Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/34352e342e36342e302f32322d3232203d3e203533303539.roa
File:                     34352e342e36342e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier:          o6svEkq7OaiC8R0ZwbdkIYxa2QX9ZnGkyBe3JmH8Cbs=
Subject key identifier:   B4:D5:9B:AB:FF:D7:0C:9C:3E:78:99:64:35:F4:5C:0D:33:7C:F5:C8
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       34F0D9FD6A76A6C1BF8F00D0EADDAC5C09EDAB95
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/34352e342e36342e302f32322d3232203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:01 +0000
ROA not before:           Fri 03 Mar 2023 12:13:01 +0000
ROA not after:            Fri 01 Mar 2024 12:18:01 +0000
asID:                     53059
IP address blocks:        45.4.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f0:d9:fd:6a:76:a6:c1:bf:8f:00:d0:ea:dd:ac:5c:09:ed:ab:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:01 2023 GMT
            Not After : Mar  1 12:18:01 2024 GMT
        Subject: CN=B4D59BABFFD70C9C3E78996435F45C0D337CF5C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:46:4d:26:4d:08:36:76:86:de:4e:5a:fd:
                    d7:95:7e:30:cf:f1:2a:6a:a2:91:db:b4:c9:e7:d6:
                    15:09:db:a9:5e:33:b0:db:f6:87:85:fd:8b:b9:4b:
                    db:4e:24:25:4c:07:3a:f5:7d:f9:9d:42:4f:d7:69:
                    e2:9c:58:77:93:da:76:3c:ba:33:ce:07:8f:a4:d2:
                    ef:62:00:43:db:26:f1:c8:be:ed:83:63:47:94:6c:
                    66:0e:a4:d0:93:80:4f:e3:10:00:c0:5e:aa:c9:9f:
                    ce:4f:23:95:3b:1a:b5:4a:d4:3d:94:4a:b8:34:58:
                    19:a9:1f:68:a8:3f:4d:0c:03:08:a5:ef:6b:20:13:
                    e4:fb:09:9f:bf:66:36:e5:09:fa:73:eb:1d:e9:34:
                    a9:9f:16:a7:7f:80:03:63:c6:be:c6:37:21:43:78:
                    fb:f3:7b:51:96:01:03:90:e6:5e:b3:03:1c:f1:0f:
                    cd:bf:f2:86:9e:31:43:9e:fc:7c:ed:4e:8b:4e:17:
                    74:b7:1c:ce:eb:18:c3:10:62:71:91:9d:c2:8f:d0:
                    86:bc:a3:08:0f:23:b2:23:30:bc:5c:89:6f:53:ca:
                    e2:e8:db:32:e7:a7:f4:e5:df:63:8a:a9:74:bd:4b:
                    f7:20:d0:4d:1f:8b:03:40:12:49:02:22:47:68:0b:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:9B:AB:FF:D7:0C:9C:3E:78:99:64:35:F4:5C:0D:33:7C:F5:C8
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/34352e342e36342e302f32322d3232203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:11:38:fb:e1:fd:eb:f0:78:3a:bb:ef:33:76:d8:7c:2d:32:
         5f:97:36:77:70:51:c2:2c:ae:b9:a5:15:ba:be:0e:df:e1:08:
         e2:f7:62:22:59:83:0b:76:f7:1d:f9:58:fd:8a:5f:7e:e8:49:
         e4:ff:64:f8:93:2d:d0:4e:73:f3:20:68:d1:4e:ae:1c:1f:dc:
         03:07:37:83:65:9a:a1:2d:c2:4f:47:8e:58:c0:73:5e:3b:51:
         79:af:93:c4:17:9e:89:d4:86:ef:fb:fe:30:a8:36:04:2d:aa:
         75:73:b1:aa:64:f2:f1:9d:5b:cd:4d:c4:e7:c4:7c:3a:b1:e8:
         f7:93:99:f6:36:b4:91:8a:ab:4c:0b:c7:f6:ca:2c:53:5e:25:
         d3:ab:e0:25:39:dc:d5:8c:f2:47:b6:16:1f:ec:2b:20:cc:36:
         53:40:fb:33:5f:60:65:4e:02:c7:89:5d:a7:37:03:7b:cf:8c:
         3e:69:61:01:64:69:67:08:44:6f:92:72:48:50:9d:67:b8:d3:
         7b:ee:4a:00:15:82:44:60:8c:43:74:82:0b:fe:b0:64:5a:9f:
         bd:3d:e1:bd:40:b7:93:1c:3d:10:15:35:8c:9e:ea:44:56:c9:
         29:1f:a6:d9:08:58:9b:af:a8:bb:9a:9f:24:cb:03:ba:31:a7:
         7c:97:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org