Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa
File:                     34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa (raw, json)
Hash identifier:          Pomhy7pwlokzsrtImzhLNonAE/jrrK2215H+U6ZnOig=
Subject key identifier:   0C:4F:6E:E2:AA:41:D7:09:3F:26:2B:9E:9D:CA:F1:32:CD:40:31:DF
Certificate issuer:       /CN=AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B
Certificate serial:       3D7B8F89AD2D95017892E839289FA403D081AAFB
Authority key identifier: AE:A6:DC:E0:90:7A:7D:F8:8B:EB:D5:C0:9E:EE:07:1A:4B:E0:E5:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa
Signing time:             Mon 12 Feb 2024 17:00:01 +0000
ROA not before:           Mon 12 Feb 2024 16:55:01 +0000
ROA not after:            Mon 10 Feb 2025 17:00:01 +0000
asID:                     269155
IP address blocks:        45.180.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7b:8f:89:ad:2d:95:01:78:92:e8:39:28:9f:a4:03:d0:81:aa:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B
        Validity
            Not Before: Feb 12 16:55:01 2024 GMT
            Not After : Feb 10 17:00:01 2025 GMT
        Subject: CN=0C4F6EE2AA41D7093F262B9E9DCAF132CD4031DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:61:89:6d:66:a3:52:3b:80:69:98:78:95:
                    78:90:4e:25:60:d2:37:45:44:07:af:5b:49:af:d7:
                    09:d8:cf:69:91:dd:0b:39:be:cc:59:cf:53:5c:d3:
                    c2:0b:dc:14:5e:a0:6a:9f:73:0d:57:56:b2:fe:0f:
                    13:d0:cf:e0:1b:a2:3b:f7:73:4e:43:76:65:8b:d0:
                    8c:d0:b7:64:55:12:c1:35:c4:42:cb:7a:78:dc:28:
                    54:98:39:74:35:9f:af:ec:bc:74:af:b0:d8:58:c2:
                    7d:ec:7d:47:5b:00:08:ee:b4:d7:3f:ed:e1:af:83:
                    e4:3f:40:d0:43:2f:16:66:17:3b:e8:47:93:9a:33:
                    98:19:a1:73:b9:12:78:d0:dc:17:13:6c:e6:e8:a9:
                    7a:e6:25:36:54:5d:d2:a2:76:ed:c7:90:0f:04:2a:
                    12:63:22:28:3b:4b:e6:03:04:24:fe:1d:ce:c2:88:
                    04:e1:b6:d3:00:4a:7a:97:e8:37:2e:48:8d:d1:25:
                    03:46:ce:76:0d:7c:ac:11:13:28:71:04:4a:9b:8f:
                    cc:62:52:95:28:bb:8d:3f:8b:0c:c1:25:03:82:be:
                    dd:57:bc:ea:4b:7a:ae:a6:97:f5:48:10:8e:1c:16:
                    38:df:f6:27:6f:01:51:d5:9b:9e:12:5f:95:1b:d5:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:6E:E2:AA:41:D7:09:3F:26:2B:9E:9D:CA:F1:32:CD:40:31:DF
            X509v3 Authority Key Identifier:
                keyid:AE:A6:DC:E0:90:7A:7D:F8:8B:EB:D5:C0:9E:EE:07:1A:4B:E0:E5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:78:cb:a2:57:ce:db:b7:fb:ce:e2:ca:e4:05:2d:df:06:
         62:44:35:3d:3f:d9:b8:50:4b:49:70:57:62:f9:c9:d3:05:49:
         33:f5:cb:a4:fa:23:5f:53:87:bb:01:f9:b8:7a:c1:13:a4:dc:
         0e:93:93:c1:24:83:a2:14:59:10:73:aa:af:3d:89:f1:d9:72:
         37:17:ef:02:53:2c:64:05:71:20:fc:cd:fd:fb:4d:1b:82:23:
         02:00:7d:03:f3:64:0d:3e:12:1f:65:9d:b6:8a:58:3d:47:de:
         2c:51:27:b6:e1:4b:05:88:39:89:7a:f2:88:41:b8:b7:81:4a:
         90:e7:24:ca:fe:cc:15:5d:d0:94:cf:c9:a4:89:c5:76:6a:2d:
         19:7a:dc:93:32:d4:b1:5a:fb:d2:9c:af:b6:12:78:e9:d3:1b:
         80:c5:dc:c9:b5:f0:eb:08:a2:21:f1:88:59:90:02:51:1b:0d:
         8d:43:4a:10:47:fd:c2:bb:85:a4:16:5c:0b:48:08:e4:7b:2e:
         6d:23:44:61:d7:d8:63:66:1b:d6:5d:2b:3d:6c:56:66:3e:20:
         26:19:f0:d2:21:38:75:15:0a:3e:cd:a2:da:92:48:45:dc:37:
         7c:5d:8d:a2:ab:be:eb:32:c9:9b:57:d6:59:4b:b3:ea:bb:35:
         26:87:79:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org