Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231382e302f32342d3234203d3e20323639313934.roa
File:                     34352e3138302e3231382e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          n/BEhR664GkNAmA3HCMV3OQtOJP1ZlRlCx6I8qpaf94=
Subject key identifier:   17:CD:67:B5:A5:AF:83:4C:F4:F6:0A:EE:8A:CA:74:C3:5B:50:49:88
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       7F91C7635DF60F18FDCE2FA381E842EA00CE8671
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231382e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:36 +0000
ROA not before:           Sat 29 Jul 2023 16:21:36 +0000
ROA not after:            Sat 27 Jul 2024 16:26:36 +0000
asID:                     269194
IP address blocks:        45.180.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:91:c7:63:5d:f6:0f:18:fd:ce:2f:a3:81:e8:42:ea:00:ce:86:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:36 2023 GMT
            Not After : Jul 27 16:26:36 2024 GMT
        Subject: CN=17CD67B5A5AF834CF4F60AEE8ACA74C35B504988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:07:fd:84:30:59:9e:ce:ef:44:5d:50:16:
                    26:08:a1:6e:7f:e8:69:40:8a:59:52:99:dd:3a:d4:
                    90:2d:32:83:3c:ea:70:1a:8d:f9:d2:74:5b:ba:85:
                    d8:71:a3:f8:2a:a9:b0:e9:44:81:11:16:c7:7d:fd:
                    ce:ed:46:fa:3e:6d:a7:03:16:ec:ab:d0:62:0a:b5:
                    19:95:40:85:68:cd:bf:af:ad:57:f8:45:9a:64:d9:
                    0f:ea:5d:55:ee:4c:ba:0a:74:1f:26:91:21:88:07:
                    2d:af:57:ae:e7:ea:0b:02:24:24:98:49:3d:5c:b1:
                    75:e9:50:f8:7c:80:1b:cb:2c:e4:cf:bc:07:e0:b8:
                    00:c9:d6:2d:92:79:52:0c:8c:a0:f8:b0:89:f8:0c:
                    f0:d2:60:d2:2b:19:84:a5:0e:e4:6d:56:ca:49:5c:
                    54:c0:c7:33:fa:36:ca:2b:7b:8c:95:d4:75:29:7d:
                    ca:22:5b:04:fe:83:5c:df:83:77:d5:6b:39:7a:65:
                    a6:08:4b:5e:32:16:cd:38:4d:45:b2:fb:0d:05:ab:
                    d0:18:81:7b:51:f9:18:38:94:7c:e3:92:89:87:0b:
                    79:99:7c:78:3a:7b:ba:36:74:32:ab:be:dc:18:48:
                    1f:f5:30:eb:53:db:15:39:a8:4e:89:19:61:4a:e8:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CD:67:B5:A5:AF:83:4C:F4:F6:0A:EE:8A:CA:74:C3:5B:50:49:88
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231382e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:27:f1:07:79:34:24:87:b2:84:06:25:7c:26:62:8f:da:46:
         9e:e1:7b:2e:f0:00:2c:82:4c:96:5c:dd:c1:cf:c2:53:6c:4b:
         4a:5d:90:a2:18:8d:34:cf:37:07:54:61:71:20:bb:f8:8d:03:
         3d:6f:a2:72:00:09:5f:66:d6:54:bb:0e:5c:ed:f2:0f:b1:fb:
         8c:7a:12:a8:d2:36:fe:e1:ad:6d:63:aa:4e:34:c5:8e:f0:94:
         95:52:0f:9b:62:ed:f6:63:32:d1:8a:e5:28:73:ed:97:bb:6a:
         80:8d:c5:6e:4b:a2:51:af:2e:0c:ee:75:9d:71:99:e5:37:f1:
         bd:ca:f7:e9:8e:56:eb:af:b7:ea:5b:85:0b:a0:63:af:53:9e:
         82:d1:cb:2f:1d:ff:98:2d:e6:6e:83:24:b5:51:07:04:25:6b:
         25:d5:d0:fb:ee:66:90:2e:30:58:3b:2c:ed:e9:26:a0:51:4d:
         3e:5a:70:be:3f:d7:b6:52:04:a3:81:13:47:c4:bc:6c:de:fb:
         c0:a6:80:2c:51:07:c9:9f:ad:72:41:79:46:b3:07:77:d8:0d:
         26:25:c6:c7:83:83:c6:dc:c0:f0:22:dc:11:19:f8:b8:3e:4f:
         07:24:3c:04:a4:66:c6:cb:aa:8f:cd:7e:74:b8:38:39:a6:a8:
         8c:c7:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org