Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/34352e3233322e32302e302f32322d3234203d3e20323637323438.roa
File:                     34352e3233322e32302e302f32322d3234203d3e20323637323438.roa (raw, json)
Hash identifier:          4Mq3g0Z1RdPaPKvR6BCZYXxK4HdYmumjWVa5aQVLExI=
Subject key identifier:   DE:E8:48:3E:12:70:01:C8:E2:BA:1A:64:59:50:E6:3D:B7:F1:13:32
Certificate issuer:       /CN=E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF
Certificate serial:       0B176A9A7B596CDAC69C5617812C14F567D27575
Authority key identifier: E5:02:ED:5C:B5:5A:E0:AC:34:A3:90:CE:8A:82:0F:3F:3A:99:47:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/34352e3233322e32302e302f32322d3234203d3e20323637323438.roa
Signing time:             Wed 01 Nov 2023 15:00:00 +0000
ROA not before:           Wed 01 Nov 2023 14:55:00 +0000
ROA not after:            Wed 30 Oct 2024 15:00:00 +0000
asID:                     267248
IP address blocks:        45.232.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:17:6a:9a:7b:59:6c:da:c6:9c:56:17:81:2c:14:f5:67:d2:75:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF
        Validity
            Not Before: Nov  1 14:55:00 2023 GMT
            Not After : Oct 30 15:00:00 2024 GMT
        Subject: CN=DEE8483E127001C8E2BA1A645950E63DB7F11332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5d:9a:bb:ac:32:3b:c4:74:b0:da:28:80:63:
                    21:be:da:9b:12:11:2e:a7:37:e2:f2:8a:e3:e6:e8:
                    f6:aa:af:dc:25:38:97:27:c3:93:52:3c:0d:d2:a2:
                    dd:f1:48:55:d9:18:f3:25:e5:b1:43:1a:8c:03:79:
                    d3:12:13:83:9b:55:f4:2d:ab:93:0b:c1:96:e0:b5:
                    83:60:66:57:1a:9c:06:83:3e:ee:11:67:6d:e5:93:
                    26:fe:c5:c6:83:07:2c:4a:d9:ea:bc:8e:89:c9:d8:
                    e7:6c:a2:6c:20:79:b3:77:9c:29:7d:0e:21:1f:6c:
                    e9:bc:cc:d3:b5:06:5e:de:8c:89:f5:79:46:c5:64:
                    29:b3:6f:0b:1d:ce:4a:96:6f:82:9f:15:77:a4:90:
                    cb:25:33:d1:57:b4:f4:50:46:a5:68:dd:34:f2:7a:
                    64:a6:74:2f:85:8d:e2:1c:da:e4:1b:b6:00:c9:db:
                    d3:75:41:3f:38:a3:8d:94:14:f0:f3:d0:68:7a:6f:
                    32:a5:d0:89:85:0e:b2:f3:7c:fb:ba:9b:5e:c1:a8:
                    e9:70:83:e5:4b:08:1b:91:c1:0e:b8:c0:1e:0a:f8:
                    f1:9e:05:92:62:27:82:4b:1b:5d:20:ef:0a:05:42:
                    66:fc:13:dd:a8:99:5b:8b:a9:40:a0:70:17:ad:6d:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E8:48:3E:12:70:01:C8:E2:BA:1A:64:59:50:E6:3D:B7:F1:13:32
            X509v3 Authority Key Identifier:
                keyid:E5:02:ED:5C:B5:5A:E0:AC:34:A3:90:CE:8A:82:0F:3F:3A:99:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/34352e3233322e32302e302f32322d3234203d3e20323637323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:b7:1b:00:e9:c3:74:b8:6e:b4:02:7f:78:3a:91:21:64:bb:
         1e:5d:31:6c:41:c2:28:38:4a:bb:2e:e5:6f:f9:5e:6f:38:b2:
         73:1b:c8:4b:62:51:45:4e:7b:d3:37:88:f7:b6:6b:51:62:80:
         a0:77:42:d4:9c:a0:86:4e:5d:55:0a:3f:d1:0c:c6:dd:2b:f6:
         91:14:6f:22:da:6d:db:7f:c6:5d:f1:0f:e9:fc:33:ed:ab:dc:
         26:86:ba:ac:00:90:e1:0d:b6:4d:41:25:98:27:32:d9:de:0a:
         eb:9c:c7:bf:27:c8:51:1d:e2:b4:48:be:b9:59:df:1c:31:33:
         92:0e:99:04:68:e8:4e:64:8b:67:73:5b:f0:23:c9:d3:23:7e:
         40:8e:65:39:ca:bb:9e:13:17:67:de:4d:ad:7e:92:6d:fe:ad:
         01:a1:e1:b4:75:4d:f3:09:3d:96:30:ac:35:75:c9:d6:55:4a:
         a6:63:3e:89:7b:91:30:39:4d:16:a6:23:89:dd:c7:1d:50:76:
         c6:21:80:91:48:a7:78:72:df:c5:7c:cc:6e:b0:a6:ee:f5:be:
         73:4b:7b:60:ed:3d:b0:a1:f0:f8:2d:ac:bb:97:7b:c4:27:40:
         b2:3a:06:57:34:63:21:c5:46:b8:38:c0:13:f2:13:32:0f:1e:
         ad:14:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org