Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa
File:                     34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa (raw, json)
Hash identifier:          sS0LuXRqNochxWqSJnh+GuGjyHQpPc7w0pUgx51pl5c=
Subject key identifier:   17:D3:3E:C7:E0:B5:76:2A:4C:F7:99:F9:3B:E8:35:EE:1B:31:0F:3D
Certificate issuer:       /CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
Certificate serial:       71525BC4EDB01021F41055ABBA4171DB9C1F138F
Authority key identifier: D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa
Signing time:             Wed 03 Apr 2024 22:27:39 +0000
ROA not before:           Wed 03 Apr 2024 22:22:39 +0000
ROA not after:            Wed 02 Apr 2025 22:27:39 +0000
asID:                     269423
IP address blocks:        45.186.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:52:5b:c4:ed:b0:10:21:f4:10:55:ab:ba:41:71:db:9c:1f:13:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
        Validity
            Not Before: Apr  3 22:22:39 2024 GMT
            Not After : Apr  2 22:27:39 2025 GMT
        Subject: CN=17D33EC7E0B5762A4CF799F93BE835EE1B310F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:2d:68:0c:0c:34:0e:2c:57:99:8b:f3:40:
                    4e:17:69:99:cb:64:bd:50:39:1d:b1:ec:9d:99:63:
                    e2:58:66:3a:ac:b3:ad:f9:fa:6b:de:ac:0d:ea:e9:
                    55:bc:e4:01:e2:f4:c7:c3:74:f1:2f:e3:2d:25:9a:
                    83:7e:d0:d8:39:68:9a:f4:13:d2:41:74:ea:b5:fc:
                    4b:b6:d0:67:c1:9e:f3:76:a5:23:a5:46:01:85:db:
                    f2:4f:f2:a2:ec:d1:e8:95:39:2e:b2:38:5c:db:0c:
                    d8:06:0d:04:a3:4f:59:8d:d8:63:fe:0b:ca:2e:f1:
                    32:e8:a6:56:ea:9b:be:7c:50:5e:88:57:19:4c:f3:
                    4c:bb:64:a7:17:5f:9e:36:46:5d:5a:01:3c:9b:bb:
                    91:2b:f7:f0:a3:52:df:b2:7e:84:00:53:c4:aa:a4:
                    4b:0b:82:e9:5d:4e:4e:92:53:cd:bb:e1:aa:0f:c1:
                    3b:00:c2:a0:e2:e3:57:ca:0c:ba:ea:2e:f4:c6:e6:
                    a4:13:99:ee:a4:16:f7:37:b0:3d:6c:a6:5c:54:89:
                    f4:80:30:14:ee:2f:ac:58:a9:e7:00:5e:27:6b:3f:
                    95:15:fd:c4:88:66:3b:66:d7:95:94:21:94:c1:9b:
                    1e:20:eb:17:08:0e:9f:e3:59:b7:dd:57:dd:e9:c7:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D3:3E:C7:E0:B5:76:2A:4C:F7:99:F9:3B:E8:35:EE:1B:31:0F:3D
            X509v3 Authority Key Identifier:
                keyid:D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/D037231865C4494DAE0A707D2C8705DFEDDA26FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:11:2b:b3:58:fe:8f:16:d6:c2:f8:2b:10:64:98:8e:e4:f3:
         27:e8:6c:96:6d:8b:2b:97:94:a2:50:92:f3:c3:ab:d4:04:f6:
         1a:c6:6a:13:da:60:31:d2:30:ce:33:20:27:b5:b9:0b:8d:a0:
         03:f3:37:65:b0:0f:9c:6d:a4:8f:f2:ec:86:2f:56:d7:a1:45:
         08:05:24:77:6a:bb:c2:30:9f:de:ea:e3:38:e6:05:44:0c:49:
         0a:6c:31:ab:b7:09:86:83:27:2c:8c:44:9e:a9:6f:c6:8a:a9:
         89:45:15:28:42:df:68:08:50:b2:76:81:2c:b1:fc:30:9d:ef:
         98:70:c0:19:27:48:fc:80:62:49:cc:5d:b5:83:7f:7b:a1:c0:
         4e:39:dd:78:15:4e:f0:46:ac:33:1e:ea:d6:99:ab:17:8b:8a:
         09:0d:3c:a0:7a:15:58:85:af:a2:61:b5:88:fd:90:e4:2e:6f:
         39:f6:ed:30:db:7b:eb:c0:88:9b:e3:34:a6:e3:36:f2:13:02:
         93:ff:91:de:00:1b:39:ac:3c:ef:9b:54:d1:a4:69:e0:5f:65:
         65:0d:73:19:62:9c:c3:75:9f:ec:39:61:e0:4a:37:4e:3f:38:
         62:03:6c:75:d2:08:31:db:97:c9:f7:ad:31:35:0d:01:c6:04:
         7a:8e:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org