Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/34352e3138302e3233382e302f32342d3234203d3e20323639313533.roa
File:                     34352e3138302e3233382e302f32342d3234203d3e20323639313533.roa (raw, json)
Hash identifier:          mXnrUEd9i32RnIzc2gH/ByQkgb4zKb5j2em1dQ26KiA=
Subject key identifier:   99:37:7E:C2:74:49:FA:F3:71:02:4D:47:18:FA:2B:8C:D7:9D:CA:22
Certificate issuer:       /CN=3D3A16C30DB13F7417CAA993CFC459B87CB20D7E
Certificate serial:       015E363FFDF377C3952B6928904601A9C02282B1
Authority key identifier: 3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/34352e3138302e3233382e302f32342d3234203d3e20323639313533.roa
Signing time:             Sun 27 Aug 2023 15:29:45 +0000
ROA not before:           Sun 27 Aug 2023 15:24:45 +0000
ROA not after:            Sun 25 Aug 2024 15:29:45 +0000
asID:                     269153
IP address blocks:        45.180.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5e:36:3f:fd:f3:77:c3:95:2b:69:28:90:46:01:a9:c0:22:82:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D3A16C30DB13F7417CAA993CFC459B87CB20D7E
        Validity
            Not Before: Aug 27 15:24:45 2023 GMT
            Not After : Aug 25 15:29:45 2024 GMT
        Subject: CN=99377EC27449FAF371024D4718FA2B8CD79DCA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:0d:92:fc:f5:7b:21:1e:f6:f2:01:5a:64:
                    20:8a:7c:e6:ad:22:40:72:13:36:45:ee:92:49:f0:
                    5f:42:3f:f9:5c:3d:d0:9e:80:2e:9b:d6:b9:96:a6:
                    cc:89:51:77:48:ab:96:dd:4f:62:25:60:39:d4:68:
                    ea:09:e8:4e:d5:31:25:f5:19:64:c0:d3:75:11:63:
                    57:b1:05:9a:a5:b9:ca:7c:c1:7f:0b:8c:3d:5b:f7:
                    0c:91:9a:a5:6c:df:0a:0d:a8:5d:23:21:14:21:81:
                    4e:63:cc:04:f7:38:73:53:a8:6c:50:01:7c:e3:aa:
                    d8:30:a8:0e:48:21:fc:9d:d1:5a:cf:ce:18:b7:f4:
                    5d:38:81:e6:18:2c:fa:25:b8:1f:63:50:94:88:5f:
                    a5:d4:14:ce:3c:7b:44:2a:c5:16:45:bc:53:7b:3a:
                    2d:86:73:a9:e2:55:ae:24:fa:a0:43:47:d0:b6:1a:
                    82:87:15:06:3d:dc:cf:1a:7e:fe:b1:21:e9:c6:87:
                    56:7f:a4:1b:d9:df:ef:cc:37:0d:7d:dd:a6:e3:d3:
                    00:f0:82:31:10:0f:d3:21:28:cc:9d:48:5e:40:4c:
                    04:2a:b7:db:b4:de:7c:92:f7:20:75:84:15:0c:22:
                    0e:e3:a2:f7:65:82:5b:79:75:64:59:88:ac:30:6a:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:37:7E:C2:74:49:FA:F3:71:02:4D:47:18:FA:2B:8C:D7:9D:CA:22
            X509v3 Authority Key Identifier:
                keyid:3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/34352e3138302e3233382e302f32342d3234203d3e20323639313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:8d:de:aa:2c:9d:dc:b7:18:e4:58:37:ac:5e:ce:69:ba:
         12:eb:21:26:fb:18:73:63:d2:6b:d0:65:5e:3a:6f:eb:13:a1:
         1b:cb:f3:51:3e:58:56:08:a6:7e:8b:5c:c0:64:f9:4b:dc:f5:
         6b:b0:bb:01:08:19:8e:52:fb:0b:e5:6b:79:76:10:21:69:69:
         eb:ed:54:65:89:c8:c8:92:65:d2:14:dd:7e:3c:00:8d:ac:dd:
         f9:e5:49:d6:d9:02:9e:84:f5:74:63:8a:64:c9:23:ae:bc:7d:
         ec:07:56:52:5d:71:9c:fd:4d:e9:22:cb:42:02:cc:f3:1c:d1:
         b5:e7:a0:aa:9e:da:d9:e7:1d:a8:f4:78:23:6e:73:06:0b:97:
         39:cc:06:fd:d8:e9:10:df:da:c4:44:8c:b8:46:b0:b9:55:f2:
         25:08:79:42:d0:ab:78:a0:fe:36:c7:70:0f:27:ec:b8:d9:f5:
         22:fd:af:ea:51:6d:b1:81:21:c0:b8:fe:79:f2:39:bd:a1:92:
         ee:b3:b7:18:8b:8d:bb:15:6c:97:1c:d6:78:0e:73:63:86:87:
         8d:f6:c0:00:2a:a3:f8:7c:4d:cc:93:ab:28:1b:f4:e5:68:12:
         8a:11:29:3e:40:fb:32:38:a8:50:02:84:53:b3:c7:8a:06:b0:
         22:bf:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org