Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32332d3233203d3e203631363134.roa
File:                     34352e3233322e3231322e302f32332d3233203d3e203631363134.roa (raw, json)
Hash identifier:          h8gkyVpd669jzKTNYcqBbCnqFk7JY84IDQW4mWuhJb0=
Subject key identifier:   FF:A9:E8:47:BA:67:74:0D:32:E0:CF:B6:A9:E1:FD:DA:7B:E2:4B:54
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       0400C44DA707F6DE8C4E0EFD785D1605D8BBC2B6
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32332d3233203d3e203631363134.roa
Signing time:             Fri 16 Jun 2023 14:33:10 +0000
ROA not before:           Fri 16 Jun 2023 14:28:10 +0000
ROA not after:            Fri 14 Jun 2024 14:33:10 +0000
asID:                     61614
IP address blocks:        45.232.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:c4:4d:a7:07:f6:de:8c:4e:0e:fd:78:5d:16:05:d8:bb:c2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun 16 14:28:10 2023 GMT
            Not After : Jun 14 14:33:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:01:2f:ad:bb:ac:4a:03:51:80:60:95:dd:
                    96:14:a2:09:25:34:e0:99:92:95:3f:68:ce:f9:49:
                    26:ca:c9:bc:28:e0:19:dd:be:d0:c5:9e:0f:e4:ed:
                    fd:88:87:c1:ad:ee:3a:77:6f:3b:2f:85:d2:8f:64:
                    82:e8:a0:de:dd:13:a8:42:54:1e:08:4b:bc:23:c0:
                    4b:0d:d7:fb:ab:ea:30:4f:5f:63:1c:0f:23:f9:fe:
                    cc:92:cf:76:89:07:9b:53:f6:6e:3e:0f:83:06:1b:
                    4f:ef:4e:7a:97:94:a8:70:13:3b:72:29:f7:f0:ec:
                    62:b7:8d:ad:00:cf:80:f4:05:4d:cd:37:40:07:c3:
                    d2:79:50:c7:93:f7:d6:24:3e:56:1b:47:57:f9:1d:
                    10:9f:a0:72:8c:7d:03:a8:cf:14:e4:63:89:b9:dc:
                    36:9f:b8:21:df:f8:45:56:97:02:dd:7f:f9:df:93:
                    5a:69:75:9f:fb:3f:71:c9:1d:bd:d3:ef:e4:8c:f0:
                    c7:0a:48:36:1d:5b:3c:b5:27:c5:cf:7e:84:25:86:
                    88:c8:4b:59:89:03:01:3a:50:58:53:05:e5:17:cf:
                    4e:76:76:97:85:df:51:6e:80:4c:3b:0b:6f:6c:f6:
                    1e:fb:cf:b8:6f:90:91:ea:82:3c:9a:36:af:5f:54:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A9:E8:47:BA:67:74:0D:32:E0:CF:B6:A9:E1:FD:DA:7B:E2:4B:54
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32332d3233203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:17:f6:fe:af:a5:90:71:d5:c1:1d:7d:22:90:40:f7:5d:d2:
         48:68:bb:1b:40:50:5c:03:76:a0:3f:2a:9d:fe:8f:d1:f1:19:
         d8:bb:bf:41:ca:80:8c:21:12:a0:d5:e6:d1:8d:11:2b:b7:b8:
         c6:10:32:bd:e4:70:d7:7c:17:45:b8:ac:57:51:9a:53:9f:b0:
         41:c8:71:83:41:51:13:ff:89:85:9f:84:72:b8:ad:6d:f5:a0:
         f2:ae:df:94:40:e0:82:ce:aa:c5:e7:8f:c9:43:af:92:ca:78:
         a2:c6:4c:11:94:ac:73:6d:33:f3:45:cd:b3:e9:4b:1f:49:62:
         2d:84:ec:3c:e2:be:7e:3e:31:2b:39:dd:4e:95:1d:de:54:78:
         e7:2a:50:ba:f0:41:b5:68:84:d6:d7:a6:3f:83:81:eb:b2:85:
         ba:31:9f:97:1e:b4:de:b1:31:ce:a7:82:0c:95:ec:27:4d:62:
         80:52:7b:0d:a8:82:44:fa:8e:ae:22:c3:3d:ab:11:c1:c5:88:
         fe:de:71:ea:5b:bf:4f:76:cd:ac:a0:de:68:bb:ba:6a:47:2c:
         d3:57:1b:ed:ac:41:9b:93:0c:91:6f:6a:a4:eb:a3:6f:c9:33:
         cf:57:89:a3:08:06:3e:3a:5a:84:f3:f4:af:b5:dd:93:c9:45:
         c9:82:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org