Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
File:                     34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (raw, json)
Hash identifier:          JWAhZbxV5BMt/STZqq1JL4Yhm0wDH2+ivVsg5dVOf8Q=
Subject key identifier:   6E:2C:EE:02:30:2D:E9:9A:18:A6:E8:FA:90:F8:23:C1:B3:71:50:C6
Certificate issuer:       /CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
Certificate serial:       12D272C5125AD616562C2F81FBCB70333D3E5310
Authority key identifier: CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
Signing time:             Mon 18 Dec 2023 19:37:13 +0000
ROA not before:           Mon 18 Dec 2023 19:32:13 +0000
ROA not after:            Mon 16 Dec 2024 19:37:13 +0000
asID:                     268746
IP address blocks:        45.171.228.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d2:72:c5:12:5a:d6:16:56:2c:2f:81:fb:cb:70:33:3d:3e:53:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
        Validity
            Not Before: Dec 18 19:32:13 2023 GMT
            Not After : Dec 16 19:37:13 2024 GMT
        Subject: CN=6E2CEE02302DE99A18A6E8FA90F823C1B37150C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:4a:e5:39:f8:5d:49:33:50:02:05:93:58:
                    63:16:d6:c0:86:d3:c7:c7:4e:98:bd:14:21:15:85:
                    98:af:b4:35:c0:c8:6f:05:cc:34:72:f9:12:bf:b0:
                    0a:dd:ac:f5:ee:39:51:83:cd:62:3c:c1:43:02:80:
                    92:10:0d:9a:a8:13:98:4e:b1:1c:b3:49:76:6e:4d:
                    4d:64:f6:d3:75:5d:cb:de:ed:13:6a:35:1d:39:35:
                    7e:33:d7:4f:44:36:f8:55:51:12:0e:6e:7c:7b:83:
                    a9:ec:8f:0d:75:8f:a8:c5:da:f1:86:bc:5b:e6:57:
                    ec:49:56:5b:d9:da:0f:6d:19:6d:f4:23:1a:c1:d4:
                    2e:3b:af:d0:e8:fd:ef:fa:61:9e:2d:a0:9b:2d:9c:
                    05:04:53:0e:fb:89:88:eb:ce:33:1c:fd:6b:5d:ad:
                    7b:08:b4:31:af:f5:34:97:b4:54:6e:f5:25:4f:02:
                    4d:ef:7c:d3:e2:f0:c3:99:3b:62:33:08:88:ab:3e:
                    a4:b1:48:8d:15:7a:06:a6:6c:f0:e9:15:01:59:80:
                    3b:5b:30:be:06:d4:b1:09:55:07:67:ae:91:2d:ac:
                    6d:d8:1a:2e:a4:89:e8:43:cd:b2:86:d4:0f:05:43:
                    36:8a:b0:a8:9c:97:74:ab:fe:8f:c5:83:ed:6d:c8:
                    90:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2C:EE:02:30:2D:E9:9A:18:A6:E8:FA:90:F8:23:C1:B3:71:50:C6
            X509v3 Authority Key Identifier:
                keyid:CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:03:b1:0f:03:b0:37:61:6c:4a:98:2f:4f:12:98:d6:bf:55:
         27:27:2c:be:1c:90:82:d2:47:49:c2:69:e9:1f:00:c8:ec:c0:
         2c:fe:44:4e:17:6e:94:85:9e:e2:2f:2a:3e:3c:69:96:6b:0b:
         65:ed:9e:93:d5:b2:40:73:2e:c9:f6:6a:d9:ab:4a:a1:3a:da:
         5a:a0:8b:c4:73:3a:63:92:8b:1b:b0:91:bd:96:4c:e8:32:64:
         3a:44:1a:d9:12:5a:29:fc:18:58:20:2d:17:37:a5:d9:3d:66:
         36:12:2b:81:90:2f:08:42:2c:e3:84:61:7c:db:87:88:5f:13:
         1c:8c:63:5e:69:c1:52:d4:50:08:ad:fe:55:55:78:83:38:34:
         ec:f9:10:39:f9:a3:6e:31:8f:ef:fa:38:c7:7e:b3:59:a0:a9:
         41:4d:fa:96:17:6a:1c:c0:8d:94:a0:d5:67:93:b7:f9:9e:41:
         b3:a9:b2:a5:b6:fa:aa:5b:d3:89:e1:bc:3c:47:a1:9e:1f:66:
         74:00:78:ce:78:ef:cb:fa:e1:09:ae:e7:09:f6:d8:ee:70:d2:
         81:49:47:98:95:30:80:1e:fb:93:3d:da:f0:39:08:8d:fc:b0:
         9a:7a:61:73:a2:2e:ba:fc:50:38:75:cf:99:f1:a0:69:94:ac:
         ba:1c:63:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org