Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/34352e3233312e3231322e302f32332d3233203d3e20323637323139.roa
File:                     34352e3233312e3231322e302f32332d3233203d3e20323637323139.roa (raw, json)
Hash identifier:          2Z3V9ynjtMESBQdl4SuDMOgWfiFdH9uFGXTGe76TCMg=
Subject key identifier:   E3:E8:50:DB:4E:9B:93:FE:53:EE:20:8B:7D:7D:9D:EF:D1:60:AD:BF
Certificate issuer:       /CN=63820E72BB2FEC3F1330D9F4624FC89CA82480CA
Certificate serial:       1D2CBBFC649848CD10D950327FCE3DD70CEEA9
Authority key identifier: 63:82:0E:72:BB:2F:EC:3F:13:30:D9:F4:62:4F:C8:9C:A8:24:80:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63820E72BB2FEC3F1330D9F4624FC89CA82480CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/34352e3233312e3231322e302f32332d3233203d3e20323637323139.roa
Signing time:             Thu 09 Mar 2023 19:09:33 +0000
ROA not before:           Thu 09 Mar 2023 19:04:33 +0000
ROA not after:            Thu 07 Mar 2024 19:09:33 +0000
asID:                     267219
IP address blocks:        45.231.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2c:bb:fc:64:98:48:cd:10:d9:50:32:7f:ce:3d:d7:0c:ee:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63820E72BB2FEC3F1330D9F4624FC89CA82480CA
        Validity
            Not Before: Mar  9 19:04:33 2023 GMT
            Not After : Mar  7 19:09:33 2024 GMT
        Subject: CN=E3E850DB4E9B93FE53EE208B7D7D9DEFD160ADBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:a7:ff:2d:84:d8:12:5a:4f:7b:6b:68:5c:
                    17:74:98:49:14:3d:02:69:ff:6b:e9:12:a6:1a:4d:
                    7b:63:ff:78:97:f2:3f:f6:1d:4e:e8:fb:58:e0:66:
                    3d:75:6f:c1:3d:7e:d1:00:6b:17:ce:70:98:6f:9c:
                    b1:4a:15:33:f7:5b:c4:26:8e:a4:db:c5:b8:80:d3:
                    03:0a:23:46:ff:99:34:f1:9d:9c:52:7f:8f:18:2a:
                    77:17:4e:8a:0c:74:b3:d3:ab:09:d7:11:56:ce:5d:
                    29:0c:77:c7:e8:e8:95:26:78:5c:d5:a4:9c:59:41:
                    fa:eb:97:a7:94:30:56:3b:28:cd:ec:b2:e0:4f:52:
                    fe:88:30:64:f8:56:82:a5:96:b5:b8:c2:a9:46:ab:
                    15:61:f5:70:1a:0f:7a:68:50:f0:87:38:e2:70:db:
                    26:b7:72:a6:f5:61:b0:05:bc:c9:28:fb:a0:b5:12:
                    05:ae:68:4a:0a:93:11:9c:e5:36:2c:52:ff:b6:43:
                    d2:01:f6:6e:e3:d1:27:6e:67:6c:a1:70:ee:f3:a6:
                    bc:40:bc:27:6a:eb:5f:89:41:56:62:78:61:7b:8a:
                    be:2f:70:09:13:06:d8:40:72:76:b0:20:1f:1c:38:
                    9f:ca:8b:01:3c:f1:18:38:f8:6b:1b:59:61:53:47:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E8:50:DB:4E:9B:93:FE:53:EE:20:8B:7D:7D:9D:EF:D1:60:AD:BF
            X509v3 Authority Key Identifier:
                keyid:63:82:0E:72:BB:2F:EC:3F:13:30:D9:F4:62:4F:C8:9C:A8:24:80:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/63820E72BB2FEC3F1330D9F4624FC89CA82480CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63820E72BB2FEC3F1330D9F4624FC89CA82480CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/34352e3233312e3231322e302f32332d3233203d3e20323637323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:d9:e4:64:71:7a:26:fe:13:ef:d5:f6:dd:f9:7a:c9:a3:31:
         dc:3f:ab:d7:fd:db:20:a9:b1:c5:71:a5:e6:88:3c:49:35:51:
         3d:cc:c4:55:8d:64:61:06:88:8f:7b:d5:c9:2b:78:04:4e:e2:
         84:67:f8:91:7f:8d:5f:89:89:12:73:b5:a8:f3:59:83:6a:3a:
         60:61:f5:9d:5e:4d:f1:1b:37:0f:75:b5:0b:db:46:45:fa:70:
         bb:4c:cb:95:a7:b4:4e:a0:5e:51:43:02:a4:29:67:25:ae:f1:
         35:74:fb:99:d4:2c:62:9f:a2:9f:cb:bb:6c:cd:4b:05:88:ca:
         ec:44:0e:b4:19:9c:eb:29:cd:be:74:69:dd:be:a6:db:40:45:
         f6:d9:4e:56:22:9a:3c:88:43:11:46:20:68:43:2a:e0:89:aa:
         f9:25:89:61:98:20:41:91:aa:b5:ee:26:fa:d0:8b:73:8d:bf:
         81:11:e9:69:17:97:5a:cd:0c:f4:ce:5f:b9:7e:8a:c7:85:a9:
         88:8c:04:5c:ce:dd:92:99:e3:29:68:cc:1d:ec:95:83:9d:93:
         45:9b:e1:2f:2d:f5:5d:07:9e:3b:69:35:5b:e9:ce:b3:c5:19:
         aa:a9:34:af:9f:2e:c5:16:16:24:1a:c1:9f:fa:6e:ae:74:58:
         e8:e7:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org