Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231342e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231342e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          6kaZ2usvniJ6m6FFRJdWCvZA+meZfJjVWiaGBoKarCQ=
Subject key identifier:   13:25:68:47:4B:2C:62:82:79:84:33:23:4F:B9:1E:EF:82:35:BE:E3
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       46B523E45CFE356BAA4326D52B891BB93884BAF1
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231342e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 21 Jun 2023 12:43:20 +0000
ROA not before:           Wed 21 Jun 2023 12:38:20 +0000
ROA not after:            Wed 19 Jun 2024 12:43:20 +0000
asID:                     61614
IP address blocks:        45.232.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b5:23:e4:5c:fe:35:6b:aa:43:26:d5:2b:89:1b:b9:38:84:ba:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun 21 12:38:20 2023 GMT
            Not After : Jun 19 12:43:20 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:d1:ba:b1:7d:c2:55:10:51:78:54:4e:2d:
                    20:a3:78:b3:0c:ec:8f:ff:db:a4:08:24:44:b3:7c:
                    4d:a0:0d:03:9d:eb:2a:d4:a2:35:b9:13:4b:66:4f:
                    72:0f:9a:8a:0f:1d:6e:ce:3c:fd:61:29:d8:90:c3:
                    84:4f:ed:77:89:36:9c:e2:10:df:d5:e8:38:fc:56:
                    f4:05:3d:be:ac:47:5d:14:1f:c0:15:7f:80:d9:a1:
                    fe:83:f3:11:14:19:03:ab:a8:ed:0f:9c:0e:91:ae:
                    a3:30:76:91:83:cf:c4:70:6d:8f:33:e6:bb:eb:52:
                    e1:96:98:b8:81:27:23:f1:7a:4b:34:cf:44:a1:b5:
                    b1:fe:e8:0d:9f:36:b1:52:42:a8:ad:80:47:79:be:
                    2d:03:89:36:eb:4a:c2:24:4a:7b:07:f0:a5:bc:fe:
                    6f:07:ad:33:f6:3e:9a:00:81:d0:f2:10:7d:66:d7:
                    22:66:02:5a:e3:95:2d:98:72:79:5f:f0:ca:96:06:
                    22:25:79:bc:d0:98:07:77:e9:52:af:9a:7e:27:08:
                    aa:a0:78:75:e4:41:df:bf:31:a9:cb:78:d5:22:04:
                    15:6f:31:29:c8:b7:97:75:14:86:f8:19:c2:68:09:
                    88:b9:84:b4:15:4e:ed:b0:98:c8:07:7a:ae:57:ed:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:25:68:47:4B:2C:62:82:79:84:33:23:4F:B9:1E:EF:82:35:BE:E3
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231342e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:1d:9a:fc:83:50:94:aa:2c:c2:24:88:cc:93:3f:ff:54:
         d2:e4:aa:dd:02:9c:4b:d9:c0:bc:f2:01:7b:92:4e:ea:1e:33:
         a8:3c:3e:6e:39:e3:71:b7:81:66:99:37:f7:3d:ad:20:10:1c:
         33:3d:9d:c5:c5:e2:7d:c6:27:aa:2c:dc:6d:c9:b9:15:5d:1c:
         60:f3:bf:1b:d0:1a:e0:85:7a:cd:a2:cc:bd:61:d3:e8:e0:10:
         82:40:e3:55:46:48:68:48:8c:9a:f4:82:4e:8a:55:50:00:be:
         cb:25:ac:2a:9c:92:37:ca:3a:fb:f2:d3:55:d4:5b:0e:27:87:
         b6:86:32:79:aa:de:42:cf:8d:c0:bb:6d:dc:63:63:57:ed:ec:
         4f:b6:8e:57:22:40:6c:c6:24:68:c1:32:ba:ad:1f:04:de:82:
         18:1e:86:97:aa:fc:82:99:ea:f5:ad:76:eb:fa:93:3a:20:f6:
         21:58:f4:64:8b:98:5c:91:3c:60:60:8d:db:3e:48:fc:88:1e:
         3b:2b:08:3e:3e:54:32:eb:0b:9a:58:33:45:ca:dc:30:45:a8:
         b5:11:73:2d:d1:73:64:df:df:3e:3b:7a:83:0f:6c:ed:f4:27:
         d2:62:a8:42:ab:ce:2e:eb:bb:5a:0a:a9:fb:94:bb:93:5b:97:
         97:70:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org