Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/34352e3136372e34382e302f32342d3234203d3e20323637393935.roa
File:                     34352e3136372e34382e302f32342d3234203d3e20323637393935.roa (raw, json)
Hash identifier:          y8TcEMSd71zCwrm/UGP7HEPyqPtfc7Xz7m8uFaNcgJ0=
Subject key identifier:   1B:31:79:15:B3:D4:FB:3B:66:69:1D:8D:14:66:F0:48:9E:61:61:76
Certificate issuer:       /CN=AF3C1DB427F9CE37E3F5083F4418419B6961377F
Certificate serial:       4BCEFCA08F9DBDCFE59DA7EA784A5FE63BDD589F
Authority key identifier: AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/34352e3136372e34382e302f32342d3234203d3e20323637393935.roa
Signing time:             Tue 26 Dec 2023 14:54:26 +0000
ROA not before:           Tue 26 Dec 2023 14:49:26 +0000
ROA not after:            Tue 24 Dec 2024 14:54:26 +0000
asID:                     267995
IP address blocks:        45.167.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ce:fc:a0:8f:9d:bd:cf:e5:9d:a7:ea:78:4a:5f:e6:3b:dd:58:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3C1DB427F9CE37E3F5083F4418419B6961377F
        Validity
            Not Before: Dec 26 14:49:26 2023 GMT
            Not After : Dec 24 14:54:26 2024 GMT
        Subject: CN=1B317915B3D4FB3B66691D8D1466F0489E616176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:e5:d2:98:51:25:ef:0f:0c:04:cf:e7:79:
                    6f:6f:35:3b:16:2b:9a:e5:bb:e0:f5:2c:db:8a:e5:
                    60:c9:ec:09:88:08:d6:5e:44:3d:1f:b5:f7:6f:2b:
                    a4:0b:7c:4e:42:df:97:78:d3:1d:e0:76:6a:ef:fd:
                    43:5c:1a:37:d1:e1:53:85:25:73:48:fa:d5:e0:2d:
                    77:00:dc:6b:85:4e:5e:99:2e:f4:fd:1e:c7:40:ed:
                    57:6b:ca:55:10:df:86:aa:71:ba:2f:8e:2b:e1:d9:
                    de:34:5d:c0:64:aa:65:65:1b:01:53:c7:9f:66:f4:
                    df:49:43:ba:bc:eb:34:27:b9:60:1f:27:2c:ad:6f:
                    09:3c:e8:ca:8a:5a:ec:e7:4c:0a:82:b9:0d:0f:b3:
                    c7:b0:44:15:71:09:18:5d:d3:b9:2a:63:d8:4f:b6:
                    e1:36:86:5b:89:28:8a:47:78:18:7f:fa:3c:f4:15:
                    74:66:08:9f:5a:20:f9:7e:ba:cb:9d:a1:d5:0d:51:
                    d7:8e:56:10:68:68:ca:36:fc:bb:c9:c5:19:72:a3:
                    f6:74:b7:ad:55:d7:bf:04:c5:10:23:24:06:29:85:
                    2b:ae:a1:a2:72:61:80:4a:c8:16:d2:6b:90:ca:d1:
                    77:a7:0a:c6:1f:92:f2:bc:61:38:ef:cd:9a:c9:f8:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:79:15:B3:D4:FB:3B:66:69:1D:8D:14:66:F0:48:9E:61:61:76
            X509v3 Authority Key Identifier:
                keyid:AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/34352e3136372e34382e302f32342d3234203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:fa:ac:ee:60:85:9f:e7:15:a9:5c:b7:84:e3:f4:3e:62:
         aa:50:c2:e2:f3:ee:ee:f4:3e:98:08:71:b5:55:8a:f1:e9:a2:
         4e:b8:2c:0c:3c:87:6b:a9:58:1a:54:8b:ca:a7:10:a7:47:54:
         3d:9a:a0:dc:15:c3:ad:b1:81:ce:20:22:a6:a7:f3:de:50:3e:
         19:2a:90:aa:16:ac:80:c7:f7:a4:57:49:4d:5d:cb:cb:11:81:
         73:ac:7b:fd:4e:bc:22:ee:2c:10:8c:3b:71:ae:8c:e5:b3:a9:
         2b:d7:70:63:cb:ad:92:5b:65:e8:34:92:de:b1:85:e5:ee:e6:
         5e:54:85:c7:c6:32:b8:f0:0a:5b:68:66:51:27:8c:24:c6:ec:
         17:22:15:d9:54:64:77:31:61:97:1f:4e:50:64:88:a2:f0:75:
         aa:47:30:79:c1:9a:4a:54:58:3e:11:9b:0c:ea:7d:9e:da:47:
         f7:b1:17:8f:ba:69:8b:27:09:9f:d1:ac:e2:f2:d8:98:39:5d:
         13:69:cc:3d:f0:00:1e:6b:f2:65:6a:89:97:ec:01:b8:44:79:
         7c:f4:14:83:69:63:3a:2f:29:4d:56:79:79:a0:98:45:fe:31:
         71:cc:d2:44:aa:a1:b0:83:24:50:1e:60:69:b7:3c:38:11:3c:
         09:6e:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org