Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32342d3234203d3e203631353834.roa
File:                     34352e3232352e33322e302f32342d3234203d3e203631353834.roa (raw, json)
Hash identifier:          H4BKFRgjalI0QcRa/qoF04+8IZlPzS0gFCpRcXkba5c=
Subject key identifier:   08:CA:9B:8A:76:FF:2D:21:65:E3:E6:34:B7:65:8A:52:48:93:7D:E4
Certificate issuer:       /CN=E31CBE505B4171E33F780DC5B4AEEA43E21745A6
Certificate serial:       33D7DD8D2E65AEE141EC94F8E1B02E157D2B02AA
Authority key identifier: E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32342d3234203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:14:08 +0000
ROA not before:           Mon 10 Jul 2023 19:09:08 +0000
ROA not after:            Mon 08 Jul 2024 19:14:08 +0000
asID:                     61584
IP address blocks:        45.225.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d7:dd:8d:2e:65:ae:e1:41:ec:94:f8:e1:b0:2e:15:7d:2b:02:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E31CBE505B4171E33F780DC5B4AEEA43E21745A6
        Validity
            Not Before: Jul 10 19:09:08 2023 GMT
            Not After : Jul  8 19:14:08 2024 GMT
        Subject: CN=08CA9B8A76FF2D2165E3E634B7658A5248937DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:d4:c8:34:00:4c:b4:6a:17:a6:46:63:56:
                    9b:27:1d:0e:d7:86:86:1d:44:3d:17:67:66:ad:aa:
                    61:25:b9:f2:8d:f0:28:08:97:3a:2c:74:35:62:b9:
                    c7:4d:51:2f:1d:91:b0:8a:b1:e7:46:a1:a9:18:5f:
                    b1:91:7e:8c:7f:ad:1d:ca:cc:67:42:e6:a2:dc:11:
                    3f:f5:eb:06:2c:9c:f7:2b:b6:c6:49:2e:8f:c3:3b:
                    3d:2a:41:0a:33:92:67:22:c3:b6:42:96:a8:55:3d:
                    fe:0e:8c:f0:88:29:99:87:ad:94:a7:2b:5e:19:d4:
                    95:73:43:a2:86:dd:7b:d6:d3:fb:c6:b0:0a:41:a3:
                    4d:64:d6:d2:bc:3f:d5:3e:b3:c5:ac:19:d6:5d:d4:
                    87:f3:25:e8:e1:dc:0f:36:de:fe:fe:2b:16:2a:2b:
                    e4:83:2c:55:5b:ce:3e:07:f8:34:e0:3c:8d:ed:54:
                    26:67:78:1b:12:d1:bc:9f:8b:83:d8:04:80:1b:3b:
                    af:59:3a:c4:29:59:13:9a:ca:b2:ee:e3:09:d4:c4:
                    65:f1:38:6e:70:0a:fb:51:49:62:97:46:c4:01:1d:
                    45:9a:4e:a4:60:b1:68:18:36:71:7c:2e:ff:82:e7:
                    f2:25:b4:25:4a:f6:6a:32:6f:2f:fd:0e:66:bd:52:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CA:9B:8A:76:FF:2D:21:65:E3:E6:34:B7:65:8A:52:48:93:7D:E4
            X509v3 Authority Key Identifier:
                keyid:E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32342d3234203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:94:51:a9:00:f0:e9:2b:ae:ae:8b:0c:26:2d:2b:af:ec:6a:
         58:13:35:76:7d:89:a9:ac:a7:2e:6a:8c:ee:b6:a8:02:eb:78:
         db:b6:cb:4a:cb:fa:42:06:cf:71:28:3d:23:af:f8:0d:71:29:
         72:62:0d:b6:85:12:44:c9:4e:09:75:25:25:97:d2:09:bc:51:
         79:93:29:ed:42:13:26:81:17:9d:19:b6:c5:77:d5:7b:c9:bc:
         bd:d1:fb:64:a7:43:31:a9:02:43:a6:30:80:db:bc:22:90:de:
         45:45:74:9f:22:c4:92:f9:d4:f6:92:e3:dc:94:a5:0e:8d:98:
         21:90:a6:eb:9b:59:40:cf:1e:65:7a:17:b0:74:04:8b:ff:fa:
         26:2d:6b:7f:c5:ba:e5:81:05:6f:6f:70:7a:14:59:e0:7d:5d:
         28:f2:0c:c4:68:1a:2f:aa:9a:94:59:8d:e0:d5:62:d1:44:56:
         40:52:97:14:01:5d:5d:88:d6:a9:35:97:dc:71:0e:9b:dc:dc:
         ae:0f:0c:5c:3e:23:98:d9:d6:66:3c:aa:66:52:83:df:00:8d:
         a6:6f:4c:82:f1:9c:58:36:35:ac:41:7c:ad:a2:49:f5:67:aa:
         f6:d5:c1:7d:02:64:66:79:3b:17:d8:39:e4:9f:71:b2:73:a1:
         a6:93:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org