Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130322e302f32342d3234203d3e20323638323639.roa
File:                     34352e3233372e3130322e302f32342d3234203d3e20323638323639.roa (raw, json)
Hash identifier:          Q/BUbC/hzElNP3UA0DolIp4Mj77zYJzMs7F1bKG5nJc=
Subject key identifier:   F0:CB:97:A9:04:2D:DB:AF:8D:8A:78:33:94:2E:F9:0F:B0:7A:87:51
Certificate issuer:       /CN=C5AD5C7C55718BD3536091127969815277D3DE7F
Certificate serial:       57FC59708E54329CFB19B193A70B8DA2D2DEB88C
Authority key identifier: C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130322e302f32342d3234203d3e20323638323639.roa
Signing time:             Wed 17 May 2023 14:18:48 +0000
ROA not before:           Wed 17 May 2023 14:13:48 +0000
ROA not after:            Wed 15 May 2024 14:18:48 +0000
asID:                     268269
IP address blocks:        45.237.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fc:59:70:8e:54:32:9c:fb:19:b1:93:a7:0b:8d:a2:d2:de:b8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AD5C7C55718BD3536091127969815277D3DE7F
        Validity
            Not Before: May 17 14:13:48 2023 GMT
            Not After : May 15 14:18:48 2024 GMT
        Subject: CN=F0CB97A9042DDBAF8D8A7833942EF90FB07A8751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:57:c7:67:75:ac:91:13:13:b5:df:26:67:52:
                    58:0a:a2:7f:e3:e8:09:03:eb:b1:56:71:16:e8:ca:
                    c9:4e:6c:24:de:a4:ba:fd:3c:df:b0:9c:f2:c4:13:
                    f7:ee:47:49:06:50:59:e2:1c:f3:60:79:b5:1e:33:
                    61:66:de:03:6a:4f:fb:54:9d:9a:82:7b:0e:31:1a:
                    52:d6:b3:6e:af:bd:37:e8:35:c0:42:77:0c:39:a9:
                    ac:a6:06:17:cf:4b:61:59:13:66:34:61:90:35:66:
                    a9:25:df:11:a1:78:f9:83:95:74:20:fc:cc:da:bb:
                    82:24:b5:71:35:16:3e:8a:6f:f2:d6:22:55:72:12:
                    2c:ea:7f:4e:c2:c0:4f:a1:d5:41:ce:02:04:d2:03:
                    15:cc:fd:af:7c:88:f8:8c:25:5e:7b:f5:5c:9e:a9:
                    31:b1:4f:c9:d7:75:87:13:bc:18:43:15:d8:53:57:
                    ac:ed:17:8d:04:7f:ab:5b:d4:a2:7c:7a:25:96:33:
                    5d:08:64:e3:4d:df:19:0b:70:bc:61:1a:bc:02:3e:
                    54:d2:d5:bb:4d:de:99:b7:4d:c1:2f:80:01:0e:10:
                    27:16:74:d8:4e:d0:76:ba:8a:ad:c8:6c:47:37:c0:
                    9f:c6:0c:80:43:3a:87:ae:ca:2a:4f:8b:90:1a:c9:
                    ae:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CB:97:A9:04:2D:DB:AF:8D:8A:78:33:94:2E:F9:0F:B0:7A:87:51
            X509v3 Authority Key Identifier:
                keyid:C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/C5AD5C7C55718BD3536091127969815277D3DE7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130322e302f32342d3234203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:ac:ed:2c:ca:75:a6:f3:ae:0d:ef:db:a4:db:90:6b:f1:db:
         68:8a:fa:14:ad:20:75:67:6c:ab:c0:31:77:6f:7f:fb:8a:ca:
         6f:aa:fa:6f:ec:66:81:ac:72:b8:d7:59:40:ca:c4:57:26:9b:
         72:5c:0f:f2:3d:a3:6e:a4:dc:ec:1a:f2:31:fc:2d:17:13:cd:
         d1:7f:a9:85:3e:60:ff:bc:f1:73:9f:41:ed:f0:e9:d3:c1:ef:
         25:d6:ee:ad:7a:b9:4c:71:0b:29:e4:51:3d:b7:de:2c:6f:cf:
         9b:cd:e6:b7:24:a4:5a:4b:73:df:1d:18:11:0e:2d:b7:b7:50:
         03:9a:77:69:48:94:7c:9f:50:b9:65:10:b0:68:70:61:c5:d1:
         bc:b1:03:be:d9:a8:e5:e0:33:94:f5:65:2b:3a:15:1f:e5:9f:
         1f:04:92:df:32:2f:8f:80:e5:83:cd:be:88:11:81:e8:12:90:
         f7:0f:51:b7:24:fd:34:60:1d:58:d3:18:ab:83:5b:a6:4e:b6:
         27:1c:c0:83:f3:61:b7:52:c2:77:7f:ea:1a:0c:c2:44:54:50:
         6d:5e:b4:d9:7b:09:24:ae:0c:aa:28:80:ed:8b:6b:1c:fb:5b:
         44:3f:ff:eb:a0:ad:eb:ae:ae:1a:d5:8a:4b:d2:38:44:17:fe:
         b9:cf:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org