Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          8Www11ouGACqHYtVZmc+fZ7rLJ7elLPNnZxp0zIvfK8=
Subject key identifier:   3E:48:78:28:3A:F9:CD:D8:46:08:69:DA:2B:5E:C3:93:A7:B0:EF:CE
Certificate issuer:       /CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
Certificate serial:       259E7D14699C96FCF1FDAAA1637417DA355D624F
Authority key identifier: 33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
Signing time:             Mon 04 Dec 2023 18:46:14 +0000
ROA not before:           Mon 04 Dec 2023 18:41:14 +0000
ROA not after:            Mon 02 Dec 2024 18:46:14 +0000
asID:                     267035
IP address blocks:        45.227.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9e:7d:14:69:9c:96:fc:f1:fd:aa:a1:63:74:17:da:35:5d:62:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
        Validity
            Not Before: Dec  4 18:41:14 2023 GMT
            Not After : Dec  2 18:46:14 2024 GMT
        Subject: CN=3E4878283AF9CDD8460869DA2B5EC393A7B0EFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:7b:05:e6:cc:62:61:80:ec:3f:4a:ad:27:
                    a9:ea:f6:2e:da:fb:55:60:3e:d3:ce:b8:8d:11:0f:
                    0b:99:69:93:62:1b:d5:13:47:50:32:cc:6c:29:56:
                    9e:7c:8d:89:26:ab:f1:df:04:3b:fa:cb:5f:78:77:
                    a3:d7:fd:9c:41:fd:e5:10:da:d3:a1:a3:83:e9:2c:
                    6d:20:37:44:73:f8:e8:68:33:30:4c:0d:d4:dd:47:
                    67:25:d3:9c:40:f8:de:3f:1e:2c:26:f3:ee:cd:96:
                    4d:3a:a4:e9:b1:23:0f:36:4f:89:51:7c:18:6c:f8:
                    2e:ed:35:54:d8:b5:28:e7:38:85:b2:ec:e2:09:b1:
                    a4:36:d9:a7:8d:d9:df:2a:1a:55:c1:b5:13:ff:94:
                    58:32:18:5f:fe:38:97:b8:ad:68:da:34:d9:40:8f:
                    b7:cf:bd:f9:bf:ec:d2:0f:13:73:b4:54:20:7a:6f:
                    dc:c5:5e:04:6c:40:3e:53:11:94:5f:57:c8:38:85:
                    34:20:b2:58:6b:86:c6:72:ec:74:d8:55:49:f5:4f:
                    76:3a:ea:23:67:d5:89:33:a4:a4:cb:4f:80:91:df:
                    fa:35:f1:c4:f3:77:5b:7b:13:92:a5:b9:ff:5a:f7:
                    d4:32:7d:7e:5d:e2:f8:86:21:9c:80:85:ed:c5:66:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:48:78:28:3A:F9:CD:D8:46:08:69:DA:2B:5E:C3:93:A7:B0:EF:CE
            X509v3 Authority Key Identifier:
                keyid:33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:87:4f:9f:14:3d:f2:7b:93:08:2e:72:bd:ce:19:3e:35:3e:
         05:68:b7:2c:94:ff:57:7f:d7:a7:1e:68:88:67:4d:27:69:17:
         94:82:be:6c:71:c1:a3:af:c6:70:f2:02:96:ba:19:e3:d3:4d:
         2c:a3:eb:87:47:6b:98:fc:1c:72:6e:03:d8:9f:02:b5:b3:70:
         48:6e:9e:5a:1e:15:ec:16:80:4b:f6:26:41:a6:91:05:d8:b3:
         95:6a:a5:b8:0a:4b:b2:c9:fb:a1:88:b2:54:6b:f7:e8:9e:2d:
         2c:e2:6c:62:02:51:d6:12:ae:3e:eb:9d:91:c4:8e:21:2c:4c:
         1a:0a:de:bc:fe:ba:aa:c5:65:c5:84:b9:92:9e:6b:fc:c1:e7:
         ac:59:c0:1c:8c:3f:ac:8a:d3:aa:52:da:8f:65:0e:fa:81:56:
         ef:f8:aa:68:36:f9:f6:8d:04:28:f7:d1:c8:34:bf:9e:3b:93:
         02:ff:c6:e9:65:62:00:6a:82:d9:d4:98:44:40:11:9c:ee:a4:
         84:dd:48:af:be:f5:e5:b0:a0:c6:a8:fe:77:53:3b:36:16:7f:
         11:dc:02:7b:b3:fb:33:4f:d8:0b:36:3c:24:90:32:63:54:51:
         1b:12:65:dd:39:0b:f1:51:26:40:f1:b1:40:3e:e2:34:7c:cd:
         f0:92:0b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org