Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3131302e302f32342d3234203d3e203631353839.roa
File:                     34352e3233302e3131302e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier:          dKPQsiudWOz9oBZTWQvrmSuOQ2VAdrNZQs+uNwnFin8=
Subject key identifier:   F0:FC:A9:99:1D:04:B7:97:7B:04:A4:61:86:ED:10:1A:71:BF:FC:A2
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       4B5E8D308AE753E196711C42869DD6E418E38646
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3131302e302f32342d3234203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:30:25 +0000
ROA not before:           Tue 21 Mar 2023 13:25:25 +0000
ROA not after:            Tue 19 Mar 2024 13:30:25 +0000
asID:                     61589
IP address blocks:        45.230.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5e:8d:30:8a:e7:53:e1:96:71:1c:42:86:9d:d6:e4:18:e3:86:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:25:25 2023 GMT
            Not After : Mar 19 13:30:25 2024 GMT
        Subject: CN=F0FCA9991D04B7977B04A46186ED101A71BFFCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b7:36:fb:4d:7f:c3:cb:07:99:c2:7a:a5:d9:
                    e7:f4:1d:00:e5:a4:09:7d:69:1a:8b:d4:ae:b1:ad:
                    46:ff:72:84:23:01:4f:be:af:d4:3f:bf:7b:19:e4:
                    71:29:9b:83:60:56:8e:01:34:87:4f:26:c8:f0:f5:
                    4b:22:85:5b:22:c3:e0:1f:17:99:89:db:ae:4c:c1:
                    24:00:e7:8d:c8:a6:fe:35:96:48:2b:58:a0:af:cc:
                    4c:64:39:db:7f:fd:c2:cb:22:63:f4:0f:5e:75:8b:
                    63:f2:28:0f:3f:17:19:2f:78:b4:9a:0c:a0:63:6e:
                    bb:41:5e:6d:99:b6:ec:fa:a1:f1:3c:ec:1f:b7:c1:
                    58:ce:7b:13:69:a3:e3:8b:8d:55:3d:2c:30:d8:8b:
                    af:23:58:77:28:1b:03:51:aa:47:00:fb:f9:27:3c:
                    6c:8e:ff:b7:04:c8:3e:bc:b5:34:93:c6:38:9a:63:
                    a9:aa:65:59:92:71:84:e2:7d:ac:f2:6a:2d:25:42:
                    05:ad:0d:d2:c0:b0:b7:e4:27:b4:2d:7e:fd:75:a5:
                    d6:3e:0a:d6:a8:c6:87:4e:95:b8:a7:cd:da:d4:c0:
                    0e:99:82:26:b2:be:47:6e:d6:e2:ac:be:4f:0a:74:
                    fd:29:70:af:e2:a3:7e:79:30:06:c5:7a:40:c7:a0:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FC:A9:99:1D:04:B7:97:7B:04:A4:61:86:ED:10:1A:71:BF:FC:A2
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3131302e302f32342d3234203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:22:8f:2f:0e:49:6f:ae:b3:41:04:ca:de:6a:6b:87:b8:8b:
         7b:64:36:40:a5:94:dd:a2:4c:16:1b:96:ec:b6:e9:e0:8b:78:
         fd:f4:52:96:5a:92:40:90:40:91:66:57:98:c3:b9:bb:49:c8:
         bc:e3:58:ed:40:3f:8c:bb:09:03:2e:fc:6f:36:62:57:29:a9:
         84:5d:7e:30:42:72:fe:57:54:88:90:a2:97:a2:54:99:43:05:
         40:70:25:fa:a6:70:55:ae:17:06:e4:9b:94:bd:38:3b:4b:eb:
         f4:93:92:9c:99:ac:9e:97:9c:61:ad:7e:d2:7c:fe:b2:1b:28:
         71:e2:84:3e:bc:9c:7b:ca:bb:97:ad:69:2b:09:30:03:3d:48:
         f2:da:3a:48:d3:0f:c8:ef:f3:5b:78:08:0b:c6:99:b4:b7:ac:
         ee:04:aa:7c:b0:35:ef:60:e4:ab:e1:15:e6:e2:53:d3:05:c7:
         17:be:e8:e6:d0:16:12:ad:c9:e2:4d:55:d4:64:d1:48:07:f5:
         7b:ec:35:b1:ca:42:b9:e5:c6:58:31:18:1b:2a:c6:f3:09:82:
         74:18:84:76:36:4d:ab:55:75:b8:a2:f8:73:29:07:a4:ea:cb:
         dd:52:9f:29:74:2f:5c:05:b5:21:2a:d0:ae:75:80:b5:8a:b8:
         73:fe:60:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org