Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          +Q7qpCTZUN2QIbPWVvp0KUm731tFmPU/HlAfa6zdAhs=
Subject key identifier:   57:C0:CC:01:A9:E2:B1:A0:33:68:F0:E8:77:D6:C8:B2:6A:B4:2A:5A
Certificate issuer:       /CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
Certificate serial:       3FA7EF09FAA9E001BD0F85D0D5950EE99B334412
Authority key identifier: BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa
Signing time:             Tue 09 Apr 2024 16:49:57 +0000
ROA not before:           Tue 09 Apr 2024 16:44:57 +0000
ROA not after:            Tue 08 Apr 2025 16:49:57 +0000
asID:                     268205
IP address blocks:        45.236.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a7:ef:09:fa:a9:e0:01:bd:0f:85:d0:d5:95:0e:e9:9b:33:44:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
        Validity
            Not Before: Apr  9 16:44:57 2024 GMT
            Not After : Apr  8 16:49:57 2025 GMT
        Subject: CN=57C0CC01A9E2B1A03368F0E877D6C8B26AB42A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:81:27:d4:48:28:8b:bc:7a:b5:96:ff:46:
                    eb:1a:6e:31:5e:23:fd:1a:eb:1b:2e:c1:ad:f0:a3:
                    47:24:df:f0:60:dd:14:b8:92:fb:23:0b:54:46:7e:
                    0b:e1:ef:12:6a:95:85:85:4e:c1:a0:27:94:4d:df:
                    ed:a4:56:de:33:9c:71:47:d8:f7:c8:47:c4:55:de:
                    a3:c2:f7:1d:04:ab:7e:c1:1a:a0:b9:97:64:51:eb:
                    4d:b4:cf:fd:4d:ca:7b:94:1a:bf:cb:fc:a2:a6:0e:
                    be:d3:ae:2c:c8:3a:43:bc:17:8d:c0:59:57:8d:f9:
                    a7:f1:ec:25:39:9c:59:e5:2f:ec:ea:84:a3:9f:b6:
                    9b:62:e4:e0:1b:eb:d4:d6:70:fe:03:bc:28:87:c1:
                    d2:64:ca:3b:03:a9:3a:5e:62:91:52:78:23:fe:8d:
                    ed:b1:ed:c4:50:5f:ea:01:65:5b:0b:74:5d:eb:f5:
                    b4:81:6c:1c:84:d9:dd:21:72:d1:7d:68:0b:02:d4:
                    f4:af:b9:c0:ea:ec:cb:1c:7f:ac:54:4f:ac:f7:23:
                    67:3b:26:78:ef:d5:69:1f:24:37:90:d6:60:d9:36:
                    76:76:7c:96:e5:be:5d:64:17:e9:94:55:23:72:99:
                    dd:f0:af:5c:0e:6c:ed:bb:d2:9b:9f:34:d3:12:ee:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C0:CC:01:A9:E2:B1:A0:33:68:F0:E8:77:D6:C8:B2:6A:B4:2A:5A
            X509v3 Authority Key Identifier:
                keyid:BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/BCB1F68DF2709D725FAB621593B41E20C3D376FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:11:41:54:1b:64:99:72:bf:b5:6d:2a:5c:c8:ae:7e:b5:b7:
         56:34:d2:27:28:75:e2:c8:ca:0c:5f:f4:85:eb:be:29:21:77:
         cb:df:35:a6:a0:aa:c8:c9:67:95:3e:0f:04:ec:ce:0a:66:f6:
         d4:af:c2:c6:82:42:8a:8b:aa:18:87:33:46:85:5c:0d:75:93:
         74:bd:a8:62:54:1b:20:2b:25:db:79:34:d1:84:ca:c5:c3:00:
         67:32:bf:e7:c4:4f:7a:e9:dd:c9:4b:3a:10:80:8f:fd:5b:6d:
         97:23:f2:64:13:e3:7a:c4:43:85:1c:70:36:6c:f7:70:cd:7d:
         03:1c:3a:ef:4a:45:0e:a3:41:a0:29:4f:dc:e6:d5:4d:19:28:
         7a:39:6c:b4:ae:03:90:e6:a2:50:03:15:d4:95:74:db:18:d5:
         d6:cd:9c:fa:e1:55:eb:3e:7b:9b:c7:72:38:85:18:60:5b:e3:
         c6:40:f3:a7:aa:cf:cb:7a:d1:ee:06:fe:6f:f6:63:0d:5b:da:
         04:30:65:00:49:e3:a1:90:0e:50:04:44:bd:4f:37:cd:64:fb:
         ce:bb:ea:a9:ee:62:b6:db:7b:9f:7b:35:69:76:56:64:10:6f:
         a1:21:5b:32:f4:52:14:58:ab:e5:ed:5e:95:e6:98:f2:54:af:
         d1:95:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org