Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e332f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e332f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          kft8V8ZQTDmmdqMx5dHiKer/jy6IUHPLK3h1i7LS+ik=
Subject key identifier:   BF:03:6C:CE:5D:74:5B:CA:EE:6D:F9:A7:6A:7F:5D:26:49:A6:5F:41
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       6AC0246032670946500804E5E59FC64A06B8B909
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e332f33322d3332203d3e20323637323536.roa
Signing time:             Fri 09 Sep 2022 01:33:20 +0000
ROA not before:           Fri 09 Sep 2022 01:28:20 +0000
ROA not after:            Fri 08 Sep 2023 01:33:20 +0000
asID:                     267256
IP address blocks:        45.232.50.3/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c0:24:60:32:67:09:46:50:08:04:e5:e5:9f:c6:4a:06:b8:b9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep  9 01:28:20 2022 GMT
            Not After : Sep  8 01:33:20 2023 GMT
        Subject: CN=BF036CCE5D745BCAEE6DF9A76A7F5D2649A65F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:8b:af:af:0b:9e:6b:c2:29:d8:df:28:09:
                    37:e2:a3:45:c2:2a:5d:38:0c:d5:35:21:da:df:93:
                    fb:9e:bf:d6:5b:17:2c:24:c8:2d:ad:78:bc:0c:8f:
                    0c:39:55:49:07:1f:c0:30:cd:40:aa:db:ca:25:07:
                    c5:df:d7:05:d1:0b:5d:77:b3:92:96:18:d3:7b:f7:
                    9d:5b:86:4d:e7:2e:f8:a5:3f:1c:c1:6a:f8:31:20:
                    bf:99:fc:c2:d5:4f:b3:17:58:1a:31:05:ac:f4:8b:
                    69:eb:d9:c5:60:4f:06:32:c8:fa:20:3c:67:5a:73:
                    3d:5a:ec:8a:dd:19:a0:a6:dc:da:ec:7d:3e:70:9a:
                    6d:f8:2a:33:47:5f:6b:59:db:83:25:a0:ce:ea:4e:
                    07:3f:74:e1:d8:51:64:96:40:b5:65:b8:c9:85:4b:
                    2d:ff:0e:5b:5a:47:76:f5:87:ab:97:e6:9c:57:89:
                    71:ba:48:4f:71:64:03:a9:32:1e:59:e8:5f:9a:f1:
                    8f:50:f6:32:3d:63:23:be:19:0f:23:d1:3d:8c:2a:
                    db:59:09:28:a3:cb:85:6d:4a:da:79:de:e4:cc:b9:
                    6f:29:5c:88:68:c6:42:2d:71:8b:79:c7:f2:88:95:
                    4b:3d:81:44:1f:a9:33:07:36:40:cb:e5:9d:70:ee:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:03:6C:CE:5D:74:5B:CA:EE:6D:F9:A7:6A:7F:5D:26:49:A6:5F:41
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e332f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.3/32

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:ce:20:6a:26:6d:42:f9:62:28:3b:ae:9d:85:6b:80:4e:
         33:6a:a2:f2:b3:16:57:24:0a:59:d8:e9:53:40:1d:7e:94:69:
         90:dc:44:47:ea:a3:65:fc:a2:1b:6f:8c:aa:5a:88:f5:1e:61:
         a8:3f:02:8a:68:89:5d:f2:7c:b2:fd:7b:67:38:f8:2a:db:93:
         9d:0c:01:9f:49:de:63:5e:e6:0c:56:42:32:66:c4:00:6f:c5:
         9f:09:b9:0d:81:af:16:ea:7b:55:3c:75:4a:5f:e9:91:cd:a5:
         bf:87:60:b9:de:ad:28:05:f0:c6:0f:8b:e9:7a:c4:3d:1c:f4:
         56:99:88:9f:58:8c:c7:6c:03:c4:0b:df:16:f0:ae:4a:45:61:
         b0:80:37:c3:64:6d:e7:aa:e4:18:a8:47:2e:c7:bf:cb:26:b3:
         ff:1f:18:80:aa:6b:09:d2:d7:f9:d0:dc:06:45:73:db:2b:e2:
         78:90:de:48:41:49:21:2c:43:ae:b7:40:ca:b7:da:61:09:51:
         ca:2c:9b:33:b0:3c:64:d6:16:90:43:c9:00:09:fe:d8:41:ae:
         06:7a:67:23:fe:45:43:11:3e:21:80:22:29:3d:f7:2e:b5:66:
         7d:29:b3:3b:1b:c4:91:a3:4b:f8:da:b8:cf:2f:e5:b5:7b:58:
         59:da:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org