Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233372e302f32342d3234203d3e20323639313934.roa
File:                     34352e3233382e3233372e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          qC9Ynxdt81cD5T6MF8JrPnxYpzVxcuN+TRq444DwQc8=
Subject key identifier:   41:B3:83:5D:34:F0:35:CF:2D:59:F9:7C:F0:41:BD:46:41:92:D5:80
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       433B3BC584461B8583A720AF8B9844C462B1CDD0
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233372e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:37 +0000
ROA not before:           Sat 29 Jul 2023 16:21:37 +0000
ROA not after:            Sat 27 Jul 2024 16:26:37 +0000
asID:                     269194
IP address blocks:        45.238.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3b:3b:c5:84:46:1b:85:83:a7:20:af:8b:98:44:c4:62:b1:cd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:37 2023 GMT
            Not After : Jul 27 16:26:37 2024 GMT
        Subject: CN=41B3835D34F035CF2D59F97CF041BD464192D580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:82:43:70:1d:d1:0f:58:84:d7:53:3e:6f:
                    36:17:d2:71:b9:4e:63:16:96:ec:b4:f3:cf:ee:11:
                    bf:18:d4:6f:48:f3:60:9e:f7:68:13:34:e2:3f:5f:
                    ab:12:b5:83:de:2a:64:11:a9:ba:81:3f:54:27:24:
                    8b:05:60:6e:5f:25:07:5c:f6:40:cc:22:95:93:c3:
                    23:a2:d7:df:27:80:cc:8b:81:0a:c7:eb:df:3d:da:
                    05:84:32:14:77:3b:af:47:3f:e7:5a:ac:e5:6a:d6:
                    e7:bd:e0:ee:13:4e:c5:cf:fe:e1:fa:e3:28:5c:b5:
                    31:5c:35:e1:b3:e5:70:52:70:aa:74:90:4d:a8:04:
                    ed:29:c9:50:64:ce:a5:b2:4a:3e:68:e2:23:b3:0d:
                    6b:88:e7:b5:a9:90:63:b8:aa:8b:40:3d:be:64:c6:
                    bb:b9:69:09:5c:90:4b:ad:09:c7:e1:df:d5:e2:87:
                    7c:a0:c4:91:1c:d6:95:63:f1:bc:e0:43:24:3a:3d:
                    79:40:4c:b2:37:b3:23:32:64:ce:2e:7d:4a:18:56:
                    ed:04:02:7d:29:20:34:04:7f:d4:5a:39:46:ef:43:
                    58:2f:a7:dd:10:d0:ed:d0:84:34:16:ed:ff:d8:91:
                    73:58:4a:b5:3e:4b:83:06:d5:e0:23:91:67:c2:05:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B3:83:5D:34:F0:35:CF:2D:59:F9:7C:F0:41:BD:46:41:92:D5:80
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233372e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:95:da:d3:58:6a:ee:4e:21:d9:dc:38:d5:d3:8d:93:6b:ef:
         50:ad:df:e9:46:3c:78:e0:7c:3f:cb:6b:40:f6:30:ef:03:55:
         99:42:5b:db:a8:be:10:6d:35:9d:5f:8f:f1:c2:97:16:a3:a9:
         ce:a6:d2:59:b0:6a:28:85:7a:db:9e:b9:c6:7a:86:11:75:da:
         50:80:a9:bd:b6:66:5f:87:29:05:b9:5b:22:fb:49:db:8e:e5:
         77:42:33:60:ca:ce:67:b1:3d:8f:b1:89:3c:8b:37:cc:7b:1f:
         e1:ee:e4:57:98:a5:43:a2:65:78:a8:c3:14:b0:7c:1f:cf:1d:
         24:c2:e2:ae:c7:17:b2:cf:0c:52:61:f3:e5:b3:68:02:e4:c3:
         0f:eb:13:9e:5d:1f:69:2d:70:ee:44:10:0b:dd:13:d3:f6:f2:
         59:bf:f8:23:93:22:da:38:31:fe:15:1c:69:7b:8a:3d:63:9c:
         48:15:7d:01:2e:84:a7:a9:17:67:8e:ad:93:73:d8:ce:75:1e:
         0a:b8:d1:0c:10:94:41:9e:99:a9:84:05:31:2b:fc:e9:54:94:
         83:3b:97:5d:5f:ed:1b:a7:2e:a1:64:75:1a:eb:00:69:a0:d4:
         9c:cb:ed:2e:60:fa:61:a6:98:72:90:57:4a:e6:14:b8:60:66:
         36:4a:81:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org