Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3234203d3e20323636393334.roa
File:                     34352e3232352e3131362e302f32322d3234203d3e20323636393334.roa (raw, json)
Hash identifier:          AXhMz7W2y2SBJt593cyOyoiphX9xbgg8EK4L6ES70yA=
Subject key identifier:   13:24:89:AD:6F:ED:05:C5:A3:D7:D9:F5:94:12:4C:DD:FC:55:9E:32
Certificate issuer:       /CN=F58C653A90EBD6C4D81507F00284F07BDB55956D
Certificate serial:       2ED1539F50065B99BDD947D2FFDE62617F2F1D50
Authority key identifier: F5:8C:65:3A:90:EB:D6:C4:D8:15:07:F0:02:84:F0:7B:DB:55:95:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F58C653A90EBD6C4D81507F00284F07BDB55956D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3234203d3e20323636393334.roa
Signing time:             Mon 26 Sep 2022 01:58:01 +0000
ROA not before:           Mon 26 Sep 2022 01:53:01 +0000
ROA not after:            Mon 25 Sep 2023 01:58:01 +0000
asID:                     266934
IP address blocks:        45.225.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d1:53:9f:50:06:5b:99:bd:d9:47:d2:ff:de:62:61:7f:2f:1d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F58C653A90EBD6C4D81507F00284F07BDB55956D
        Validity
            Not Before: Sep 26 01:53:01 2022 GMT
            Not After : Sep 25 01:58:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b2:b7:e9:29:2a:e4:95:0f:e0:a1:0d:9d:3d:
                    37:81:04:26:f8:82:56:68:b8:8f:9c:5e:68:21:74:
                    ff:15:19:2b:26:42:98:ae:60:3d:52:6b:27:cf:50:
                    df:2a:31:31:d4:a6:20:4f:be:48:d0:92:85:ee:08:
                    9a:dc:14:e9:cf:e0:b7:92:52:a5:42:e8:07:87:7a:
                    21:06:e0:fc:62:e7:1b:22:9a:07:6a:6d:9f:18:63:
                    50:0d:0a:03:56:4d:46:a9:36:3d:8d:82:51:38:c9:
                    99:7b:62:ea:83:c6:d2:15:e2:a6:9f:38:df:c2:0c:
                    cd:b4:3c:5a:be:3e:9b:75:dd:66:cc:96:33:4b:de:
                    14:9c:ea:10:1a:94:8c:7a:9d:3e:0a:07:64:05:90:
                    a2:41:7c:2e:62:e7:b4:01:86:7e:c5:b3:ac:e9:31:
                    ff:a2:d5:df:46:29:3c:2f:47:29:34:a8:84:a0:2b:
                    1f:28:55:62:ec:72:86:14:9f:d9:55:d8:4b:6f:ab:
                    1d:f0:a9:63:c3:2a:27:71:c2:41:7e:ef:00:10:1c:
                    e8:cd:af:8f:c1:96:8e:6c:6f:63:7d:0d:56:80:66:
                    1e:08:e1:9d:d0:fc:80:5c:f4:a4:66:f0:2d:74:c8:
                    81:4b:32:f8:5e:31:31:ae:55:74:42:63:7e:9d:5b:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:24:89:AD:6F:ED:05:C5:A3:D7:D9:F5:94:12:4C:DD:FC:55:9E:32
            X509v3 Authority Key Identifier:
                keyid:F5:8C:65:3A:90:EB:D6:C4:D8:15:07:F0:02:84:F0:7B:DB:55:95:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/F58C653A90EBD6C4D81507F00284F07BDB55956D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F58C653A90EBD6C4D81507F00284F07BDB55956D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3234203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:4f:f1:e9:4c:6d:86:ed:4a:46:b2:3f:ea:76:82:58:db:00:
         84:08:b8:3e:c2:14:03:ca:b1:e4:aa:a1:a5:dc:ee:1f:99:93:
         4e:1f:1a:60:7c:ac:50:e5:a4:6c:55:b2:74:7a:ec:b8:c5:0d:
         54:5f:c8:5e:ff:96:ec:f7:13:6b:c2:7a:c0:15:94:23:19:b1:
         86:7e:0b:5e:a1:92:6b:b6:12:dd:64:9f:89:40:b9:26:de:0b:
         2f:8f:1b:23:b4:04:59:29:25:70:5f:f6:03:f3:1a:c3:95:bb:
         b0:35:72:42:51:fc:93:f0:dc:0c:56:b2:04:35:6a:f9:ff:7c:
         96:37:12:2c:b3:29:e6:dd:c0:4f:92:99:05:0d:31:53:d8:2f:
         2c:9f:92:33:62:3d:5f:c8:1d:00:86:78:0e:b7:68:b3:2b:dd:
         b7:c8:26:50:91:ed:93:96:94:3e:23:b3:a2:a4:ee:2d:c3:52:
         12:b5:2e:2d:8a:30:12:a2:90:5a:81:02:20:80:35:37:5e:bc:
         88:da:2a:2f:a4:b6:28:d4:b0:31:00:ec:3c:79:4e:1e:7d:ee:
         15:5f:36:21:a8:68:2e:4f:97:4c:2b:0a:14:f5:4e:ca:5f:bb:
         e0:a1:cc:b4:cd:39:a0:08:24:88:a9:00:53:18:77:d7:94:cb:
         ea:0d:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org