Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa
File:                     34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (raw, json)
Hash identifier:          XH6BFKNRvGtJtAG7yqdMjGgLQC/CI+VprqTPh2G3oHw=
Subject key identifier:   48:D0:30:8D:23:02:BC:19:98:42:52:74:9B:7C:51:F9:AD:3D:1E:C5
Certificate issuer:       /CN=C422E0B8C0893646916FBC7155048940DBDE3512
Certificate serial:       1F550BFDB368FAFB83E93283642FE30AC730D285
Authority key identifier: C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C422E0B8C0893646916FBC7155048940DBDE3512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa
Signing time:             Wed 13 Mar 2024 20:01:54 +0000
ROA not before:           Wed 13 Mar 2024 19:56:54 +0000
ROA not after:            Wed 12 Mar 2025 20:01:54 +0000
asID:                     268727
IP address blocks:        45.171.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:55:0b:fd:b3:68:fa:fb:83:e9:32:83:64:2f:e3:0a:c7:30:d2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C422E0B8C0893646916FBC7155048940DBDE3512
        Validity
            Not Before: Mar 13 19:56:54 2024 GMT
            Not After : Mar 12 20:01:54 2025 GMT
        Subject: CN=48D0308D2302BC19984252749B7C51F9AD3D1EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:cb:2f:9d:7b:32:9a:1c:6e:4e:71:31:d8:
                    4c:f6:8a:ab:da:ef:ae:b6:a5:a2:52:e4:7a:f3:ac:
                    2f:73:a0:08:c4:60:06:af:aa:62:60:0d:e4:2d:ef:
                    af:48:bf:9c:48:35:fc:6d:1c:18:9b:fc:ce:79:93:
                    57:ce:cf:95:db:e2:0d:06:45:72:4b:28:0a:ef:c1:
                    da:c3:ba:ef:fa:db:f1:46:0e:0f:39:10:0c:6f:c0:
                    5e:a6:99:6a:c7:7e:95:fe:0b:c0:2f:31:f2:90:ec:
                    cc:c3:fd:53:00:4c:db:ba:04:c7:f8:87:01:57:c4:
                    c6:2d:5c:7f:d6:3c:36:f3:85:48:3e:fb:61:69:40:
                    02:14:29:ce:09:82:54:0a:0f:45:e9:3e:ed:8d:14:
                    4b:82:2b:d2:f1:2d:03:97:2b:44:35:c9:fe:18:8a:
                    f3:c8:cd:d5:e4:c4:59:bb:1a:b5:71:28:1f:63:b3:
                    6a:33:c4:32:1c:01:21:a8:f7:c0:a7:30:ad:05:51:
                    72:1a:ba:8b:84:5e:db:7e:18:6a:06:23:12:f5:01:
                    dd:9c:45:df:04:d7:a3:cf:66:46:aa:4e:21:35:f7:
                    19:e3:35:ae:ec:11:d5:5c:86:44:8e:ae:56:91:1d:
                    60:a2:20:0c:38:7b:3f:b1:07:a8:e2:50:40:ad:ed:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:30:8D:23:02:BC:19:98:42:52:74:9B:7C:51:F9:AD:3D:1E:C5
            X509v3 Authority Key Identifier:
                keyid:C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/C422E0B8C0893646916FBC7155048940DBDE3512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C422E0B8C0893646916FBC7155048940DBDE3512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:88:cc:ac:4b:15:9a:1c:5b:48:13:81:9c:18:0d:e3:90:a8:
         84:29:84:dd:aa:69:cc:78:ca:71:a1:f9:08:b9:4c:02:90:24:
         0a:26:17:56:2c:81:41:19:64:05:62:7f:80:d0:10:3e:48:49:
         99:35:47:51:8c:af:a3:9d:e1:1b:6a:94:86:4e:0a:9c:60:b3:
         8f:33:fb:72:f1:56:09:38:53:4a:5d:42:7e:fe:54:47:a3:55:
         6e:e1:a7:91:67:f6:2a:c1:9d:11:f7:b7:f9:76:55:e1:ec:5f:
         4a:fc:9e:9c:4e:15:d8:63:ea:16:db:6a:ee:2d:9d:d9:b5:2e:
         4c:34:35:33:e5:1b:16:13:d5:3f:a0:90:d4:bd:92:6b:ce:51:
         db:06:a0:96:b7:1f:28:f7:1e:ac:b2:bf:f1:07:e1:93:e7:2f:
         91:cd:25:93:e4:74:33:05:19:8c:de:fe:e3:76:2c:6e:8f:2f:
         01:3a:93:61:ee:c1:a9:6c:f2:c6:99:f9:ad:c1:16:e4:2d:e4:
         13:59:95:d3:0f:f8:cb:c5:fe:9b:7f:a7:1e:2e:c1:9d:1d:cf:
         db:20:2d:d9:34:1c:f6:45:c6:ed:b9:51:fa:45:e5:d9:ac:38:
         d1:36:44:bf:c7:89:f6:b8:93:ed:22:b8:83:b9:b1:30:26:5e:
         31:da:79:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org