Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/34352e3136342e382e302f32332d3233203d3e20323638353835.roa
File:                     34352e3136342e382e302f32332d3233203d3e20323638353835.roa (raw, json)
Hash identifier:          jhHz0agherj5HWFPnNQSLWs5qbyzth2waSy61udRQ/Y=
Subject key identifier:   7E:68:D2:9E:EE:04:B0:2C:11:82:16:76:69:1F:A3:C6:67:93:2B:17
Certificate issuer:       /CN=56E56C0A6BB9145C47505907F91F128D80240CA8
Certificate serial:       58B57576997E644E0EC0E289E47DC7E00173651A
Authority key identifier: 56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56E56C0A6BB9145C47505907F91F128D80240CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/34352e3136342e382e302f32332d3233203d3e20323638353835.roa
Signing time:             Sun 10 Mar 2024 19:44:44 +0000
ROA not before:           Sun 10 Mar 2024 19:39:44 +0000
ROA not after:            Sun 09 Mar 2025 19:44:44 +0000
asID:                     268585
IP address blocks:        45.164.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b5:75:76:99:7e:64:4e:0e:c0:e2:89:e4:7d:c7:e0:01:73:65:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56E56C0A6BB9145C47505907F91F128D80240CA8
        Validity
            Not Before: Mar 10 19:39:44 2024 GMT
            Not After : Mar  9 19:44:44 2025 GMT
        Subject: CN=7E68D29EEE04B02C11821676691FA3C667932B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:24:0c:9c:d6:fd:9a:57:7a:e5:53:df:5c:
                    05:eb:25:64:34:6d:64:b3:15:9d:36:99:30:5f:3f:
                    df:d0:6d:af:f3:c5:f3:5e:1c:76:e6:8f:e1:a9:f6:
                    52:e9:ef:13:f8:29:d5:9c:51:2e:07:aa:cf:5f:35:
                    a4:7d:e6:b3:37:a2:2b:77:49:86:c0:6a:48:ac:17:
                    ac:c7:de:09:69:54:18:9a:77:38:0b:4a:20:24:64:
                    4f:86:93:f5:bf:ea:b7:94:65:e1:bd:01:28:75:d5:
                    13:7f:79:a3:67:14:f3:30:70:df:9f:d8:dd:48:38:
                    d4:52:18:11:23:3e:7f:14:b6:0c:71:8a:3e:82:4a:
                    a1:0d:cb:c2:d6:8f:5c:84:b9:76:68:84:75:1a:bd:
                    f4:2a:56:9b:3d:5c:74:a7:43:c7:ac:a8:e7:70:30:
                    3d:22:48:9d:6f:29:3a:3a:61:12:42:97:9f:a1:95:
                    60:20:0d:d1:58:c4:aa:29:b9:38:05:4a:b5:e5:73:
                    ee:ad:46:9b:94:0b:69:d3:8c:47:5b:d5:b9:6d:b9:
                    5e:af:7c:e1:65:a6:65:02:36:1c:2b:84:be:9d:df:
                    75:42:28:45:98:98:62:6b:49:01:e6:3a:4c:40:00:
                    ee:41:4a:bb:f4:61:db:3c:5e:17:36:e6:23:a1:cc:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:68:D2:9E:EE:04:B0:2C:11:82:16:76:69:1F:A3:C6:67:93:2B:17
            X509v3 Authority Key Identifier:
                keyid:56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/56E56C0A6BB9145C47505907F91F128D80240CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56E56C0A6BB9145C47505907F91F128D80240CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/34352e3136342e382e302f32332d3233203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:bb:88:e4:4c:1e:06:8c:78:a1:12:75:65:0f:a3:f0:83:20:
         cd:f8:d6:b5:41:8f:81:3e:71:3d:7a:22:b9:9e:07:22:85:02:
         59:e2:e6:ad:1a:8a:97:4b:8b:c7:9f:26:83:be:8b:89:97:1a:
         35:f4:3f:99:cd:98:db:1d:85:56:b2:17:b9:f8:b1:d5:c8:e4:
         8d:90:8c:a3:b0:ea:37:3b:5d:e2:da:4e:59:2e:34:01:90:36:
         d6:e2:b5:fb:5b:3e:00:52:34:6d:99:39:01:d8:b1:68:9d:09:
         4c:cd:f1:84:0f:e6:e8:45:d4:63:8d:73:50:c4:9c:42:f5:39:
         b7:20:5b:b1:d7:75:73:fb:da:b3:95:e8:c6:cb:70:25:d2:06:
         15:e5:dd:37:66:f5:29:3f:17:ea:54:65:13:3b:01:9e:00:d1:
         d6:39:56:29:17:dc:d7:c3:78:99:4d:da:45:a3:c3:02:b3:2d:
         50:74:f3:4e:13:ec:6f:7b:0b:96:27:e7:2a:ba:0d:0a:35:ab:
         e1:21:60:35:b0:72:aa:62:a5:2b:7e:08:1a:d8:9e:d6:3c:9d:
         05:63:ff:d5:1f:40:68:ae:ee:55:92:31:01:50:b3:fa:28:30:
         ee:ce:9e:17:f8:0d:46:2c:2b:4b:80:5e:3c:7b:97:60:ad:00:
         4f:3d:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org