C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132372e302f32342d3234203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:a2:88:c5:0d:93:b4:bc:db:b7:1f:c6:8c:da:52:28:4e:ea:
         e4:ea:95:2e:05:84:de:fa:b8:10:3a:10:a0:08:97:fe:25:a0:
         02:6f:c9:c5:4a:07:37:86:13:36:9e:42:d7:8d:b9:d2:81:26:
         75:07:c6:d7:51:50:1e:4f:0b:2f:5c:64:5f:3a:ea:e2:fa:57:
         d3:cc:8c:56:14:4b:ed:b5:9c:2b:0e:df:d7:ae:b8:ac:a8:b3:
         f9:c2:7b:db:10:76:1a:ec:b9:fd:5b:86:61:2a:4c:7d:42:9e:
         6e:58:68:70:3a:38:eb:e5:0e:c5:b0:8e:c0:6a:e6:f9:33:6e:
         15:dd:00:38:98:8f:f5:b0:0a:53:2e:eb:38:a7:2e:87:bb:2e:
         e7:9e:be:c0:1d:d3:db:8a:19:55:35:08:f6:e3:5e:8b:34:1b:
         63:b5:14:36:9c:b8:a2:9e:5e:d7:e6:0d:b5:b2:5a:34:38:45:
         19:48:bc:f6:93:ce:7f:c5:41:21:fd:d2:6b:75:0b:ce:6e:3e:
         68:49:b0:93:1b:ee:d8:c9:f8:31:35:b4:e1:88:e1:39:3f:7d:
         c2:7a:69:ba:60:24:10:7b:bd:19:97:8e:f6:ee:d4:6d:96:20:
         6e:8a:61:c3:ca:e3:78:4f:b7:8d:2c:07:94:8c:9c:57:c8:0d:
         13:94:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org