Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa
File:                     34352e3136312e36342e302f32332d3233203d3e20323638343434.roa (raw, json)
Hash identifier:          zWrMsyaqUMqPdSMnQGhYjyjaqituaByLdmAaie0y9oY=
Subject key identifier:   81:C7:2A:88:57:F7:01:49:4E:94:55:6C:A3:F2:0F:0B:AB:A0:4A:70
Certificate issuer:       /CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Certificate serial:       63247591D42C983DBBDB4DA076C6A03D3E56982A
Authority key identifier: AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa
Signing time:             Mon 08 Jan 2024 16:45:42 +0000
ROA not before:           Mon 08 Jan 2024 16:40:42 +0000
ROA not after:            Mon 06 Jan 2025 16:45:42 +0000
asID:                     268444
IP address blocks:        45.161.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:24:75:91:d4:2c:98:3d:bb:db:4d:a0:76:c6:a0:3d:3e:56:98:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
        Validity
            Not Before: Jan  8 16:40:42 2024 GMT
            Not After : Jan  6 16:45:42 2025 GMT
        Subject: CN=81C72A8857F701494E94556CA3F20F0BABA04A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:a4:f1:3d:1f:3a:5c:ba:7e:a1:be:79:93:
                    36:4b:e4:6a:16:b3:01:f5:af:93:4c:4c:f3:73:e1:
                    5a:39:36:3d:7f:78:f7:ea:54:5f:f1:d6:48:8b:85:
                    ed:3b:11:11:ff:6d:45:8a:c0:d0:42:6e:89:7a:38:
                    f1:f9:7a:49:b2:c8:0b:84:f0:43:b2:f6:d1:4a:5f:
                    c4:75:36:55:88:08:59:8e:72:15:05:bb:f6:de:fe:
                    ff:5d:de:5b:59:14:f8:19:30:77:85:f4:f5:37:a3:
                    5a:5f:02:f9:3c:6b:23:ae:32:31:07:c9:f1:15:76:
                    0f:17:93:73:87:7b:2c:5c:c4:9e:2e:31:f1:33:e9:
                    9c:ab:d1:b9:0f:5c:54:00:e8:54:63:25:c8:9d:ac:
                    1e:86:79:74:33:0a:1a:05:c4:98:33:00:fa:6c:55:
                    13:37:40:c6:06:73:00:2a:cf:c3:0d:bc:fd:a4:25:
                    b3:59:5f:f1:bc:35:26:b5:0b:46:ac:ec:d7:04:f9:
                    3e:10:b2:f6:cb:f2:9b:6a:d0:6c:03:74:32:69:6f:
                    84:7b:d4:6e:b4:f5:df:7b:5e:32:8a:2b:04:4c:f0:
                    8d:11:2f:46:f0:a8:74:64:c2:95:71:c9:53:70:53:
                    9c:cd:48:10:98:2d:1a:47:7b:5d:3d:fc:83:7f:8a:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C7:2A:88:57:F7:01:49:4E:94:55:6C:A3:F2:0F:0B:AB:A0:4A:70
            X509v3 Authority Key Identifier:
                keyid:AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:49:82:ba:8f:a4:ee:8b:99:64:08:a4:71:8f:32:38:42:
         4c:07:43:02:7d:24:95:39:f2:72:69:53:12:ae:38:7e:70:6a:
         b2:b7:c1:1d:be:3f:2b:04:b2:98:cd:29:1a:01:23:01:1b:0c:
         0b:be:7d:9c:01:24:90:1c:c7:0f:b9:97:77:0f:ad:a6:c5:62:
         68:c8:53:95:34:d0:f0:c3:af:c7:a7:3c:b6:d5:e1:52:62:ed:
         ff:d2:cf:5b:c3:c0:23:66:4b:4f:55:d9:ee:7c:09:1c:f2:5b:
         7a:b7:22:55:7b:28:9d:a1:a5:59:fb:de:90:f8:f9:0e:3f:c9:
         0e:90:11:1e:97:4c:06:c5:93:3c:de:6f:c0:48:d8:b1:4c:ff:
         1c:7f:4c:d8:e8:3e:29:dc:5a:81:7e:c3:26:8f:27:b4:9c:6c:
         0a:1d:18:e5:36:84:47:92:db:c1:f8:76:3c:8e:2e:a2:a6:38:
         d4:93:73:5d:8a:95:81:01:28:2d:2e:36:12:84:d5:fe:2f:4e:
         8b:73:15:29:a9:e4:13:b0:8d:ba:55:bd:b6:50:cf:6b:49:64:
         46:48:d9:95:b5:c9:12:ef:31:97:92:c9:15:be:5c:58:e8:39:
         b5:cc:4b:7a:1e:1b:9f:58:ff:4a:9a:e0:b9:3b:27:e4:a2:49:
         2c:ea:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org