Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3233302e302f32342d3234203d3e20323632383732.roa
File:                     34352e3137312e3233302e302f32342d3234203d3e20323632383732.roa (raw, json)
Hash identifier:          kcryEQ1fWcOQwh6aXMJYaBGk0QOUF7U5rt+1DbG123Y=
Subject key identifier:   8E:40:EE:BC:70:33:50:A9:D7:55:93:6C:7A:BF:F0:6D:AE:B6:C2:77
Certificate issuer:       /CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
Certificate serial:       141BE8898158930C3E649A9DB28F5F3534A76908
Authority key identifier: 30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3233302e302f32342d3234203d3e20323632383732.roa
Signing time:             Mon 04 Sep 2023 20:35:06 +0000
ROA not before:           Mon 04 Sep 2023 20:30:06 +0000
ROA not after:            Mon 02 Sep 2024 20:35:06 +0000
asID:                     262872
IP address blocks:        45.171.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1b:e8:89:81:58:93:0c:3e:64:9a:9d:b2:8f:5f:35:34:a7:69:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
        Validity
            Not Before: Sep  4 20:30:06 2023 GMT
            Not After : Sep  2 20:35:06 2024 GMT
        Subject: CN=8E40EEBC703350A9D755936C7ABFF06DAEB6C277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:d3:1a:a7:80:0f:f9:49:bc:de:29:35:c9:
                    ea:af:d6:0a:ce:e0:9f:00:64:ad:2a:0a:22:0c:12:
                    d9:0e:c6:e9:c5:f5:fe:d8:36:5c:36:b7:d2:24:f0:
                    cf:93:4e:cb:48:f7:1d:35:33:11:a8:30:10:88:1a:
                    b5:aa:6e:6c:66:62:22:42:76:00:89:13:5b:3e:ca:
                    c4:ef:0b:82:cc:10:7b:84:41:17:60:a0:88:37:70:
                    3e:63:38:6f:e9:1e:51:50:b4:91:81:8a:74:40:22:
                    37:89:16:c9:9e:f9:78:5a:fe:a3:94:03:a0:1d:17:
                    f2:a7:85:9d:14:30:e9:ee:0c:85:82:07:28:6b:e1:
                    c9:2c:d8:72:54:fc:00:48:1b:7f:ac:c8:da:89:94:
                    6c:3f:46:ed:30:3b:c9:3f:ae:33:ac:fd:c0:77:9a:
                    76:23:ed:0d:57:d0:22:f9:88:4b:2f:0f:25:0c:e0:
                    8b:97:1c:25:62:d7:d9:21:fd:cf:86:6e:97:9e:7f:
                    f6:3f:f8:85:0f:a0:07:3d:4a:ff:e9:f8:2d:ab:97:
                    89:2a:ae:c5:4e:86:ad:2b:39:b9:c0:d7:56:a4:9e:
                    41:71:4f:11:ae:f0:33:7a:44:e9:22:ac:8b:1b:9c:
                    b5:0b:b3:82:4f:d1:0c:53:2a:0c:85:8b:b1:8b:a6:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:EE:BC:70:33:50:A9:D7:55:93:6C:7A:BF:F0:6D:AE:B6:C2:77
            X509v3 Authority Key Identifier:
                keyid:30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3233302e302f32342d3234203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:70:99:b0:e6:15:c7:83:2a:97:a3:b0:bd:5a:58:a4:e2:af:
         bc:85:14:01:fb:9d:76:d9:4a:85:f9:f4:11:ce:38:68:60:d9:
         99:94:53:f5:67:da:1a:1e:a6:31:36:3b:d0:c3:a1:e0:44:ad:
         73:9d:0e:bc:57:8f:2c:2b:e3:ea:05:d6:3c:f8:88:94:5e:89:
         bf:e4:d2:97:d0:44:20:45:db:76:da:06:76:3a:13:35:ec:ad:
         a1:c5:fd:91:35:92:be:1c:68:a0:a0:4e:fc:fd:d4:0d:ef:ea:
         e7:8f:8c:bc:be:c3:5d:5c:64:06:78:fd:86:ea:0a:a2:13:e0:
         b3:09:c2:00:34:10:fc:b3:4a:7e:92:23:50:8a:7f:d6:8f:b4:
         36:05:e3:85:f6:52:ff:06:26:24:16:13:c9:bd:b0:bf:da:49:
         61:16:c7:50:e6:2e:bd:41:ac:a9:12:70:57:83:60:c9:64:b2:
         b8:d5:e7:b3:4e:8b:bb:63:83:6e:41:c1:6e:b3:4b:56:1a:67:
         9e:49:c0:7b:6c:38:e3:67:f8:08:c9:e1:7c:14:e2:4f:8b:3e:
         fa:5d:59:29:b2:46:70:61:87:5a:b2:7e:e4:58:1d:7c:95:e7:
         3b:42:a3:fd:69:bd:34:ef:9d:52:c8:35:1c:18:e0:7e:53:e1:
         69:97:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org