Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38382e302f32332d3233203d3e20323632343934.roa
File:                     34352e3232362e38382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          oN1JVMSQ48BrHTlOB3EJj0UFGa6zwKMLJRvKN89UTpk=
Subject key identifier:   98:34:75:E0:C6:BB:B2:E5:CE:B7:7D:B4:23:42:AA:A2:C0:8E:2B:59
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       016325AA0E4CDD549CE6874FADEFBE19B4A1BC33
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38382e302f32332d3233203d3e20323632343934.roa
Signing time:             Fri 18 Aug 2023 11:50:13 +0000
ROA not before:           Fri 18 Aug 2023 11:45:13 +0000
ROA not after:            Sun 18 Aug 2024 11:50:13 +0000
asID:                     262494
IP address blocks:        45.226.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:63:25:aa:0e:4c:dd:54:9c:e6:87:4f:ad:ef:be:19:b4:a1:bc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug 18 11:45:13 2023 GMT
            Not After : Aug 18 11:50:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:0b:99:ad:1a:ce:5e:dc:84:32:6c:18:aa:
                    d0:09:52:60:04:a7:04:e6:5c:10:25:58:19:b3:52:
                    a4:1e:5d:02:57:f4:01:b0:f0:36:35:d7:59:72:04:
                    a2:d4:58:b5:4f:a7:25:c3:99:02:5a:87:50:7c:c0:
                    c2:3e:ea:3e:44:94:b9:f4:b7:b1:3f:eb:98:62:f9:
                    c5:dc:60:1e:37:44:ee:fb:8d:56:32:1e:cc:bd:4d:
                    27:85:16:f3:ca:83:61:6d:9d:b3:78:cf:93:67:89:
                    4c:89:60:10:ac:20:b7:5e:be:db:7d:e8:33:56:00:
                    33:7a:06:1a:48:14:30:10:ad:fe:06:c7:2f:36:27:
                    d0:99:cb:54:8b:24:af:da:f5:c8:0f:5a:89:68:02:
                    15:7c:a2:5c:38:56:ce:49:ed:fa:a8:f9:7e:6a:fd:
                    ee:9a:f2:76:31:e0:03:5b:68:43:a6:c7:3a:05:d7:
                    b1:6d:a7:e9:e9:7d:af:8a:fc:2c:08:4e:3c:da:18:
                    bb:88:a5:1e:8c:d9:a7:6d:04:3d:1e:e5:98:11:2f:
                    1d:73:82:c5:54:33:42:5f:ff:a9:a6:42:4d:d6:04:
                    4f:d6:f4:a3:9e:4d:96:77:81:d0:7b:59:2e:f6:c6:
                    50:c5:27:b8:7a:19:d4:3e:c0:79:9f:2b:69:c0:43:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:34:75:E0:C6:BB:B2:E5:CE:B7:7D:B4:23:42:AA:A2:C0:8E:2B:59
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:4f:1e:2a:0a:51:5b:e4:59:0c:bf:5b:29:92:12:a8:f7:05:
         5f:36:f4:24:66:a7:ef:0e:25:73:d3:0f:a4:a0:ee:6f:77:bd:
         cb:1d:15:be:bd:23:4e:73:31:43:3b:6c:01:cf:dd:b1:06:c2:
         73:8d:05:40:cf:95:5e:d2:57:35:2e:c3:cb:44:eb:14:b9:34:
         a6:bf:d9:77:e2:66:f6:be:32:29:9f:47:9d:ca:60:8b:98:78:
         e7:cb:fe:80:0b:40:14:87:62:b6:7d:fa:41:29:73:0a:ed:a5:
         e9:8b:b3:ca:88:15:4e:4c:68:ec:1d:9f:b7:cc:bc:59:7e:e4:
         de:76:b9:e7:1d:a6:71:74:fc:a9:06:ee:9f:77:fb:69:e5:e1:
         ac:61:40:84:1f:d3:92:b3:03:e4:ef:e6:55:88:e1:80:0d:68:
         a2:bb:21:7b:3b:9f:93:69:cb:58:c2:d6:60:cb:91:43:b5:e9:
         4e:69:4a:68:e8:37:a1:57:8b:3d:13:7d:bd:00:ec:6f:12:9a:
         fa:d9:d8:aa:7e:47:3c:2a:de:77:25:c8:36:19:0f:29:ea:16:
         1a:76:a6:a9:05:da:72:e2:69:42:bd:95:b2:d2:57:3c:c8:5f:
         ed:f9:d5:1f:ff:0d:a5:d4:2d:5e:ae:d5:12:ca:05:09:ed:7d:
         dc:32:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org