Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          Q4h9WZi3DUhid5ejee51nWlyIwB6mDRzsm2D1tuk3JE=
Subject key identifier:   3D:28:F1:7E:C5:59:76:22:8E:FE:8B:B1:E6:46:DE:74:39:24:63:73
Certificate issuer:       /CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
Certificate serial:       3565630B61B2EDDFB2615AD5C75C09B404056231
Authority key identifier: 30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 04 Sep 2023 20:35:28 +0000
ROA not before:           Mon 04 Sep 2023 20:30:28 +0000
ROA not after:            Mon 02 Sep 2024 20:35:28 +0000
asID:                     268746
IP address blocks:        45.171.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:65:63:0b:61:b2:ed:df:b2:61:5a:d5:c7:5c:09:b4:04:05:62:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
        Validity
            Not Before: Sep  4 20:30:28 2023 GMT
            Not After : Sep  2 20:35:28 2024 GMT
        Subject: CN=3D28F17EC55976228EFE8BB1E646DE7439246373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:ab:9f:1a:7d:4f:c9:eb:07:a6:22:de:94:
                    8d:7b:be:d0:21:2d:11:e4:d9:c9:0c:2e:1e:ed:ad:
                    8b:cd:93:d0:a3:e8:f4:2b:7b:23:f4:da:e9:5c:ad:
                    c8:27:c7:36:b9:01:10:24:e1:e7:1a:65:9f:06:4b:
                    a5:6c:39:1e:c8:a9:ba:8a:24:89:32:bd:19:1e:93:
                    3e:fc:0d:e0:ef:d9:c0:a4:7b:10:29:28:f0:48:85:
                    09:da:fb:e9:05:3c:69:2c:f3:20:cd:14:10:e1:b8:
                    6c:9b:a3:12:de:3a:19:be:ba:9e:dd:c1:e4:85:18:
                    bd:ca:7c:9c:51:9d:f9:2e:b7:ae:85:91:fb:04:bd:
                    67:ff:a2:23:db:fa:f5:e7:79:0d:df:5c:33:4a:59:
                    63:67:a3:e4:11:e2:b4:da:af:2f:db:f4:d9:65:a9:
                    5f:63:15:ca:00:8b:af:2e:58:72:92:c3:de:4c:fc:
                    84:ee:ed:b3:bb:59:8f:0b:58:ff:e5:a2:cd:75:15:
                    b6:c6:85:76:7d:60:6b:13:26:1f:db:95:e9:06:86:
                    8c:d6:07:11:9b:07:d4:84:85:12:f4:14:23:53:d7:
                    de:c6:28:7b:a4:04:0b:ce:33:ff:52:1f:53:98:87:
                    f3:e6:06:95:af:07:ac:e0:de:df:d8:2b:67:c0:82:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:28:F1:7E:C5:59:76:22:8E:FE:8B:B1:E6:46:DE:74:39:24:63:73
            X509v3 Authority Key Identifier:
                keyid:30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:4f:e0:1e:19:18:80:31:9a:ce:22:97:85:47:de:01:8e:84:
         7e:3c:db:3e:1d:28:94:0c:ac:aa:99:15:d5:ba:47:dc:7d:0c:
         15:ec:f1:a5:0a:37:b0:9e:3f:25:b1:5c:8a:40:21:2e:41:3e:
         0d:0d:49:5d:0b:aa:17:c8:d4:4f:b6:e9:05:8a:4b:37:82:8d:
         42:8f:c0:15:82:94:c5:5d:72:61:c4:aa:c4:5f:5b:71:6d:c9:
         8d:c0:6f:27:3d:7c:00:5e:cf:9f:95:89:e8:df:79:79:d7:c5:
         99:35:f2:1d:4b:f3:4c:e3:a0:35:45:c3:24:53:6a:b2:14:8f:
         42:97:d2:7e:fd:35:f0:d3:68:a1:87:29:77:b0:be:5e:49:57:
         e7:4c:3e:d6:95:ce:1a:b0:cd:6f:33:df:5c:b8:d8:33:a0:a9:
         6a:e3:9c:a8:d2:0d:70:19:90:d8:80:5b:1f:13:8b:bb:55:be:
         c4:f5:37:1f:f6:a6:37:49:3d:61:1a:4f:f6:aa:07:55:dc:99:
         4d:e2:47:36:8a:4a:85:79:03:e7:90:c7:32:61:22:4f:05:c7:
         5b:03:0b:ba:5d:71:2e:a0:9a:e2:0f:95:2f:65:f8:3a:07:cf:
         c6:b4:62:ec:b1:e9:8b:e6:4a:09:16:49:a7:2d:6d:24:ef:0b:
         7f:75:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org