Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/34352e36352e3232302e302f32322d3234203d3e2033333536.roa
File:                     34352e36352e3232302e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          p+9hJi9zhAYI/Qle/EGtIA1gM7za0qRyZbo5WqmjBmI=
Subject key identifier:   FF:61:B9:E0:4A:94:03:F8:AE:D9:FC:5A:E2:7C:B5:34:F6:E7:3D:54
Certificate issuer:       /CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Certificate serial:       47B5B3D6802D4A5ABBD37FF776189476868E6CCB
Authority key identifier: A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/34352e36352e3232302e302f32322d3234203d3e2033333536.roa
Signing time:             Wed 29 Nov 2023 09:55:34 +0000
ROA not before:           Wed 29 Nov 2023 09:50:34 +0000
ROA not after:            Wed 27 Nov 2024 09:55:34 +0000
asID:                     3356
IP address blocks:        45.65.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b5:b3:d6:80:2d:4a:5a:bb:d3:7f:f7:76:18:94:76:86:8e:6c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
        Validity
            Not Before: Nov 29 09:50:34 2023 GMT
            Not After : Nov 27 09:55:34 2024 GMT
        Subject: CN=FF61B9E04A9403F8AED9FC5AE27CB534F6E73D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:08:ee:49:da:78:d7:21:74:eb:54:9e:32:06:
                    d6:99:8f:fd:9f:35:50:dc:83:70:8e:77:fd:38:c7:
                    16:e2:3c:b5:36:db:e3:9d:87:e2:64:5f:e2:ff:13:
                    57:8c:97:25:1b:4f:1f:a4:61:46:1b:32:00:6e:16:
                    c2:08:3b:cc:33:e2:8b:8d:97:d2:35:93:c7:91:9d:
                    2e:46:7c:50:7d:3b:59:83:17:58:e8:b6:e8:2f:73:
                    6b:c5:03:d9:1d:e3:b8:66:55:91:3a:71:19:df:36:
                    35:b3:16:74:38:3b:c9:bf:57:8f:2b:05:74:3e:19:
                    7b:09:ec:bf:3e:29:73:03:7a:c1:b1:8e:51:13:4e:
                    ec:ea:78:7d:c5:1f:82:41:8e:b5:0a:30:1b:2b:7f:
                    42:70:32:72:a9:e3:17:48:45:07:92:c7:78:7f:a8:
                    1c:3a:e8:34:42:a1:f3:7d:4e:b2:38:85:57:01:d2:
                    6e:19:c2:ca:db:79:9b:be:63:9d:c8:c8:c5:08:05:
                    4e:12:53:4a:fa:1e:97:fb:95:75:52:fe:7b:77:99:
                    5e:aa:37:ae:28:47:e7:a5:9f:18:48:7c:d3:cc:4d:
                    d7:3a:d9:e1:96:a4:40:9f:06:0f:8d:75:ae:02:0d:
                    2f:3d:9e:c1:84:8e:9e:6d:01:f1:d6:93:6e:b1:75:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:B9:E0:4A:94:03:F8:AE:D9:FC:5A:E2:7C:B5:34:F6:E7:3D:54
            X509v3 Authority Key Identifier:
                keyid:A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/34352e36352e3232302e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:17:d9:8d:3e:16:9e:47:ea:aa:32:3f:b9:22:da:de:b2:
         51:3f:73:27:18:51:ec:40:53:cb:ed:8f:2e:6d:2b:1b:d0:f5:
         f8:44:60:9f:12:4c:40:61:d5:0a:55:d9:18:3f:08:b6:d8:b2:
         9c:6f:0a:d4:f4:35:60:f4:f9:1e:2c:c1:e5:a6:e1:d9:cc:09:
         65:2f:d4:d3:1b:e1:21:cc:50:0d:9a:8c:b0:48:94:51:49:cb:
         ba:a6:fe:55:d4:2d:24:2e:30:89:af:15:31:a1:e7:54:7d:e0:
         5e:a2:61:c6:ea:f0:e1:64:2e:89:83:bb:bb:48:77:e7:d7:3f:
         b6:f2:a8:01:86:de:ff:f7:c7:39:6d:20:4c:8f:81:30:23:12:
         64:1b:b7:d5:78:2c:97:59:5b:8d:ab:da:03:27:31:55:dc:40:
         ed:2e:5a:63:04:50:4e:5b:e4:ad:cd:02:13:a7:95:f0:1a:39:
         46:2b:16:e3:6a:52:48:99:17:82:a3:49:e6:fe:33:a1:c3:f2:
         06:8f:57:0e:4a:34:90:2c:60:32:78:d2:42:f7:78:c3:2c:18:
         b6:59:cc:21:0b:f8:67:e8:06:d2:fa:59:d1:0e:4a:86:a4:14:
         4a:cd:c8:08:f9:68:02:bd:0d:de:6b:d8:31:6e:f3:b5:97:8d:
         1a:93:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org