Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38332e302f32342d3234203d3e20323637333435.roa
File:                     34352e3233342e38332e302f32342d3234203d3e20323637333435.roa (raw, json)
Hash identifier:          q7VymtpSAe9lIO1v9cjTnKon/LwSTHIJASPlLQSvPK4=
Subject key identifier:   F0:4B:41:FF:49:C7:3D:0F:60:F2:85:D4:65:DC:D9:8B:B2:86:DB:C5
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       496ECF77189ECBB2CB0F8E19EAF904A49E0793EE
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38332e302f32342d3234203d3e20323637333435.roa
Signing time:             Wed 03 Jan 2024 20:00:00 +0000
ROA not before:           Wed 03 Jan 2024 19:55:00 +0000
ROA not after:            Wed 01 Jan 2025 20:00:00 +0000
asID:                     267345
IP address blocks:        45.234.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6e:cf:77:18:9e:cb:b2:cb:0f:8e:19:ea:f9:04:a4:9e:07:93:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan  3 19:55:00 2024 GMT
            Not After : Jan  1 20:00:00 2025 GMT
        Subject: CN=3082010A0282010100C3F5F629D3C221CFB88EA014D8B1C7D29F800A23D59DC30CC4C81FD5B09C9F773B8575F2494DEB36A90729ECAB605A2B3B2AF97BB43143CB98A99C32AE9E28AE7C4BA100FEE94C275E94489FA0FDFDE6D76A31034BBF325D327715C08FE9D72517C57BDF23B5802F89C1451D781F4D8C8D4219904C9CAB67F0C50704CAE71B658D0325AA48887079837F545DC06931737AFA5A5C8448540A73FA0C874DAAF690762F6C80ED9B10FB3C3A3998C1727F5572E694ED2021211B6960C5CBDF7F5CA1F27C2F7243C62ED31FAEAD71DCA08289D693887730749F3F56E44548079CE211890041D090792F28E887B53F07F465A746BDBA10EA52453F372DC663E57B6A650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:f6:29:d3:c2:21:cf:b8:8e:a0:14:d8:b1:
                    c7:d2:9f:80:0a:23:d5:9d:c3:0c:c4:c8:1f:d5:b0:
                    9c:9f:77:3b:85:75:f2:49:4d:eb:36:a9:07:29:ec:
                    ab:60:5a:2b:3b:2a:f9:7b:b4:31:43:cb:98:a9:9c:
                    32:ae:9e:28:ae:7c:4b:a1:00:fe:e9:4c:27:5e:94:
                    48:9f:a0:fd:fd:e6:d7:6a:31:03:4b:bf:32:5d:32:
                    77:15:c0:8f:e9:d7:25:17:c5:7b:df:23:b5:80:2f:
                    89:c1:45:1d:78:1f:4d:8c:8d:42:19:90:4c:9c:ab:
                    67:f0:c5:07:04:ca:e7:1b:65:8d:03:25:aa:48:88:
                    70:79:83:7f:54:5d:c0:69:31:73:7a:fa:5a:5c:84:
                    48:54:0a:73:fa:0c:87:4d:aa:f6:90:76:2f:6c:80:
                    ed:9b:10:fb:3c:3a:39:98:c1:72:7f:55:72:e6:94:
                    ed:20:21:21:1b:69:60:c5:cb:df:7f:5c:a1:f2:7c:
                    2f:72:43:c6:2e:d3:1f:ae:ad:71:dc:a0:82:89:d6:
                    93:88:77:30:74:9f:3f:56:e4:45:48:07:9c:e2:11:
                    89:00:41:d0:90:79:2f:28:e8:87:b5:3f:07:f4:65:
                    a7:46:bd:ba:10:ea:52:45:3f:37:2d:c6:63:e5:7b:
                    6a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4B:41:FF:49:C7:3D:0F:60:F2:85:D4:65:DC:D9:8B:B2:86:DB:C5
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38332e302f32342d3234203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:59:86:48:60:b0:96:dd:65:2c:ba:61:f0:9d:c6:37:99:fb:
         aa:29:01:dc:9a:f1:5b:30:da:37:12:19:e6:e9:28:89:da:61:
         36:ae:2a:9f:35:94:a2:bd:1f:5e:c2:18:69:51:e7:c8:17:7e:
         03:2a:51:9b:3b:86:a8:63:93:bf:dd:d9:44:08:67:64:c4:f3:
         b0:c3:24:c6:ec:c2:51:5a:9d:f4:ec:af:10:01:2b:b5:9f:3b:
         b8:68:5e:02:fa:44:a6:aa:76:37:96:08:f8:3f:7a:fb:ff:63:
         a5:b2:3b:7b:48:f3:cf:53:c2:8b:5b:c9:30:1a:aa:6c:11:67:
         e7:bf:55:24:c2:33:0e:ec:6a:a8:e6:f1:0c:3d:db:15:ad:52:
         d7:07:6b:9c:dc:65:9c:c5:33:ea:dc:20:8b:f7:57:5e:16:9d:
         8e:c2:c1:ad:ad:3f:7f:ef:66:35:9a:59:fc:79:2a:01:84:fa:
         e5:92:50:15:ac:c4:3f:55:8b:d4:02:e3:0a:0c:82:ec:be:24:
         0f:f3:93:39:82:9a:11:bd:68:80:40:82:a9:64:46:d7:27:17:
         ad:c6:15:8d:b4:2f:d0:4d:53:b0:c7:78:a3:40:0b:1e:bd:66:
         f7:07:46:73:a3:6b:83:f4:f5:59:9f:20:62:c6:21:aa:3e:0c:
         c2:16:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org