Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31362e302f32342d3234203d3e20323638313831.roa
File:                     34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (raw, json)
Hash identifier:          uhM++d7lkAnfcVMeXGMW8WvuesF2aWEwkX71TEX6XeI=
Subject key identifier:   D2:F1:F4:D0:76:BB:24:4C:6A:7D:47:AF:46:E6:A6:A8:C7:A5:D2:D2
Certificate issuer:       /CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
Certificate serial:       6574468E5CEB73976E3B0708AE6462AA5B692E70
Authority key identifier: DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31362e302f32342d3234203d3e20323638313831.roa
Signing time:             Tue 04 Jul 2023 16:11:34 +0000
ROA not before:           Tue 04 Jul 2023 16:06:34 +0000
ROA not after:            Tue 02 Jul 2024 16:11:34 +0000
asID:                     268181
IP address blocks:        45.171.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:74:46:8e:5c:eb:73:97:6e:3b:07:08:ae:64:62:aa:5b:69:2e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
        Validity
            Not Before: Jul  4 16:06:34 2023 GMT
            Not After : Jul  2 16:11:34 2024 GMT
        Subject: CN=D2F1F4D076BB244C6A7D47AF46E6A6A8C7A5D2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:de:a0:f1:b6:ec:42:3e:ce:9b:d8:09:83:fd:
                    74:5c:de:e8:76:01:af:05:dc:aa:18:03:67:48:a4:
                    7f:a2:2e:0a:05:83:de:4f:27:b9:79:4c:0e:39:64:
                    0e:b5:97:6b:23:65:f5:c9:8b:c4:e3:ae:12:a8:24:
                    30:95:34:43:73:4a:55:7a:9f:bd:bb:ea:c7:38:d4:
                    d5:b3:f9:16:24:33:fd:9c:6a:fe:78:1a:b5:36:e7:
                    af:31:71:1d:ae:b6:59:df:ec:d5:67:8d:c0:e7:13:
                    59:ef:de:d4:21:a1:d7:c1:e3:2f:22:69:e9:59:b6:
                    3d:36:63:a8:eb:69:9b:09:34:ec:0f:6f:c7:52:6c:
                    13:f7:80:af:93:e2:ba:aa:2a:80:b7:8e:11:3c:f1:
                    cf:c1:0e:42:4f:af:ab:b0:49:96:de:fa:ab:60:b2:
                    a7:83:64:84:e8:67:5c:14:75:9e:6b:0d:44:80:e5:
                    a8:d2:02:ad:bc:b9:29:f9:60:05:26:c2:c0:f4:c7:
                    96:b8:f2:cb:d2:42:f1:65:30:d6:63:58:08:6e:0d:
                    2c:d7:17:36:e9:86:28:13:31:68:61:ce:d2:81:2c:
                    6d:19:5c:21:ed:2e:11:af:bc:6e:be:58:23:9e:eb:
                    a8:6a:15:d5:f6:7d:47:c2:3d:43:c6:20:ee:ab:d0:
                    87:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F1:F4:D0:76:BB:24:4C:6A:7D:47:AF:46:E6:A6:A8:C7:A5:D2:D2
            X509v3 Authority Key Identifier:
                keyid:DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31362e302f32342d3234203d3e20323638313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:a0:4c:c2:ca:41:be:36:94:e8:90:4c:a9:5f:1a:48:0b:
         1a:9b:22:a3:15:1c:64:d2:aa:38:af:19:97:7d:b2:0d:7c:4b:
         1d:16:e0:3b:91:46:b2:1c:75:b0:82:b2:67:6e:aa:fc:84:d2:
         be:1d:32:94:95:2e:fc:a4:5f:ad:a3:17:58:bd:e9:e4:11:27:
         e1:13:36:17:b6:f8:64:6b:c5:2a:4a:89:f1:d3:8e:93:82:de:
         9f:2f:e5:ed:18:fc:ef:8b:0e:d0:70:83:13:23:a2:11:cf:77:
         e5:38:b7:26:3c:56:b6:ae:b3:4e:b1:17:39:d8:d7:3b:c2:93:
         67:c0:66:89:4d:de:5c:3f:ed:44:d2:f1:17:17:03:12:85:fb:
         38:7e:d5:2a:35:87:f5:c6:4d:ca:62:6e:7a:9e:e7:08:1b:76:
         d9:5f:a2:41:ec:da:68:9f:30:a7:22:b7:f2:6c:40:ce:d8:33:
         80:3f:4e:d6:fd:fd:1b:4b:a5:0c:e8:f8:b8:a1:14:da:16:f1:
         5b:d6:a2:41:e9:82:92:b3:be:b9:75:6f:d5:1c:17:66:15:1e:
         b6:9b:22:62:df:04:85:ac:25:20:50:3e:28:a4:74:77:07:fe:
         42:81:dd:4c:30:4e:5d:c6:72:75:57:5a:b9:34:fa:b1:26:1e:
         55:aa:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org