Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37352e302f32342d3234203d3e20323637323531.roa
File:                     34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (raw, json)
Hash identifier:          fnqvPAuQxOFR9isle/LOqJPZsC93T2aYlQNcVhVknjk=
Subject key identifier:   76:A8:06:D5:B1:42:07:C3:20:3B:EA:22:BD:9A:F9:08:FE:E5:D6:25
Certificate issuer:       /CN=9C9296102315824CFD263B973FA8E26ADEAD1475
Certificate serial:       3ABADF9C5CE33BF1C57039093144DCC290E9D6E9
Authority key identifier: 9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37352e302f32342d3234203d3e20323637323531.roa
Signing time:             Thu 15 Feb 2024 18:00:02 +0000
ROA not before:           Thu 15 Feb 2024 17:55:02 +0000
ROA not after:            Thu 13 Feb 2025 18:00:02 +0000
asID:                     267251
IP address blocks:        45.232.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ba:df:9c:5c:e3:3b:f1:c5:70:39:09:31:44:dc:c2:90:e9:d6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C9296102315824CFD263B973FA8E26ADEAD1475
        Validity
            Not Before: Feb 15 17:55:02 2024 GMT
            Not After : Feb 13 18:00:02 2025 GMT
        Subject: CN=76A806D5B14207C3203BEA22BD9AF908FEE5D625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:bb:f5:ef:25:db:dc:12:32:c0:10:2a:60:
                    ae:e8:fd:f5:0c:a3:3f:7f:4b:bb:af:ed:e1:a3:81:
                    8a:de:1f:0f:04:a4:ff:10:c7:d6:96:05:fe:ba:fa:
                    28:43:fb:7d:f1:be:cb:03:68:72:7d:0a:ad:0a:13:
                    74:97:8c:9d:b2:3c:c0:83:0e:0d:dc:a2:5f:05:78:
                    23:58:96:99:7c:c8:94:a3:a4:e4:7f:78:72:87:9a:
                    85:f0:5a:8b:9a:28:44:ff:70:71:1d:d2:5c:da:00:
                    eb:e4:f3:74:ff:27:56:c1:2f:44:ed:0c:ca:bc:e5:
                    b2:26:5d:6b:b2:40:d5:87:c1:57:30:a2:ae:18:d5:
                    ba:0b:91:e8:a7:b9:b3:c9:f2:72:26:2c:4c:c6:14:
                    cf:e9:6d:fd:4e:50:92:1e:13:6d:69:cb:82:69:da:
                    97:ef:31:fd:63:f1:3e:66:39:e6:d6:84:4a:2a:e9:
                    36:af:44:5e:8d:49:64:e8:8a:be:7f:ca:3d:d5:21:
                    51:3d:48:82:f9:e2:a3:00:79:36:a7:c0:4a:b9:0f:
                    9f:ad:94:fc:c8:d8:2d:0d:f9:78:cc:01:7a:7c:36:
                    9b:36:66:3f:0e:f5:97:68:ff:c3:02:10:b8:eb:f2:
                    be:b3:66:9d:4d:5a:ca:92:dd:65:dd:38:b7:8d:13:
                    1f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A8:06:D5:B1:42:07:C3:20:3B:EA:22:BD:9A:F9:08:FE:E5:D6:25
            X509v3 Authority Key Identifier:
                keyid:9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/9C9296102315824CFD263B973FA8E26ADEAD1475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37352e302f32342d3234203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9b:a7:c3:82:59:7c:ae:66:2a:0a:db:49:10:9e:c0:7f:68:
         d6:d5:19:5c:58:ca:ac:d5:de:b5:77:40:2e:65:e5:31:93:58:
         c9:11:cd:3a:52:27:28:b3:48:d7:5b:01:65:1f:f1:57:6d:76:
         d5:37:95:ee:9d:02:31:ec:f0:f5:05:9f:b0:c7:b4:b1:87:d8:
         99:a5:e7:6d:1a:d8:b3:c6:cd:9a:12:3d:83:33:6e:55:38:8d:
         bb:f7:5b:3d:8a:33:5f:df:41:9d:b4:00:5f:13:28:a4:1f:ac:
         91:66:e5:38:27:75:ac:1a:72:46:09:36:fa:8a:7d:b6:b1:ce:
         4a:da:e6:9e:4a:8a:57:01:d4:6d:cd:21:8a:b0:f1:dd:55:94:
         43:4d:e1:e8:e0:23:5a:dd:ee:02:79:23:11:a5:6b:3c:ae:82:
         94:c9:d3:33:80:83:b0:8f:b2:8d:50:94:12:83:59:c8:73:5a:
         e9:17:68:12:5c:57:9e:1b:fb:ba:7a:c5:92:8d:30:a8:a8:0a:
         c7:1f:2d:5b:34:26:3e:75:16:03:0d:8c:1b:37:19:4e:f9:35:
         04:3a:47:65:e4:7f:9e:b6:7c:ba:f2:4d:48:9c:c0:65:61:1a:
         fc:7a:53:1e:b2:f6:0d:bb:46:61:a1:0e:68:32:39:bc:d6:62:
         38:29:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org