Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/34352e3233302e3235342e302f32342d3234203d3e20323637313831.roa
File:                     34352e3233302e3235342e302f32342d3234203d3e20323637313831.roa (raw, json)
Hash identifier:          ycxwEPpcRI/gtYlZ8YzxyjjJl6M3dO52gcyjS5CrSV0=
Subject key identifier:   95:CD:F7:3F:06:27:D3:F3:3E:26:50:EB:F1:C6:FD:4E:E6:A1:9F:5C
Certificate issuer:       /CN=E8600CA4798A70EA54DA70A6ABD324A4AEFFB518
Certificate serial:       326CE70D7E448CF237F578F470DE8E288C7D11A0
Authority key identifier: E8:60:0C:A4:79:8A:70:EA:54:DA:70:A6:AB:D3:24:A4:AE:FF:B5:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/34352e3233302e3235342e302f32342d3234203d3e20323637313831.roa
Signing time:             Tue 18 Jan 2022 13:45:43 +0000
ROA not before:           Tue 18 Jan 2022 13:40:43 +0000
ROA not after:            Tue 17 Jan 2023 13:45:43 +0000
asID:                     267181
IP address blocks:        45.230.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6c:e7:0d:7e:44:8c:f2:37:f5:78:f4:70:de:8e:28:8c:7d:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8600CA4798A70EA54DA70A6ABD324A4AEFFB518
        Validity
            Not Before: Jan 18 13:40:43 2022 GMT
            Not After : Jan 17 13:45:43 2023 GMT
        Subject: CN=95CDF73F0627D3F33E2650EBF1C6FD4EE6A19F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:98:63:c7:f9:48:c1:18:69:df:96:11:8a:fd:
                    27:26:8a:8f:49:b5:3f:47:1d:fd:df:4e:03:08:c4:
                    d1:bf:66:8c:df:13:de:0f:da:0b:c1:f2:cd:4a:b8:
                    af:13:82:a8:af:38:94:9e:74:5f:0d:b3:b0:c4:65:
                    2e:0e:b9:73:42:ea:4c:b8:52:68:d7:06:8c:88:4a:
                    59:95:83:91:6c:fb:9b:bf:d0:3c:df:f0:5f:98:38:
                    9f:ba:8e:b0:db:db:6c:56:81:c0:dc:ba:a5:d4:c0:
                    8a:67:dc:b7:b8:96:f1:b1:4c:1c:33:6e:71:70:2d:
                    89:2c:f1:65:0d:f1:06:10:71:2b:4e:3d:36:1f:76:
                    b5:b4:a7:fa:e3:1c:5c:d8:40:b6:8c:d2:6d:b7:4d:
                    a9:6c:85:ae:a9:3c:aa:4e:7b:99:40:b1:2b:47:da:
                    4d:86:c3:07:ce:c6:f7:28:88:e5:8b:e6:10:c5:01:
                    38:1d:a9:63:98:f5:a0:bb:ee:a7:8c:76:93:07:9f:
                    94:6a:11:b7:f4:2c:6e:7f:25:6f:4a:63:75:0f:ed:
                    f2:24:63:a5:6b:8e:ed:d3:a0:1e:e4:3b:00:d7:3e:
                    e2:7b:da:80:83:cd:a7:5b:90:03:d3:f7:af:94:b1:
                    4b:f8:a7:6e:39:dd:f7:a7:0c:1d:bf:3a:9d:0a:f5:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:F7:3F:06:27:D3:F3:3E:26:50:EB:F1:C6:FD:4E:E6:A1:9F:5C
            X509v3 Authority Key Identifier:
                keyid:E8:60:0C:A4:79:8A:70:EA:54:DA:70:A6:AB:D3:24:A4:AE:FF:B5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/34352e3233302e3235342e302f32342d3234203d3e20323637313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:dc:e9:0a:8a:56:b1:95:fa:a4:4a:de:d1:a1:a0:f9:d7:58:
         d7:8a:66:0a:66:33:84:01:f8:4d:58:40:46:ae:24:9e:9e:36:
         c3:4b:2f:fd:35:b3:73:ed:a9:e1:a2:95:57:e3:16:f8:79:fb:
         aa:b3:7d:96:f2:5e:95:34:f5:f6:05:c0:7f:1a:75:0b:b8:84:
         0a:d2:ca:04:4b:44:db:29:a0:63:5c:c9:72:e7:dd:5d:d0:f1:
         3b:72:8d:33:42:ca:0e:82:1c:ce:48:76:1e:89:2a:6e:54:6b:
         3a:5e:4a:6e:d9:e9:10:e1:34:f5:c1:e9:71:25:0e:00:ca:9c:
         7a:b6:17:40:85:66:66:6b:33:11:d1:96:16:d8:13:43:55:c1:
         4a:09:fa:19:7a:10:2f:6e:57:38:b4:39:4c:48:0b:a9:7c:26:
         b6:c7:ac:7c:74:25:1c:4b:be:33:76:32:f5:e4:7b:4c:87:2d:
         7a:72:ba:1d:9c:da:70:d5:1b:cc:64:52:3f:1e:ee:06:0f:44:
         7d:70:03:00:00:98:44:59:a1:a2:dd:72:19:8c:48:36:d0:35:
         47:36:53:25:b7:0b:9c:7b:2a:df:db:66:bd:43:7a:f9:f0:79:
         b7:1f:04:05:7c:3d:dc:23:71:cb:62:2f:75:5f:c6:91:8c:be:
         dc:5b:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org