Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136322e302f32342d3234203d3e20323637343230.roa
File:                     34352e3233352e3136322e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          HYa0jqYdH2O4bqUtAx/U0eOK70Z0RyO+0P0WbcO2nw4=
Subject key identifier:   DD:47:45:1F:57:F4:E4:70:B4:06:14:DB:2A:81:DE:06:34:58:BA:6C
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       51F78708BA85523EDD4C913E1F70FE9E73237084
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136322e302f32342d3234203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:59:24 +0000
ROA not before:           Wed 28 Feb 2024 13:54:24 +0000
ROA not after:            Wed 26 Feb 2025 13:59:24 +0000
asID:                     267420
IP address blocks:        45.235.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f7:87:08:ba:85:52:3e:dd:4c:91:3e:1f:70:fe:9e:73:23:70:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:54:24 2024 GMT
            Not After : Feb 26 13:59:24 2025 GMT
        Subject: CN=DD47451F57F4E470B40614DB2A81DE063458BA6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:51:ae:ed:e1:ca:a3:18:30:a0:08:07:fd:
                    e8:34:ca:7e:da:a3:8a:31:6a:33:da:70:1e:ae:a4:
                    cc:e8:db:39:8e:cb:fc:37:46:8d:25:e3:60:54:6f:
                    5a:4c:0d:0d:2f:1b:70:d4:b7:a4:9a:78:41:e1:6d:
                    a3:86:db:cc:a4:c1:81:71:22:59:e3:41:10:9a:3e:
                    a4:02:25:eb:fc:3f:95:52:3d:94:76:d5:5b:eb:a0:
                    9d:5a:b5:79:65:6e:84:9a:1a:e7:eb:51:08:99:47:
                    d2:fd:8d:6c:bc:13:f4:9b:84:ac:60:49:bd:de:92:
                    0d:a9:d0:6f:bf:9c:91:2d:ca:8a:4c:be:b8:9e:34:
                    96:99:f2:23:5f:d1:b6:1e:19:3d:c9:ec:d6:e0:42:
                    2a:30:07:b6:b2:50:10:4b:f0:aa:f1:bb:10:3b:fb:
                    4c:99:02:2e:1b:6b:57:6e:a4:12:b0:3b:98:b3:a2:
                    6a:cf:dc:36:2c:0b:8f:25:47:b7:60:8e:21:af:d4:
                    ab:70:da:11:48:eb:e1:38:c1:6a:bc:82:56:07:e4:
                    f0:f8:32:0b:fc:74:53:d0:cc:49:54:a8:55:ec:a6:
                    7c:2e:ee:ae:51:8f:d2:8b:d7:12:f1:ac:1a:e9:80:
                    20:c5:01:f6:78:66:8a:a9:17:cf:96:2d:27:ec:f7:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:47:45:1F:57:F4:E4:70:B4:06:14:DB:2A:81:DE:06:34:58:BA:6C
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136322e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:cc:22:f8:0e:27:bb:14:0a:9a:60:95:fa:57:f1:01:ba:
         38:64:1e:f2:fe:ae:c5:b1:3b:60:9b:bf:fa:02:a0:ab:e8:9c:
         bf:0e:1b:d2:7e:69:c2:92:48:22:38:d5:24:21:72:38:ff:b6:
         dc:ec:6c:45:25:98:42:f2:a0:64:89:69:c5:2c:bc:6f:09:2b:
         cb:80:10:05:6a:40:15:65:f0:f1:78:9e:4b:95:a7:af:7e:ce:
         4a:56:b5:6a:58:71:4e:7a:ff:27:9e:af:ea:10:85:cb:93:86:
         64:de:56:6c:69:8c:a8:d2:eb:fb:c4:22:8c:d5:3c:d0:05:f2:
         d3:98:9b:98:20:7e:c2:9b:2c:ad:e3:75:0e:99:70:b9:8f:7a:
         f4:63:a7:3a:55:b2:70:fa:3c:88:f2:8b:e6:a4:88:76:8f:84:
         2d:80:6a:7c:84:02:e7:3c:f2:87:5d:50:54:f6:2c:b1:da:c0:
         76:61:9f:78:2e:b0:08:d8:db:06:0e:75:85:d0:ff:64:36:09:
         4e:31:30:13:d7:32:97:ee:4a:7f:a7:d9:0a:6c:9d:2f:43:0b:
         b3:4e:cc:11:85:8a:02:de:9f:35:48:a5:de:de:9a:9d:11:4e:
         16:be:6c:41:6a:21:c0:68:69:b1:2d:6c:13:38:ce:77:56:ae:
         b8:c6:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org