Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31382e302f32332d3233203d3e20323639323534.roa
File:                     34352e3138332e31382e302f32332d3233203d3e20323639323534.roa (raw, json)
Hash identifier:          Cxp8TUbd9fTQms5pO5Xf50GAN9aDqg+y1JIo/RmeLGY=
Subject key identifier:   8E:CC:CB:95:6A:70:04:AE:EC:7C:7F:51:16:A7:99:B8:32:F7:91:CB
Certificate issuer:       /CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
Certificate serial:       16D477424FE0B6797204DC9B089C17355FF504B1
Authority key identifier: 47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31382e302f32332d3233203d3e20323639323534.roa
Signing time:             Tue 15 Aug 2023 14:31:10 +0000
ROA not before:           Tue 15 Aug 2023 14:26:10 +0000
ROA not after:            Tue 13 Aug 2024 14:31:10 +0000
asID:                     269254
IP address blocks:        45.183.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d4:77:42:4f:e0:b6:79:72:04:dc:9b:08:9c:17:35:5f:f5:04:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
        Validity
            Not Before: Aug 15 14:26:10 2023 GMT
            Not After : Aug 13 14:31:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:13:cc:cf:71:66:98:da:c9:0a:ca:75:6c:
                    73:2c:c0:4f:39:82:8f:b7:a9:d3:65:ac:31:96:02:
                    62:cc:0f:24:74:83:2c:33:ac:cf:a1:65:0d:d5:1a:
                    47:97:7f:8a:41:ed:69:ca:d0:f3:7b:26:f7:22:54:
                    25:5d:a6:77:3a:7b:9c:55:66:f6:d7:4e:f5:4f:78:
                    f3:61:96:27:55:bf:59:af:2a:15:26:eb:aa:7a:95:
                    68:fb:71:d1:b7:57:9f:21:ed:ae:cf:70:4a:19:3d:
                    b1:a6:b1:21:f4:b2:56:66:73:cf:40:28:1e:ea:cc:
                    3d:b2:f2:4d:ca:ca:0b:75:62:62:b9:42:6d:3e:b8:
                    80:f9:3d:31:d7:63:c1:8e:ca:63:ee:45:d9:f0:2a:
                    cd:97:89:84:4e:bb:47:eb:73:9f:56:3d:a3:ca:61:
                    68:b5:23:3f:41:5f:aa:cf:b6:ff:f5:d6:c7:81:14:
                    e9:35:2e:e8:c2:04:9e:2d:a3:88:07:63:0e:70:27:
                    7b:96:f4:c6:2d:92:f8:37:2a:db:e6:92:ef:f0:e1:
                    28:9d:cf:b0:63:2c:eb:e4:30:ec:a5:c9:f4:bd:08:
                    fa:dc:82:76:24:a6:aa:86:2b:ae:11:1b:06:e3:cc:
                    9b:87:0d:f7:3c:a1:73:01:42:a7:8d:95:9c:be:78:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CC:CB:95:6A:70:04:AE:EC:7C:7F:51:16:A7:99:B8:32:F7:91:CB
            X509v3 Authority Key Identifier:
                keyid:47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31382e302f32332d3233203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:b9:40:1e:df:0f:40:bf:db:c0:7d:4f:4b:2a:de:56:a6:15:
         95:b6:58:0c:20:db:38:85:54:3b:09:9d:28:08:59:fc:fe:f4:
         a3:8e:d6:1e:83:b4:61:c7:69:ec:b4:28:bd:3f:1f:ae:9b:e8:
         06:18:74:c3:8b:25:e3:e4:e7:e5:e8:95:fc:65:28:51:bd:c9:
         f7:93:cd:ca:2a:b0:fd:8c:fc:c1:69:fb:5e:e7:8b:11:1d:13:
         34:74:7c:72:3e:8b:89:b6:87:93:dd:39:62:06:b4:76:87:ae:
         5b:de:2b:97:63:7a:97:8b:f8:0b:cb:93:0b:bc:0b:d6:30:30:
         b8:05:c3:4c:bf:1b:db:5c:81:91:27:48:f3:d8:d5:23:ed:5d:
         c5:9f:0d:a0:1f:ac:38:34:67:b6:f4:bf:09:bb:f4:96:61:30:
         a1:00:bf:d7:e9:13:47:a7:69:86:78:b3:51:25:3c:b5:e6:ad:
         14:5b:af:ae:b5:13:71:05:43:e6:9f:d5:ee:c3:d6:af:ad:53:
         d9:03:22:00:2e:da:d0:a0:c1:4c:b8:bb:84:4b:a4:cd:d0:f4:
         b6:33:75:30:5d:7d:d2:28:39:2e:4e:fb:04:75:e4:ac:a2:05:
         d1:7c:29:b5:fe:c8:6a:88:02:ae:e7:08:f0:70:f5:dd:90:a2:
         77:cc:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org