Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32392f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e32392f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          6DuprexoOpA3yOjyN36YGQyEIvK9b+h88BPNAPlrFME=
Subject key identifier:   29:41:21:3B:9B:2F:E1:34:13:73:E1:00:05:18:FF:B0:01:1D:8F:AC
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       098C09DBD48BBCBD3A5C5409D010C3474E7B5C0E
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32392f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:11:35 +0000
ROA not before:           Sun 11 Sep 2022 23:06:35 +0000
ROA not after:            Sun 10 Sep 2023 23:11:35 +0000
asID:                     267256
IP address blocks:        45.232.50.29/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8c:09:db:d4:8b:bc:bd:3a:5c:54:09:d0:10:c3:47:4e:7b:5c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:06:35 2022 GMT
            Not After : Sep 10 23:11:35 2023 GMT
        Subject: CN=2941213B9B2FE1341373E1000518FFB0011D8FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:73:20:af:d3:00:ec:26:f0:1f:95:3b:36:84:
                    0d:85:cd:a3:21:98:2c:ec:b3:e2:e2:57:6d:80:e3:
                    46:0a:13:2f:2c:8a:11:c0:d2:33:c6:8e:f7:c2:dc:
                    40:51:b4:b6:b2:f4:79:40:69:76:80:57:cd:f9:4c:
                    da:6b:bc:24:4f:b4:a5:0e:4b:55:c4:a5:db:d3:52:
                    93:39:57:99:4a:b6:b0:59:86:a8:68:af:f6:6f:62:
                    44:99:f3:cb:65:c9:bc:39:62:99:29:67:a0:15:25:
                    e7:0b:c3:43:74:25:42:f7:58:64:c7:37:39:2f:2a:
                    ce:65:9c:c6:8a:85:6b:3e:b5:6d:6f:d1:10:66:bf:
                    67:25:67:d2:ba:07:c1:16:9d:09:93:e0:b7:1f:60:
                    ee:96:74:8c:bb:f1:bf:d3:ab:df:6d:89:26:c5:3d:
                    08:08:dd:b7:02:f4:ee:f4:48:5f:68:83:cd:65:1a:
                    21:a0:3d:ae:ac:6d:54:f3:72:3b:51:1f:a7:cd:43:
                    47:73:a7:74:5f:ee:d4:a6:b9:f7:21:d1:0f:6d:2d:
                    22:d7:73:22:86:70:ce:95:b9:f2:84:ad:12:d2:bc:
                    2b:8e:63:a2:73:86:3d:06:1e:61:6f:ca:ae:65:fd:
                    02:0c:4e:c5:96:71:eb:b2:1c:08:1b:b8:bf:eb:4d:
                    26:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:21:3B:9B:2F:E1:34:13:73:E1:00:05:18:FF:B0:01:1D:8F:AC
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32392f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.29/32

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:9f:35:00:59:c9:f3:49:0c:cb:97:47:88:9e:a4:76:ac:
         cd:62:20:bc:dc:98:4f:03:0e:bc:57:90:ca:1b:3a:79:03:e2:
         11:5d:5b:50:77:3c:54:ae:59:d7:1a:36:e6:1e:bb:c3:3a:06:
         8e:29:e5:d3:60:73:c5:8f:21:4d:b4:48:49:03:bc:84:56:5a:
         aa:0c:eb:44:e9:b2:2d:5b:fe:de:a6:dc:26:2f:e1:e5:5a:1e:
         fc:af:34:fd:fe:c4:0c:be:33:4c:bc:53:8b:2e:c8:99:55:71:
         96:ee:3c:eb:2b:45:2c:f0:40:9f:85:4b:10:30:a7:c2:7a:a3:
         01:0a:f5:8e:41:a2:cd:65:56:4a:f7:ef:af:2d:0f:5e:90:11:
         68:fb:76:37:9e:53:a7:56:54:94:b8:99:43:58:77:50:9b:0a:
         28:1b:78:16:96:11:4a:f4:9c:9b:9c:a0:bd:22:75:39:e1:bf:
         2a:43:f7:3b:e4:88:82:15:49:94:34:a2:87:bf:b3:b4:fc:e5:
         bd:e4:7e:e4:dd:f8:ce:ef:19:66:ce:30:af:03:69:0d:a4:11:
         ff:cf:f0:20:2b:ba:4c:09:ef:b8:23:a5:f5:9f:4a:30:66:b4:
         46:a0:48:fd:4a:29:16:58:3b:b3:1c:7f:55:56:13:1d:12:7f:
         e9:07:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org