Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32332d3233203d3e20323637323536.roa
File:                     34352e3233322e35302e302f32332d3233203d3e20323637323536.roa (raw, json)
Hash identifier:          ZB5nzzAVc47PJqDssDu25y5Jicf38InyyZ0/4pJWJ10=
Subject key identifier:   DA:4D:BB:08:4C:8A:91:50:AC:77:41:9A:E9:E1:CC:FB:03:8B:55:83
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       32367F071DE3710C3A5F1A6518E0762F341D4E11
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32332d3233203d3e20323637323536.roa
Signing time:             Fri 08 Mar 2024 20:03:21 +0000
ROA not before:           Fri 08 Mar 2024 19:58:21 +0000
ROA not after:            Fri 07 Mar 2025 20:03:21 +0000
asID:                     267256
IP address blocks:        45.232.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:36:7f:07:1d:e3:71:0c:3a:5f:1a:65:18:e0:76:2f:34:1d:4e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Mar  8 19:58:21 2024 GMT
            Not After : Mar  7 20:03:21 2025 GMT
        Subject: CN=DA4DBB084C8A9150AC77419AE9E1CCFB038B5583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:87:9a:df:01:76:23:bd:05:9f:e7:08:61:
                    0a:76:24:82:87:eb:2a:f4:ca:11:b9:32:95:ec:42:
                    4f:94:1c:e8:1c:fc:8b:64:cb:4d:3f:cb:07:9a:a2:
                    cc:a6:61:cc:7a:af:66:d3:a1:37:b6:93:cc:11:76:
                    70:83:ea:50:2c:a4:cf:5d:c2:49:28:ca:b8:0e:47:
                    e6:b9:fc:70:d8:8f:82:3f:0b:35:35:88:10:df:b6:
                    f3:9e:f5:c6:3d:3c:65:97:31:2d:1c:86:a9:ce:ef:
                    ef:ad:75:66:10:11:ee:ba:af:4a:bf:e3:4e:1d:67:
                    cf:01:9d:5b:51:49:34:d1:b3:49:44:6f:ee:c5:48:
                    fa:cf:18:4e:fc:16:8f:38:f1:02:cd:88:92:ba:b8:
                    aa:96:d5:ff:6a:23:d1:34:16:c1:57:42:c9:7a:5a:
                    5b:b9:9c:49:d5:f7:1c:be:de:8a:82:9c:05:5c:ba:
                    e7:57:fd:de:86:bf:43:73:8f:81:e8:24:76:58:da:
                    ce:a8:9f:8c:09:db:db:f5:e1:7d:9c:f0:73:69:2c:
                    d2:ae:69:03:a5:7d:a2:75:40:94:fe:59:bb:cf:76:
                    f7:83:09:fd:8e:e5:5c:5c:dd:4e:cc:d8:ef:0d:0b:
                    62:e3:0b:97:fe:09:cd:bb:f3:83:c6:f4:46:9b:26:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4D:BB:08:4C:8A:91:50:AC:77:41:9A:E9:E1:CC:FB:03:8B:55:83
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32332d3233203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:58:68:95:f3:c9:d6:31:e9:9e:64:30:e2:00:14:d7:4c:
         d0:d2:96:71:6f:db:77:76:3f:71:93:ec:30:8e:35:55:7b:b8:
         71:29:f2:a2:2f:09:0b:a1:02:58:a4:32:fc:cf:c6:12:f8:8c:
         26:72:d7:0d:f4:3c:0d:f1:14:f5:3f:05:6f:b2:de:ff:12:74:
         76:68:6f:dc:cf:6d:e4:84:94:a9:75:ae:92:25:8f:4f:b0:d1:
         bd:15:53:57:1d:ae:b4:03:c6:32:9a:0c:88:15:e5:75:56:d4:
         eb:73:45:53:68:24:37:b3:4d:e9:ac:d6:80:2f:17:b2:b7:d0:
         ba:4e:9d:da:d4:08:d0:51:03:f6:30:46:d4:5f:62:8a:af:e7:
         dd:02:a5:d1:66:40:59:c2:8f:b1:e2:34:27:b6:89:5b:0b:6c:
         91:9f:aa:8e:b0:bb:00:fb:f7:16:a7:e3:00:d5:6a:30:7c:c5:
         42:ab:09:4f:35:55:27:e7:c5:f4:39:30:49:84:42:0b:14:76:
         5d:7a:3f:d8:01:e7:b7:87:f2:e6:ca:07:a4:4e:e1:1a:c3:ec:
         fd:0a:03:94:39:6b:a4:2a:0a:78:de:f0:5e:2f:0e:d2:6c:8b:
         77:20:8b:f6:27:e2:1d:04:d5:0c:ce:b2:df:90:51:56:ec:94:
         40:6f:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org