Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36342e302f32322d3234203d3e20323637343132.roa
File:                     34352e3233352e36342e302f32322d3234203d3e20323637343132.roa (raw, json)
Hash identifier:          XqnbDiapA1EJzAFRkpt4oQXfBipQTI5JUzkOy0edwas=
Subject key identifier:   1B:86:31:66:4E:43:D4:9E:B3:2A:A8:6A:2E:BD:8D:6E:43:DA:DA:A6
Certificate issuer:       /CN=DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33
Certificate serial:       02776959E11DAEA869C31536E7DFD187B534A61A
Authority key identifier: DB:A2:32:1D:03:AF:55:AF:7E:EA:D8:0B:1C:EA:77:70:91:4C:4D:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36342e302f32322d3234203d3e20323637343132.roa
Signing time:             Thu 04 Apr 2024 05:02:32 +0000
ROA not before:           Thu 04 Apr 2024 04:57:32 +0000
ROA not after:            Thu 03 Apr 2025 05:02:32 +0000
asID:                     267412
IP address blocks:        45.235.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:77:69:59:e1:1d:ae:a8:69:c3:15:36:e7:df:d1:87:b5:34:a6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33
        Validity
            Not Before: Apr  4 04:57:32 2024 GMT
            Not After : Apr  3 05:02:32 2025 GMT
        Subject: CN=1B8631664E43D49EB32AA86A2EBD8D6E43DADAA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:d3:57:ff:e6:93:68:e8:45:41:86:3a:8a:
                    c6:28:80:3e:7f:39:49:7c:68:79:cb:a0:25:6f:34:
                    86:83:31:57:83:dd:6e:01:b4:da:1a:85:3e:fd:e1:
                    48:0e:3a:24:30:87:02:10:e4:f1:8f:35:31:9e:d4:
                    ba:d1:45:85:68:2b:04:c9:52:51:77:30:f2:f4:2d:
                    88:24:84:c9:8d:3e:7d:66:46:a2:08:75:73:ee:b4:
                    69:87:e3:9c:7a:e0:ee:c4:be:93:cc:5b:53:9d:57:
                    31:64:a6:26:7c:2f:04:1a:13:f3:77:a1:38:b4:f0:
                    b6:b4:60:5a:aa:0f:8f:2f:40:5d:c8:c7:bf:de:d7:
                    53:c6:8e:44:8c:5f:80:cb:46:58:74:84:a1:b5:c0:
                    16:5a:c9:76:fe:d1:2c:c5:35:39:5c:54:7e:89:73:
                    e2:ad:86:63:cc:0c:4e:3a:28:2d:cf:71:df:77:aa:
                    98:9f:73:b4:1c:6c:df:8c:57:80:99:62:8d:0d:e1:
                    f8:01:b4:f2:b7:19:46:8a:94:ef:36:6b:b2:17:9e:
                    3f:31:97:4d:88:c5:27:8b:b4:6c:97:8b:3b:50:84:
                    93:d4:d3:e4:cd:d7:10:7f:8d:c9:8e:d1:8c:55:23:
                    2e:d3:7d:5b:69:81:d4:94:07:fd:e7:5a:50:cc:24:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:86:31:66:4E:43:D4:9E:B3:2A:A8:6A:2E:BD:8D:6E:43:DA:DA:A6
            X509v3 Authority Key Identifier:
                keyid:DB:A2:32:1D:03:AF:55:AF:7E:EA:D8:0B:1C:EA:77:70:91:4C:4D:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36342e302f32322d3234203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:88:d5:e6:17:5b:77:cf:8c:7f:71:97:5f:13:fc:7d:54:87:
         0e:5c:43:6c:7c:3e:82:c0:4e:a1:f2:e3:c1:30:a0:0e:b6:11:
         c8:50:bd:24:36:3e:d8:de:ac:de:7b:14:98:0c:5f:20:41:70:
         c1:9a:61:0e:cb:9b:53:5f:4c:03:e1:70:33:3b:7e:24:d3:3d:
         3e:e6:b2:51:0b:d7:09:ce:bb:0a:cb:0f:71:c8:94:29:9b:ba:
         c6:da:f0:9e:ff:fb:84:16:ba:24:28:e8:69:ca:dd:84:5a:b0:
         42:0f:9b:0d:b1:28:d7:40:ae:43:09:d9:92:dd:4c:7c:43:d0:
         16:ee:f6:be:ef:ca:ce:36:97:7e:b5:69:31:74:9c:6e:4c:25:
         14:b7:f3:c3:38:df:29:94:0b:5d:ad:d7:2c:a7:78:8b:c6:91:
         71:00:98:6f:f7:53:4b:9e:16:bf:96:19:3b:bc:1a:dd:10:f0:
         a4:12:1b:6d:6c:03:23:4e:6f:fe:27:c0:d2:a5:85:35:51:6e:
         38:ab:ce:65:43:80:39:fc:c8:4b:bf:21:a0:28:e3:6b:d3:06:
         16:9c:39:dd:28:08:ab:d8:41:b6:fd:a3:12:99:dd:e0:61:76:
         31:91:10:7b:38:3d:ce:74:84:bf:fd:ca:8e:6d:33:bc:73:73:
         35:15:db:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:25 2024 by rpki-client on console-ams.rpki-client.org