Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139322e302f32322d3232203d3e20323637323234.roa
File:                     34352e3233312e3139322e302f32322d3232203d3e20323637323234.roa (raw, json)
Hash identifier:          vkVDq50PdKlOp/zStSa0kAcny0hRxbWieFAoToPhJ7U=
Subject key identifier:   FB:FA:AD:3B:41:03:42:B1:4A:A0:D4:09:1A:8C:1E:41:25:EE:E3:7C
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       328DE3831037B1DD03793556F34EEB2AAC0D1DEE
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139322e302f32322d3232203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:20 +0000
ROA not before:           Tue 14 Nov 2023 19:29:20 +0000
ROA not after:            Tue 12 Nov 2024 19:34:20 +0000
asID:                     267224
IP address blocks:        45.231.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8d:e3:83:10:37:b1:dd:03:79:35:56:f3:4e:eb:2a:ac:0d:1d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:20 2023 GMT
            Not After : Nov 12 19:34:20 2024 GMT
        Subject: CN=FBFAAD3B410342B14AA0D4091A8C1E4125EEE37C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:41:f8:6a:fb:ce:b9:c6:4f:51:c6:f0:79:
                    a9:fb:de:9d:c2:91:a6:de:e9:a2:90:5e:de:2c:8d:
                    01:7d:47:41:d1:5c:e9:ed:bc:d3:d4:ba:aa:27:91:
                    56:e5:99:6b:98:6f:5e:2b:c8:c7:37:ea:83:f0:b2:
                    7c:47:6b:31:a7:ce:6a:f7:85:55:44:38:67:8b:7b:
                    0e:e4:50:55:1c:c9:c9:26:17:d4:45:d4:72:ea:54:
                    33:3f:56:2d:c0:5e:9f:88:ef:be:56:46:0e:d2:66:
                    cc:99:9c:0b:17:e4:37:a0:2e:ba:3e:60:b9:60:69:
                    61:aa:05:15:ec:22:fd:32:9e:8d:e4:b6:0f:6c:e4:
                    f4:95:83:b1:93:a5:66:16:79:92:dd:13:05:81:8e:
                    72:fb:b7:7d:1e:d7:41:69:93:ba:e0:53:cf:0e:fb:
                    2b:86:09:df:26:86:14:0e:1f:60:74:9f:ae:76:f8:
                    c8:d5:61:da:e9:05:34:09:42:55:00:93:19:72:4b:
                    b0:17:0d:bb:58:bf:62:f4:3e:3b:9f:ac:22:65:d1:
                    a6:6e:a7:9a:53:8b:6b:eb:2c:e6:66:32:b6:e8:b1:
                    7e:5d:aa:46:01:67:42:ed:c2:bf:dd:c3:6a:1c:f4:
                    92:a2:63:60:4f:6d:64:9b:3a:e7:8e:f9:e1:71:20:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FA:AD:3B:41:03:42:B1:4A:A0:D4:09:1A:8C:1E:41:25:EE:E3:7C
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139322e302f32322d3232203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:31:3c:b1:d4:05:f3:8b:72:39:8b:e2:c4:60:06:79:4c:9d:
         4c:71:c2:e4:a0:20:45:34:d8:82:fc:e4:fc:a2:0f:8a:7a:26:
         1d:00:99:f8:e1:72:c4:83:73:4d:19:e3:e6:49:f1:8d:ad:9a:
         31:09:0a:0b:32:04:cf:f2:0b:2c:d9:5f:24:d2:92:53:c2:69:
         78:35:7f:48:21:2b:54:95:2c:84:21:1f:d0:12:71:d6:9f:9f:
         2f:fd:2f:42:8f:7f:e5:32:43:db:22:72:a8:3a:cf:5b:56:78:
         aa:26:7f:5f:25:e4:19:8d:d7:e9:79:3b:23:05:26:92:af:82:
         32:2d:a7:a1:4d:30:58:36:bc:ef:e9:cb:69:2d:c0:8b:8b:6c:
         95:a6:96:2e:17:3b:f2:5f:7f:33:c9:ee:96:26:fc:a1:2f:8e:
         f4:31:24:8e:37:72:d5:2b:7a:24:86:56:b3:87:f5:ba:7d:fe:
         84:5d:39:a7:25:29:31:12:12:d6:a8:11:38:0c:6c:c9:dc:47:
         42:c5:ee:d1:54:8a:7c:fb:5b:35:d3:3d:66:31:33:91:72:7d:
         a5:6a:fa:e8:f2:a8:9e:80:34:75:f2:df:fa:8d:a6:ae:66:de:
         79:93:e2:6b:cf:e4:be:eb:81:3a:df:98:89:9b:fb:a3:ad:6c:
         4c:47:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org