Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32342d3234203d3e20323638303830.roa
File:                     34352e3136392e342e302f32342d3234203d3e20323638303830.roa (raw, json)
Hash identifier:          D/XvREmDJRiXaWrTaBHVhR3B1cOixhT4gs6SOTGqBo8=
Subject key identifier:   60:88:59:A4:88:AD:29:E2:4E:D2:4F:2F:AE:CE:28:C0:43:8B:BD:AE
Certificate issuer:       /CN=0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD
Certificate serial:       22362423DD8D84FC792821DECEF2FFEEAD255167
Authority key identifier: 0C:21:32:3E:3C:8F:28:01:0E:75:A1:EF:FD:E7:8D:6E:8A:98:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32342d3234203d3e20323638303830.roa
Signing time:             Tue 14 May 2024 19:56:53 +0000
ROA not before:           Tue 14 May 2024 19:51:53 +0000
ROA not after:            Tue 13 May 2025 19:56:53 +0000
asID:                     268080
IP address blocks:        45.169.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:36:24:23:dd:8d:84:fc:79:28:21:de:ce:f2:ff:ee:ad:25:51:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD
        Validity
            Not Before: May 14 19:51:53 2024 GMT
            Not After : May 13 19:56:53 2025 GMT
        Subject: CN=608859A488AD29E24ED24F2FAECE28C0438BBDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:6a:9d:24:c5:bd:29:43:b4:d4:5c:1d:66:
                    14:81:10:d9:24:98:78:4a:5f:2a:a6:af:05:1e:38:
                    1c:8a:8d:1d:ef:8d:7a:aa:53:32:79:8b:01:97:9f:
                    79:02:c7:a5:76:59:f7:7a:4e:a1:86:89:62:07:f4:
                    02:d0:e0:8f:8d:8c:89:8a:38:d7:88:a3:b4:00:f3:
                    5e:af:3e:c9:2b:3a:bf:9e:99:ef:ab:3f:a7:e4:3f:
                    15:40:47:7d:ae:5e:5d:57:e2:75:8c:10:99:5b:ac:
                    ac:bf:0b:b2:bb:74:1c:6c:56:f4:97:96:ac:14:08:
                    a1:3f:22:2d:bd:93:03:d5:20:42:47:26:8e:a6:7f:
                    c4:a4:a0:15:65:80:05:14:42:ba:dd:9a:63:8f:6b:
                    de:df:39:c2:e3:80:06:d0:e8:e7:19:df:9c:ad:5b:
                    13:a0:aa:3f:a8:33:59:45:b9:e7:af:95:9f:72:d0:
                    88:be:48:d6:a1:70:08:a1:b8:89:29:bf:63:34:30:
                    07:64:8c:c1:8b:42:bd:10:28:1c:20:35:8e:55:be:
                    28:21:94:97:e6:1f:32:d9:ee:99:99:67:95:a0:f3:
                    5e:72:d5:74:55:fd:d1:70:eb:9c:86:0f:59:6a:16:
                    dc:50:df:98:51:25:1a:3b:59:50:6b:24:b3:0f:5f:
                    81:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:88:59:A4:88:AD:29:E2:4E:D2:4F:2F:AE:CE:28:C0:43:8B:BD:AE
            X509v3 Authority Key Identifier:
                keyid:0C:21:32:3E:3C:8F:28:01:0E:75:A1:EF:FD:E7:8D:6E:8A:98:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32342d3234203d3e20323638303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:da:5b:7f:f8:a1:9b:5e:e8:1d:bb:9f:79:c9:cd:d9:1b:fd:
         e3:73:a3:9f:83:25:65:ac:d8:8d:cf:28:09:e7:4d:c7:fe:cf:
         e1:b7:01:80:90:bd:b5:71:59:da:68:21:4b:60:1f:32:2f:58:
         f1:9c:53:e0:d5:16:47:fb:2e:08:52:09:f7:64:bb:34:1c:aa:
         90:1a:9d:91:df:36:3e:03:53:36:11:60:d0:86:65:83:5b:fa:
         3a:f4:59:bb:53:5c:d1:e3:f0:b7:68:3c:22:73:4f:76:02:9e:
         b7:e6:6a:38:65:8b:29:b8:27:a3:79:09:78:2b:ae:41:38:4c:
         1b:8f:8b:62:66:ce:ae:b8:22:c7:3e:b7:b4:30:fe:1b:0b:69:
         c7:a8:48:ca:d8:eb:93:cf:2e:c5:ea:0d:0b:c4:35:af:77:3b:
         39:e5:e3:97:23:c6:25:af:d9:43:5f:62:6b:86:cd:2d:39:87:
         04:2d:29:73:15:58:ff:08:c7:18:2c:73:91:3b:0a:12:1a:32:
         4e:8b:fb:f2:5a:27:bb:e7:07:e5:77:c3:85:a1:13:09:81:73:
         f0:b6:51:11:82:88:9b:71:cc:e8:8d:01:eb:37:08:5d:da:26:
         49:3c:ba:0c:15:9f:a7:db:37:7f:21:63:08:3f:b9:cb:04:68:
         67:32:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org