Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231322e302f32332d3233203d3e20323635383939.roa
File:                     34352e3136332e3231322e302f32332d3233203d3e20323635383939.roa (raw, json)
Hash identifier:          S1wodPebIw46u8v4XB2os1YF4sSQWfP3u005mlMgcGY=
Subject key identifier:   A2:3E:F8:3C:11:AE:71:1F:8A:3A:CE:76:C5:C3:96:74:BF:F9:52:4C
Certificate issuer:       /CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
Certificate serial:       3423FC8D12D7C62F27D1C713FCA942C1BF364AB9
Authority key identifier: 2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231322e302f32332d3233203d3e20323635383939.roa
Signing time:             Fri 22 Sep 2023 17:38:49 +0000
ROA not before:           Fri 22 Sep 2023 17:33:49 +0000
ROA not after:            Fri 20 Sep 2024 17:38:49 +0000
asID:                     265899
IP address blocks:        45.163.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:23:fc:8d:12:d7:c6:2f:27:d1:c7:13:fc:a9:42:c1:bf:36:4a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
        Validity
            Not Before: Sep 22 17:33:49 2023 GMT
            Not After : Sep 20 17:38:49 2024 GMT
        Subject: CN=A23EF83C11AE711F8A3ACE76C5C39674BFF9524C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:82:4e:57:e4:ef:61:98:f2:c7:8b:ab:c8:
                    e3:bd:87:04:14:34:14:72:59:fc:2b:7f:ce:bb:2b:
                    de:63:0b:81:9d:07:4e:1d:14:96:e6:c7:5d:cc:0c:
                    d1:e7:8d:1e:2f:18:74:34:48:a1:a4:38:e3:6b:43:
                    f2:f4:17:15:21:c7:a6:1d:22:ee:92:d9:4c:83:4b:
                    75:a3:7a:00:a4:d6:e6:f5:e5:cf:7f:98:4d:b1:6c:
                    54:eb:f5:ad:3c:1a:16:86:86:80:cd:22:ca:a9:1e:
                    61:42:87:c8:9c:fc:f0:45:f9:2a:af:00:0f:2c:96:
                    bb:7a:0a:9b:25:42:d2:e0:19:97:41:4f:d5:d1:18:
                    0b:20:47:58:1d:32:2e:cc:6d:37:70:ec:ca:26:2a:
                    f3:d7:80:fb:72:6c:5c:37:42:8b:3d:9c:9e:ca:71:
                    33:3d:3e:db:6c:0a:63:b1:bb:7f:51:46:14:95:a6:
                    b5:9f:a4:fd:5b:8a:b7:24:ca:d3:96:0d:c2:53:8c:
                    67:01:30:08:43:a8:3b:29:7a:29:2e:30:d2:26:ac:
                    c5:0b:c2:f3:cf:c6:83:25:ea:b2:52:43:d7:80:1d:
                    69:a7:de:ea:e8:18:68:20:2c:17:7d:ca:fe:cc:30:
                    42:76:6b:7e:ec:fd:09:b7:d6:75:e4:d3:ff:a3:b0:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3E:F8:3C:11:AE:71:1F:8A:3A:CE:76:C5:C3:96:74:BF:F9:52:4C
            X509v3 Authority Key Identifier:
                keyid:2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231322e302f32332d3233203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:70:c2:a9:e8:a8:83:98:1c:a9:e1:43:0d:bc:14:7d:40:62:
         cb:e7:3c:12:d1:20:eb:3f:25:3a:3c:13:9e:b8:56:7c:c5:d9:
         5d:47:5e:83:01:ff:34:84:53:5a:87:8d:79:32:8f:43:53:ff:
         3b:b7:a3:39:dc:91:dc:eb:2d:9e:08:70:2f:5e:df:7a:92:60:
         bf:01:4a:ef:3d:97:77:87:69:8f:16:30:a6:b9:29:54:3a:28:
         3a:0e:9e:f8:a5:94:4e:21:da:cb:93:7a:3e:ff:44:da:4a:9d:
         75:0a:fb:fb:4f:e8:43:de:b3:23:ce:0f:b2:52:80:51:ce:88:
         69:be:78:c9:68:6b:0e:d6:fa:f7:0a:fc:80:3f:3e:db:4c:d4:
         0f:d8:0e:63:51:70:b7:10:17:79:af:39:e6:57:93:aa:d5:aa:
         7a:88:e3:eb:3b:4d:94:1d:15:28:c6:8c:72:5e:8d:64:40:08:
         21:d4:3e:39:6a:e5:a6:05:cb:c4:40:31:96:40:52:a1:41:49:
         e6:70:d7:30:b9:b8:3b:93:a9:0a:93:a8:58:50:49:94:ab:68:
         d7:35:e6:10:2b:71:7a:cf:0d:5d:2e:77:83:b0:ae:8a:83:b6:
         83:e7:c2:7c:8d:40:be:19:9c:97:1f:db:a3:1f:a0:4e:83:39:
         5c:f4:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:58 2024 by rpki-client on console-ams.rpki-client.org