Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e382e302f32332d3233203d3e20323638363531.roa
File:                     34352e3136352e382e302f32332d3233203d3e20323638363531.roa (raw, json)
Hash identifier:          LhkQEdFrBSv7nZ5sWKuzAkr0F540BBqnJG+uax8Lv0M=
Subject key identifier:   2A:3D:74:F4:38:F0:BA:C1:9A:E7:C4:96:8F:23:C3:E6:9F:0F:A8:52
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       74AD31772548327C2CA468C24E1CEBD501895883
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e382e302f32332d3233203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:01 +0000
ROA not before:           Sun 07 Apr 2024 16:55:01 +0000
ROA not after:            Sun 06 Apr 2025 17:00:01 +0000
asID:                     268651
IP address blocks:        45.165.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ad:31:77:25:48:32:7c:2c:a4:68:c2:4e:1c:eb:d5:01:89:58:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:01 2024 GMT
            Not After : Apr  6 17:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:7b:2f:1f:94:b1:cb:24:74:86:08:22:41:
                    eb:b4:09:96:7e:cf:61:ae:e0:7f:6d:cd:2e:29:fe:
                    b3:10:c4:8e:71:9f:ec:ca:c9:e2:69:66:8a:60:b5:
                    63:d7:d8:5d:7c:da:1e:ba:fc:88:0c:de:c9:28:ad:
                    16:f4:b7:d2:ba:bb:68:5b:cb:8b:62:49:4f:7f:c8:
                    63:1b:cc:d1:7c:55:73:49:a8:ff:29:66:e6:51:47:
                    9b:6c:72:bc:41:cd:6d:31:56:b7:aa:54:cb:23:59:
                    f7:f7:86:ac:fb:4c:60:87:3d:4e:f9:66:71:29:02:
                    76:ed:41:16:6c:09:36:9c:8e:8a:d7:de:ba:3b:10:
                    e2:ab:79:e1:32:f5:9d:65:6d:95:49:82:0a:bb:0a:
                    d1:53:f7:59:52:dc:73:ea:27:81:9f:f1:b4:20:ec:
                    7e:e6:4a:bd:36:8e:11:01:ae:0d:ab:f4:74:e1:f5:
                    9d:07:9c:ec:77:07:2b:61:e8:d0:ca:fc:4d:67:1a:
                    97:5c:74:fe:62:e6:4c:4a:f4:db:e2:25:86:80:58:
                    81:00:27:7c:a9:ec:7f:cf:fd:ec:c9:d7:09:5f:02:
                    94:52:67:83:e5:1e:63:15:36:26:78:0b:08:ef:b6:
                    d6:7a:84:48:ae:bc:ce:65:c2:79:68:db:05:74:47:
                    77:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3D:74:F4:38:F0:BA:C1:9A:E7:C4:96:8F:23:C3:E6:9F:0F:A8:52
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e382e302f32332d3233203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:3d:95:c7:d6:9e:3d:ac:fd:0b:9a:70:f3:de:03:cd:bd:12:
         01:4e:f3:c6:2b:60:ff:9a:bd:39:e0:87:b6:1c:92:fc:99:53:
         12:7b:65:32:60:91:53:4e:8c:c0:c0:b5:19:8e:49:5d:ef:ad:
         85:b9:8e:74:c4:24:f4:5b:c9:63:a9:61:3d:b3:a5:5c:d8:a0:
         c6:e6:48:66:87:8b:8f:c2:34:44:5f:14:44:1f:f4:32:f7:c6:
         cd:ab:a6:ae:84:c8:f4:39:72:0c:6d:86:0e:c8:53:7e:24:39:
         c8:0f:43:0e:f4:75:bc:c8:b7:e1:56:f3:fc:bf:f8:1a:64:4f:
         27:c6:64:67:2e:f5:1d:6b:b6:f5:5d:cb:ab:9d:c6:16:b3:e8:
         3f:fd:b8:ff:91:02:6e:fa:58:ba:7f:e5:6a:89:fe:ab:ee:58:
         93:dd:15:dc:bd:78:8b:45:c6:b4:da:97:a7:4e:6a:b8:72:b7:
         04:65:e8:fe:84:f7:29:2f:88:f8:1a:50:3b:0c:73:75:22:ea:
         48:80:6b:85:c6:a3:ff:13:bf:d7:53:e9:08:c5:bb:40:d5:6e:
         9c:f7:95:28:ba:ce:85:8c:b9:7a:8e:0e:74:e9:ad:c8:ca:e1:
         73:ae:bc:ce:36:89:3c:ce:8b:04:81:de:32:33:dd:a7:fe:ea:
         4c:31:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org