Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          oONhII9rt0oEk9jPLGfsHvPcSNjhQ4ovIUqq77nqcnw=
Subject key identifier:   60:44:CF:0E:A5:36:11:5B:65:17:E7:7F:99:D3:21:D4:66:AA:CC:82
Certificate issuer:       /CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
Certificate serial:       3462DE85CE33C1FE81D8B904ECAE744BF891C8C1
Authority key identifier: 75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa
Signing time:             Wed 18 Oct 2023 13:58:41 +0000
ROA not before:           Wed 18 Oct 2023 13:53:41 +0000
ROA not after:            Wed 16 Oct 2024 13:58:41 +0000
asID:                     269423
IP address blocks:        45.186.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:62:de:85:ce:33:c1:fe:81:d8:b9:04:ec:ae:74:4b:f8:91:c8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
        Validity
            Not Before: Oct 18 13:53:41 2023 GMT
            Not After : Oct 16 13:58:41 2024 GMT
        Subject: CN=6044CF0EA536115B6517E77F99D321D466AACC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:6f:be:91:76:48:05:05:21:bb:a0:dc:43:
                    48:58:87:76:0b:78:79:0c:9c:0a:d7:3f:40:60:5e:
                    02:dc:a3:5e:90:94:5a:b0:d8:61:28:11:b5:aa:84:
                    f9:b7:32:9b:98:b2:62:c3:bd:fe:c1:42:1e:2c:b5:
                    0b:f0:70:b1:f9:08:86:d2:f3:db:4c:eb:c9:bf:11:
                    6e:76:b4:84:6f:87:b1:1d:a2:df:b7:f4:a1:b4:20:
                    43:10:7c:86:21:0b:bf:54:9f:6c:d9:30:e1:af:98:
                    ea:6a:0c:e2:54:da:ea:fe:49:9e:49:04:ef:6d:4a:
                    d9:36:c4:5a:39:c6:c5:0e:66:87:82:23:33:95:b1:
                    98:c3:e1:a3:43:3f:6e:5c:89:8a:37:42:ca:cf:9a:
                    e1:36:47:03:42:46:a0:fb:d8:68:a2:e0:e5:36:f5:
                    25:ee:66:c6:c2:1c:60:17:c7:e8:08:fe:e4:d3:7e:
                    44:22:12:59:4e:7e:da:54:50:d1:6b:b4:82:a3:54:
                    db:77:a6:82:8a:29:8d:1b:26:fd:3c:d8:05:54:55:
                    6a:c5:d1:d7:b7:33:42:39:e2:2c:b4:b6:08:4c:57:
                    41:64:6d:a1:d2:a0:bb:dc:58:70:8e:e2:29:1b:d3:
                    8e:31:cb:17:17:5d:4a:0c:e1:2d:f4:9f:94:3b:6d:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:44:CF:0E:A5:36:11:5B:65:17:E7:7F:99:D3:21:D4:66:AA:CC:82
            X509v3 Authority Key Identifier:
                keyid:75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/752DF8A511E583FD16AFDE7868B695CB08BB271E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:9e:7f:9d:97:b5:48:36:64:33:58:29:24:a2:b9:c8:08:8e:
         bd:e4:96:96:08:02:ea:0b:52:bc:a8:ec:ac:67:71:74:3d:9e:
         3d:96:46:1a:93:f8:cf:f5:97:d9:b5:e2:e4:17:ff:c2:6e:cd:
         b1:bd:5a:ef:e0:48:fc:ad:99:be:64:29:a7:33:fa:b9:d3:94:
         b2:ae:2e:45:cd:f4:55:94:f4:ca:82:f3:68:4b:84:e0:e6:81:
         66:c8:7d:e7:e1:a4:4c:ec:f6:b1:31:33:ad:64:2e:fa:28:06:
         ba:03:f8:30:cc:2c:8e:fe:ca:05:44:96:09:0b:d6:5b:66:40:
         6f:95:7b:cc:f1:40:b4:3f:47:ee:4a:64:03:4f:38:55:68:cf:
         bf:10:84:4d:a6:e8:45:20:dd:ae:f2:ab:87:88:28:38:86:1d:
         b3:88:b0:43:b9:8a:3f:89:43:50:56:78:25:aa:97:76:b3:f2:
         23:22:ee:c5:95:11:a5:5d:38:3d:99:d4:34:2d:28:d9:b6:65:
         85:91:aa:4b:7f:59:3b:a9:d6:b7:6b:cd:93:87:b4:e6:2c:02:
         ef:4d:3e:29:04:0a:3e:8c:b6:e9:d5:89:0b:7b:01:6d:53:3f:
         cb:92:50:c8:78:b2:8b:39:39:ca:3c:52:ba:0a:27:17:0d:e9:
         03:3a:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org