Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32312f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e32312f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          1NT9SyPdLL037liB+lysEat6jMuZASGE9CIEFBk/Mts=
Subject key identifier:   98:CC:42:16:1E:62:36:6F:BA:F9:1C:B2:BD:EA:DE:CF:E8:D6:FE:4B
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       1F92BDF5F2AE0BD9CBB5FD0270166D01149BF24A
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32312f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:27:23 +0000
ROA not before:           Sun 11 Sep 2022 23:22:23 +0000
ROA not after:            Sun 10 Sep 2023 23:27:23 +0000
asID:                     267256
IP address blocks:        45.232.50.21/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:92:bd:f5:f2:ae:0b:d9:cb:b5:fd:02:70:16:6d:01:14:9b:f2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:22:23 2022 GMT
            Not After : Sep 10 23:27:23 2023 GMT
        Subject: CN=98CC42161E62366FBAF91CB2BDEADECFE8D6FE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:45:2a:e7:ec:8e:66:39:21:bf:10:3c:fd:2b:
                    a3:d9:93:59:cc:24:7c:45:f4:fe:2d:59:77:dd:87:
                    02:d7:a6:ca:a7:c1:91:de:f0:a2:2d:b2:9a:23:47:
                    2d:5c:10:e5:9c:2b:93:e6:39:57:2b:be:47:c3:6b:
                    e6:bc:05:1e:eb:21:1f:56:ff:19:83:e4:df:3e:e6:
                    93:98:a8:f6:46:38:89:3f:68:1c:01:ae:9e:95:58:
                    fc:c9:cd:7f:50:7d:47:6f:7e:e5:c8:18:fb:5a:d2:
                    49:87:14:0b:95:63:8b:a4:3e:09:61:47:58:98:66:
                    54:21:35:54:ce:d1:57:6b:68:3f:37:51:1e:9c:bc:
                    48:ac:09:fe:9a:a3:ca:41:97:42:a3:4f:19:c7:e9:
                    b8:09:c1:12:94:05:88:6a:5d:af:31:a0:29:cb:ef:
                    55:3d:96:53:29:79:d9:ac:a9:5b:77:4c:54:9a:d3:
                    55:cc:eb:de:35:4a:07:d5:17:ac:6a:4e:2f:94:2f:
                    b0:86:90:b1:9e:b6:d9:ac:c9:ca:e9:e2:38:d1:ed:
                    3f:8d:14:da:88:10:47:fd:34:1f:14:8f:2c:36:b0:
                    3f:45:4c:89:ca:4e:bb:3b:46:39:73:db:73:17:6a:
                    1c:d9:6e:6f:48:e8:37:a6:57:60:c7:3e:12:c8:84:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CC:42:16:1E:62:36:6F:BA:F9:1C:B2:BD:EA:DE:CF:E8:D6:FE:4B
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32312f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.21/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:dc:6b:d3:8c:fe:16:ae:d8:b3:f2:52:32:23:0f:4f:3c:
         80:b8:f1:42:4b:59:d5:ce:4b:25:73:34:d5:95:4d:83:67:0d:
         09:e3:15:48:a9:df:c7:89:f0:1b:9a:d7:c5:7a:8e:8b:1f:ff:
         0e:87:5a:42:f8:17:cc:33:8a:b0:d5:42:35:2e:62:d1:dc:cf:
         33:f0:19:7f:20:9f:ce:3e:a2:70:0b:cb:83:7a:53:fd:f7:1e:
         90:2d:a9:57:be:4f:4b:6c:c7:04:4f:be:22:41:23:bc:fc:8e:
         77:fc:22:c3:76:64:9f:77:14:3a:98:e3:cf:ae:fc:c2:77:d9:
         2f:ba:f9:38:12:17:6d:aa:a1:7c:a1:2a:7b:36:4d:cf:23:69:
         96:1b:25:56:7b:39:84:79:97:b4:73:cc:9b:e9:9d:6a:b1:e8:
         01:b9:bf:dd:25:62:40:05:96:56:7d:7a:1e:0e:3e:e4:69:13:
         4d:e9:06:b8:7b:64:81:25:f9:04:93:a2:a9:29:c6:1e:79:52:
         74:99:b3:a0:59:05:96:30:71:e3:3b:13:bb:cc:1d:54:c8:d2:
         78:72:50:7f:ff:04:b9:2a:5e:f5:81:15:91:70:c4:67:8e:d3:
         8c:e2:6d:77:c0:57:e7:00:31:8c:74:50:bd:60:19:48:2e:02:
         09:1e:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org