Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
File:                     34352e3233352e31362e302f32332d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          DOReuJ1bx36yXuzu+srKRt4OWoMO7+NJEiv+ylEeszc=
Subject key identifier:   43:67:51:62:05:14:4A:D5:61:13:5A:23:91:63:C1:61:C0:BE:D1:41
Certificate issuer:       /CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
Certificate serial:       7606E08BDEB3F1540B5010F6449331424B4B31E5
Authority key identifier: F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
Signing time:             Wed 03 Apr 2024 21:39:07 +0000
ROA not before:           Wed 03 Apr 2024 21:34:07 +0000
ROA not after:            Wed 02 Apr 2025 21:39:07 +0000
asID:                     262391
IP address blocks:        45.235.16.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:06:e0:8b:de:b3:f1:54:0b:50:10:f6:44:93:31:42:4b:4b:31:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
        Validity
            Not Before: Apr  3 21:34:07 2024 GMT
            Not After : Apr  2 21:39:07 2025 GMT
        Subject: CN=4367516205144AD561135A239163C161C0BED141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:f4:a4:04:bb:f5:b3:7c:6a:4b:7a:5e:74:
                    9d:81:bc:d6:a0:cd:7f:dc:c2:93:3d:d2:77:a8:07:
                    8f:f4:d3:1e:aa:04:43:d4:93:fb:a9:91:15:82:ec:
                    3a:7a:ee:06:04:08:c2:7d:6e:ed:28:99:5b:54:5d:
                    f7:10:64:d1:7f:f6:91:31:44:d8:d9:c8:8e:56:45:
                    62:3f:38:db:2e:4c:bd:94:99:a8:18:55:9c:f4:37:
                    25:49:4f:55:0a:a7:82:6a:18:c2:e9:f6:8b:76:e6:
                    11:dc:32:04:4f:79:f1:02:0b:cf:94:dc:86:fa:78:
                    b1:f5:34:57:2c:1a:b3:bf:bb:7e:7f:72:07:15:4f:
                    a5:ef:99:17:55:ee:5d:dd:c6:7c:14:c0:95:bf:bc:
                    00:ae:73:2e:a7:66:63:68:5f:87:bf:2f:11:5a:0f:
                    31:59:b1:9a:04:d3:1e:f7:6f:91:92:f7:17:6f:0b:
                    64:10:90:5d:2d:4c:f0:c9:23:4b:0f:6b:97:3d:16:
                    57:e8:d4:d0:94:d5:67:06:be:e3:aa:b1:d1:b3:b9:
                    db:5b:c9:2c:94:55:87:8a:25:20:75:e1:e1:94:a8:
                    4a:31:8c:c5:06:72:8d:79:76:6b:8d:aa:ed:e5:38:
                    62:f7:0f:e4:14:56:f9:37:72:6b:4e:66:b3:d8:10:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:67:51:62:05:14:4A:D5:61:13:5A:23:91:63:C1:61:C0:BE:D1:41
            X509v3 Authority Key Identifier:
                keyid:F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:50:1d:c0:42:a4:f1:46:f5:43:6f:95:ad:fd:85:35:ed:50:
         74:9a:52:80:09:ab:43:ea:36:3d:eb:19:6d:45:2f:20:2b:b4:
         0d:02:57:49:4f:15:93:df:96:3e:d5:4d:03:61:4e:c3:95:b6:
         75:ee:af:14:49:3a:ca:c8:0b:c0:64:b8:80:f8:d6:d0:23:4d:
         db:e7:2f:61:c2:20:9d:66:c9:4f:ae:fe:8d:47:6b:ce:46:91:
         38:d4:d0:67:1d:1a:e3:aa:01:95:60:1b:0e:76:24:30:76:fa:
         40:ed:23:1b:e7:23:e9:de:41:40:db:50:9c:50:af:dc:1e:52:
         9d:30:a4:97:b6:0f:61:bd:86:38:f9:90:c6:1a:49:11:f0:5b:
         61:df:02:b7:77:08:6f:e9:81:0e:e1:f4:64:99:1b:26:e0:e0:
         e6:3c:1b:16:90:b8:dc:92:44:23:90:e1:bf:60:b9:11:34:ec:
         07:72:6a:f2:67:fd:ed:5d:95:d7:49:70:ae:9d:47:32:ce:08:
         d7:6e:d1:33:5a:aa:68:5e:c3:56:c5:5e:bd:c7:ff:a0:2d:ab:
         e4:53:a0:08:0f:c2:80:87:ec:d4:32:45:cb:4f:5c:e6:11:c1:
         c1:82:44:76:03:78:86:78:ba:67:00:dd:df:e8:32:9a:a2:e1:
         21:ee:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org