Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa
File:                     34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa (raw, json)
Hash identifier:          3QMPLVeKMMGa1yCtDjsmQsKtLFkO8S8YUmOLeV/joqM=
Subject key identifier:   44:29:DC:A0:14:12:A7:5B:E1:0D:DA:C6:98:DA:CF:DC:D9:CF:DE:06
Certificate issuer:       /CN=AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291
Certificate serial:       74EA9E1131C04A5B7BDABAE298E4EB4C3072B251
Authority key identifier: AC:84:02:A9:ED:B1:31:C8:A9:68:1A:6F:1E:A9:7A:1F:09:D2:D2:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa
Signing time:             Wed 24 May 2023 12:28:57 +0000
ROA not before:           Wed 24 May 2023 12:23:57 +0000
ROA not after:            Wed 22 May 2024 12:28:57 +0000
asID:                     266967
IP address blocks:        45.226.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ea:9e:11:31:c0:4a:5b:7b:da:ba:e2:98:e4:eb:4c:30:72:b2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291
        Validity
            Not Before: May 24 12:23:57 2023 GMT
            Not After : May 22 12:28:57 2024 GMT
        Subject: CN=4429DCA01412A75BE10DDAC698DACFDCD9CFDE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:18:2c:44:47:ec:5c:e0:ef:8e:81:bc:d6:
                    e2:09:4d:6e:85:7e:2b:03:f0:fb:18:88:0b:05:ff:
                    91:6b:19:65:c4:45:c7:e1:ae:7e:86:7d:d5:32:7f:
                    d9:fb:ed:c8:80:06:97:45:91:7e:66:16:94:4d:60:
                    39:4d:ea:95:ac:51:d2:e9:f4:c3:78:b9:2c:6c:68:
                    1e:e2:81:7c:79:d5:ec:d9:9b:e5:8c:0c:3a:df:85:
                    7f:a5:f7:3a:66:10:7a:b4:39:ef:b0:e6:aa:47:b5:
                    60:ff:42:0c:53:0b:95:16:0d:26:82:1b:08:d9:ba:
                    ae:05:18:bc:cc:5f:f9:ec:48:ee:f1:24:c3:7d:7d:
                    31:6c:6d:37:c7:94:f6:eb:c1:d7:64:43:a6:35:40:
                    9e:25:e1:57:6b:96:58:6c:a3:4e:b2:fb:b6:78:2b:
                    14:87:20:47:09:a7:14:be:36:8e:55:8b:1b:59:51:
                    70:f3:00:33:d1:34:98:c8:c6:70:82:ab:17:c4:e8:
                    9a:3b:9b:4b:17:ab:74:38:58:0d:df:63:46:59:32:
                    7d:cb:20:16:d6:53:96:55:20:7a:a9:1c:48:13:49:
                    ce:51:02:ac:26:68:9e:07:30:30:99:5d:eb:4f:dd:
                    7d:d7:0f:fa:a4:14:be:57:82:b8:ef:c1:7a:99:5f:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:29:DC:A0:14:12:A7:5B:E1:0D:DA:C6:98:DA:CF:DC:D9:CF:DE:06
            X509v3 Authority Key Identifier:
                keyid:AC:84:02:A9:ED:B1:31:C8:A9:68:1A:6F:1E:A9:7A:1F:09:D2:D2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:d3:cf:89:2b:27:1e:04:dd:5b:75:cb:f6:0c:ea:73:0c:f7:
         4e:e0:98:55:5d:4d:ff:1f:18:b2:e5:51:c5:81:fd:49:fd:20:
         70:b7:5d:0b:6f:b1:70:26:b9:e7:7d:28:6e:82:89:d5:59:73:
         cb:32:e3:de:8b:04:f8:48:73:52:8d:70:d8:4a:16:17:a3:99:
         72:29:42:f1:18:3a:d2:8d:a5:54:65:9d:c4:29:55:e2:a3:e4:
         1c:70:e0:c9:7f:89:67:9a:6e:89:4c:1a:32:53:8b:2d:31:1b:
         4b:71:5b:f5:24:41:70:3c:95:a2:5b:0a:8f:52:65:84:ed:f2:
         71:a2:cb:5c:0e:b8:e6:5e:b4:53:67:48:e2:b9:4e:88:12:3f:
         ad:1a:41:87:2b:72:46:6c:c1:61:b6:f3:5e:55:39:ad:c2:fb:
         7c:3e:5c:d6:c5:ba:87:46:42:78:2b:8c:c6:d5:b2:58:af:dd:
         cb:c2:9b:c1:7e:91:f3:d4:e3:0c:32:4e:61:4b:af:80:94:44:
         69:5f:7c:bd:98:81:c1:be:62:bc:44:40:15:89:52:bc:be:6b:
         43:43:36:93:23:d4:04:b5:34:24:ff:00:01:f8:ef:0a:ee:30:
         b2:6b:29:ff:7f:73:7f:00:36:37:de:71:00:87:24:53:e1:6c:
         a9:a7:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org