Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa
File:                     34352e3233382e33322e302f32322d3332203d3e20323633313535.roa (raw, json)
Hash identifier:          xBBnzRvyzKCbeGiAOE8Jprm1q10QijizKHuMtBX7mvg=
Subject key identifier:   D5:F7:79:77:B0:15:FB:F2:74:E2:6C:86:D3:B6:EF:F0:18:BE:05:23
Certificate issuer:       /CN=6414A22202CC9C361CCD163D34053C6A06E0EB55
Certificate serial:       1B56E67DFD79C789156C8063BE3C43EB6A782256
Authority key identifier: 64:14:A2:22:02:CC:9C:36:1C:CD:16:3D:34:05:3C:6A:06:E0:EB:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6414A22202CC9C361CCD163D34053C6A06E0EB55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa
Signing time:             Wed 27 Dec 2023 19:09:48 +0000
ROA not before:           Wed 27 Dec 2023 19:04:48 +0000
ROA not after:            Wed 25 Dec 2024 19:09:48 +0000
asID:                     263155
IP address blocks:        45.238.32.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:56:e6:7d:fd:79:c7:89:15:6c:80:63:be:3c:43:eb:6a:78:22:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6414A22202CC9C361CCD163D34053C6A06E0EB55
        Validity
            Not Before: Dec 27 19:04:48 2023 GMT
            Not After : Dec 25 19:09:48 2024 GMT
        Subject: CN=D5F77977B015FBF274E26C86D3B6EFF018BE0523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:be:02:b7:04:57:3c:97:5c:09:e6:97:a4:
                    01:bf:af:99:4b:be:fb:4f:70:20:ad:10:45:43:3c:
                    e1:b5:3b:41:ba:c6:74:be:90:cb:a9:41:87:22:aa:
                    1d:b8:d0:4d:61:8c:ac:ac:5d:6e:d7:4f:1a:6d:42:
                    11:2b:e8:6d:7a:0e:ef:47:fa:ca:7e:e4:41:3f:2b:
                    37:3c:fd:38:9d:c6:81:f1:52:29:25:ee:83:46:e1:
                    b3:16:c7:30:83:39:02:8f:51:45:21:f1:ac:71:03:
                    bf:77:ac:46:33:57:da:65:9d:0a:8b:b3:e3:e9:3b:
                    59:18:04:b3:6c:88:74:fa:7b:7e:79:52:34:fb:87:
                    f3:52:f1:a6:c5:f3:c0:57:ec:eb:11:6b:31:87:d8:
                    84:c3:7a:dc:a8:a7:ab:ed:2c:45:c5:ce:41:b1:d6:
                    3f:95:bd:5e:d0:7a:0e:58:a1:7c:19:d7:6d:a9:1a:
                    4f:eb:50:e9:97:5a:65:e1:61:08:cd:82:f1:4f:0e:
                    92:c2:f8:f1:fa:04:ed:14:bd:29:ec:ef:f3:1f:86:
                    47:c5:6b:47:25:9a:0c:96:55:7d:70:a2:d2:9d:eb:
                    6a:94:40:f3:55:6f:78:f0:cc:bd:c1:52:f7:23:ca:
                    af:6e:b8:1d:c0:2f:0e:ca:a2:c7:79:97:9c:2b:07:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F7:79:77:B0:15:FB:F2:74:E2:6C:86:D3:B6:EF:F0:18:BE:05:23
            X509v3 Authority Key Identifier:
                keyid:64:14:A2:22:02:CC:9C:36:1C:CD:16:3D:34:05:3C:6A:06:E0:EB:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/6414A22202CC9C361CCD163D34053C6A06E0EB55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6414A22202CC9C361CCD163D34053C6A06E0EB55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:2f:99:43:cf:1e:ad:b7:8e:a4:5a:ae:8c:18:c8:bd:2d:
         69:c4:02:f7:cf:fa:c5:20:ce:d1:60:46:4a:ae:2d:ce:be:6a:
         cc:d7:83:e7:15:83:ac:41:de:9b:96:15:fa:57:f1:1f:11:5a:
         54:a9:c2:20:90:d4:6e:40:d5:bc:76:60:c9:1b:01:ee:70:7d:
         78:db:52:2a:18:19:ee:ad:bc:13:17:c4:93:20:1c:14:30:98:
         c0:17:6f:dc:ad:2e:50:6a:28:98:b9:53:09:ed:13:a6:5f:f7:
         17:7c:0e:2a:76:4a:da:94:46:0d:fa:ff:f4:21:57:5c:ac:df:
         b4:8b:1e:70:15:9c:1b:6c:8b:bc:fe:97:54:e9:b9:06:aa:49:
         19:13:01:42:ad:92:1e:b5:c0:52:e5:96:5c:54:54:27:ab:2f:
         a0:4d:20:22:86:88:1c:ec:6b:18:44:be:40:5f:3e:95:eb:01:
         87:ed:f8:6b:53:ed:cd:c5:5a:a7:9e:6f:5d:da:84:3e:7d:5f:
         d6:33:20:a6:8b:6b:f6:13:8d:70:71:ff:19:ac:15:71:63:8b:
         3c:47:74:63:5d:cf:7b:86:46:af:20:3b:d3:3f:88:20:c1:a9:
         44:9c:49:bd:c0:4d:97:d8:89:8d:82:b1:b2:98:23:da:1b:97:
         f9:83:9d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org