Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/34352e3136392e36382e302f32322d3234203d3e20323638313239.roa
File:                     34352e3136392e36382e302f32322d3234203d3e20323638313239.roa (raw, json)
Hash identifier:          pMVp3PpYd93LuS7oKBta7pyne+84/PAX49a0GaATcJw=
Subject key identifier:   6E:37:EE:01:4C:26:3E:43:39:E5:28:92:08:B4:30:A6:8F:6E:46:95
Certificate issuer:       /CN=D345EB7198D1D6F10204B388FAC99014B8298C08
Certificate serial:       643E256275222339E80D628F8E0E173346EE3502
Authority key identifier: D3:45:EB:71:98:D1:D6:F1:02:04:B3:88:FA:C9:90:14:B8:29:8C:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345EB7198D1D6F10204B388FAC99014B8298C08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/34352e3136392e36382e302f32322d3234203d3e20323638313239.roa
Signing time:             Wed 24 Jan 2024 19:30:01 +0000
ROA not before:           Wed 24 Jan 2024 19:25:01 +0000
ROA not after:            Wed 22 Jan 2025 19:30:01 +0000
asID:                     268129
IP address blocks:        45.169.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3e:25:62:75:22:23:39:e8:0d:62:8f:8e:0e:17:33:46:ee:35:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345EB7198D1D6F10204B388FAC99014B8298C08
        Validity
            Not Before: Jan 24 19:25:01 2024 GMT
            Not After : Jan 22 19:30:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:0b:03:0d:08:0b:26:ec:ff:03:6c:f4:de:
                    6f:27:d8:39:d6:d6:d5:df:41:88:91:e1:cb:54:9d:
                    77:82:f9:57:d5:f5:67:2c:2f:58:5e:88:05:d0:d0:
                    8f:bf:39:b4:aa:7b:d9:d1:48:3c:ad:27:30:af:4b:
                    ff:e3:c0:99:84:8e:a8:02:de:05:a6:7b:ef:c8:04:
                    e6:5f:d1:2b:f2:3d:9c:79:45:ed:ce:59:c1:f2:14:
                    fd:86:2f:6a:94:ca:a3:fd:c9:47:83:80:09:46:63:
                    9b:a5:4f:0c:87:1f:77:7e:fe:ce:52:32:d1:25:e3:
                    68:1a:93:d3:02:24:30:00:a0:84:6c:d2:ec:59:c4:
                    b1:19:3f:9c:dd:8f:67:32:61:79:db:c9:40:87:ed:
                    b8:0b:b5:09:01:0e:18:d1:11:6b:3e:5e:57:37:d1:
                    90:9d:dc:2f:40:06:64:67:4d:32:e9:db:de:be:78:
                    a2:8b:bc:ec:3b:14:74:f8:b4:c6:20:41:42:04:0b:
                    fd:6b:18:1e:f0:13:55:85:e5:73:51:af:55:7c:46:
                    3d:fb:48:ad:9c:28:97:40:79:70:e6:06:34:a8:8e:
                    71:c7:c5:d1:93:54:4b:ce:0e:0f:bc:6e:4e:fe:35:
                    64:e3:cf:c9:ec:18:78:40:81:5e:a3:0a:bb:1a:b6:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:37:EE:01:4C:26:3E:43:39:E5:28:92:08:B4:30:A6:8F:6E:46:95
            X509v3 Authority Key Identifier:
                keyid:D3:45:EB:71:98:D1:D6:F1:02:04:B3:88:FA:C9:90:14:B8:29:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/D345EB7198D1D6F10204B388FAC99014B8298C08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345EB7198D1D6F10204B388FAC99014B8298C08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/34352e3136392e36382e302f32322d3234203d3e20323638313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:0c:37:2f:ba:22:fa:80:59:ff:e9:2d:ad:af:8d:e7:17:cb:
         3f:5d:c8:15:02:13:9d:77:39:11:9f:f9:cb:b6:b6:6d:ca:0e:
         62:db:b0:57:af:41:7f:60:55:32:5d:2d:65:dd:52:f2:54:52:
         5e:0f:95:0c:52:01:8d:25:50:e2:df:f2:f7:65:0e:61:5c:77:
         34:8d:f0:0a:ed:94:1e:94:0a:83:94:24:ba:e4:0d:f7:a9:c9:
         91:33:e5:49:87:1e:49:58:b2:b3:df:a1:fb:8f:e2:8b:73:b2:
         5b:e7:e6:9b:f7:75:f7:91:07:b9:43:84:9c:48:af:b7:1f:c0:
         e8:15:83:62:dd:3b:c1:8c:b8:a4:1b:37:6a:8b:df:18:c2:d8:
         e0:6f:45:80:ae:4c:5e:7b:21:2d:9e:54:5a:b5:aa:37:80:67:
         a4:a0:27:31:a0:83:ed:cd:0f:2f:45:f3:d2:4a:a1:80:68:dc:
         bc:04:8e:58:81:9e:0f:6b:31:60:6b:fc:af:4a:2b:1b:38:86:
         6c:a7:50:26:79:d1:b5:2e:fa:d3:e5:66:b5:26:7f:f7:19:81:
         0e:8d:a7:a4:6c:5e:70:ff:c5:34:ef:7a:48:88:d9:9b:b5:e3:
         ce:40:9c:9f:35:6e:79:7d:f8:e5:08:aa:a8:06:7f:c3:34:d3:
         1d:b4:26:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org