Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          RdAaqpu7pu/sjSWjj4NtTqfE+GAikWan9/U19dvmDjg=
Subject key identifier:   47:1A:5D:EE:D4:1A:43:53:96:FC:F1:19:C2:B7:CA:CF:E1:9A:33:73
Certificate issuer:       /CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
Certificate serial:       2856AA44734DE324D8D45364F56FE9A191C61B68
Authority key identifier: 33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa
Signing time:             Mon 20 Nov 2023 14:49:18 +0000
ROA not before:           Mon 20 Nov 2023 14:44:18 +0000
ROA not after:            Mon 18 Nov 2024 14:49:18 +0000
asID:                     267035
IP address blocks:        45.227.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:56:aa:44:73:4d:e3:24:d8:d4:53:64:f5:6f:e9:a1:91:c6:1b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
        Validity
            Not Before: Nov 20 14:44:18 2023 GMT
            Not After : Nov 18 14:49:18 2024 GMT
        Subject: CN=471A5DEED41A435396FCF119C2B7CACFE19A3373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:ea:3b:f7:a7:20:8d:e1:79:a1:91:56:66:
                    50:96:bf:cd:34:9f:97:34:b1:bc:39:cd:4f:28:1a:
                    a3:a5:23:d6:ad:65:8f:ce:9e:cc:b7:6d:e2:61:6c:
                    d1:6e:aa:b4:c3:bb:f2:4a:d5:41:06:3c:9a:df:a2:
                    76:a9:73:21:fc:02:97:42:08:f6:77:95:93:45:b4:
                    1c:0d:a2:c5:ed:b8:00:4b:a2:44:fa:74:df:44:52:
                    51:8b:8f:82:b5:49:65:1e:8d:4e:d2:01:2a:98:47:
                    07:f9:65:02:54:fc:a9:a4:8c:ef:3f:e4:79:7c:ed:
                    da:36:29:18:64:b6:a3:aa:d9:b2:76:5a:23:1e:e0:
                    17:a8:e7:f9:f3:4b:23:db:84:35:96:ef:f3:47:2b:
                    f9:5c:d2:1d:5d:c3:5a:71:d0:8e:da:e4:a6:4f:e9:
                    1c:2e:5c:5b:dd:43:49:02:ce:3a:84:35:39:58:52:
                    5d:f4:49:80:fe:ab:ea:d0:ae:9e:ba:20:9f:b8:d8:
                    52:39:44:ac:73:0b:cf:62:46:b1:92:bb:a3:b6:6a:
                    c0:1a:01:8e:e5:29:64:ce:e6:c6:dd:33:24:c3:10:
                    1a:63:14:4e:f8:16:7f:61:b0:13:f6:b1:55:19:e0:
                    16:87:7a:20:03:ef:9c:f5:1f:fb:35:a1:d3:00:ab:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1A:5D:EE:D4:1A:43:53:96:FC:F1:19:C2:B7:CA:CF:E1:9A:33:73
            X509v3 Authority Key Identifier:
                keyid:33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:85:eb:82:e2:97:b7:b8:49:72:45:60:19:c1:cd:65:9f:
         ea:69:ad:ac:48:ed:23:0d:61:50:03:aa:da:60:75:7a:be:ae:
         05:b4:ff:be:91:66:b8:d5:da:90:92:23:e1:4b:2f:28:81:33:
         5e:f0:2b:c6:0c:01:9f:dc:01:73:94:51:a7:2b:dc:86:8d:b0:
         fa:ac:e3:81:60:a8:37:6e:e4:38:81:3f:18:ee:5d:51:17:b0:
         ca:9a:4a:be:3b:0e:85:dc:c5:8a:f1:4b:22:1b:89:d0:39:4a:
         eb:c0:06:14:31:2c:e0:80:35:8b:5e:c8:2d:d6:e1:91:e8:8f:
         da:0e:6c:f0:c0:d4:f5:c3:a9:07:9d:81:21:f2:ea:6e:38:c5:
         45:c1:1e:ab:4c:2c:55:bf:32:1c:56:ba:3f:00:5a:c5:ff:93:
         1b:9d:ce:4e:03:36:bc:dc:75:d6:ca:4b:8a:8d:c8:4f:13:8c:
         c6:e9:20:51:4d:14:af:11:38:f2:de:08:69:00:bd:43:3f:f6:
         56:a3:68:50:06:fe:b6:4c:c2:71:74:dd:7f:4a:52:1a:da:7a:
         08:99:38:10:51:2b:d8:9a:9a:24:4a:8b:e8:37:db:73:a2:f4:
         a5:f4:2b:38:36:51:99:bf:b0:ad:dd:95:c1:40:ba:e4:f0:85:
         e3:32:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org