Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa
File:                     3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa (raw, json)
Hash identifier:          wmBg6swNSmUpvVE3GJed0pyhqZG8ReUJIszYuajgWNQ=
Subject key identifier:   A1:39:D1:25:74:6F:87:A6:71:48:0B:DA:30:E0:95:78:8C:FE:D2:0B
Certificate issuer:       /CN=45E9E748FA23E0B32B8866766DD8E684BEFA7670
Certificate serial:       14291836542B63DA203D012631BD833BA5672991
Authority key identifier: 45:E9:E7:48:FA:23:E0:B3:2B:88:66:76:6D:D8:E6:84:BE:FA:76:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E9E748FA23E0B32B8866766DD8E684BEFA7670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa
Signing time:             Wed 30 Aug 2023 15:05:13 +0000
ROA not before:           Wed 30 Aug 2023 15:00:13 +0000
ROA not after:            Wed 28 Aug 2024 15:05:13 +0000
asID:                     265198
IP address blocks:        167.250.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:29:18:36:54:2b:63:da:20:3d:01:26:31:bd:83:3b:a5:67:29:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E9E748FA23E0B32B8866766DD8E684BEFA7670
        Validity
            Not Before: Aug 30 15:00:13 2023 GMT
            Not After : Aug 28 15:05:13 2024 GMT
        Subject: CN=A139D125746F87A671480BDA30E095788CFED20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:cf:3a:80:39:a4:c1:b8:1d:6f:05:b5:1b:
                    70:8b:2d:4b:54:8b:df:4e:24:0f:bb:f0:f9:dc:81:
                    33:bc:9d:8f:d9:ab:0f:47:36:41:34:fa:90:7e:e7:
                    c7:4f:94:1b:90:c5:f9:c5:dd:8c:40:f5:d3:b1:f4:
                    23:45:e6:4b:42:98:f5:44:ec:31:6a:51:e7:5a:24:
                    5f:3e:df:f7:ff:73:c1:51:61:1d:a6:e9:08:c0:ef:
                    48:d9:3b:9a:56:7b:62:54:f1:35:f6:0b:5b:9e:d4:
                    cf:2c:7d:9e:a3:d7:74:41:ee:34:75:dc:70:45:43:
                    09:82:a3:86:84:51:35:70:aa:8e:a6:5d:8c:25:2c:
                    e7:65:53:e5:25:6e:e7:2c:16:21:a5:b3:08:1c:5d:
                    e7:c1:36:4a:c3:a4:10:47:ad:e2:77:6d:e1:20:d8:
                    da:bd:1c:2a:10:cf:44:1d:02:bb:f9:50:ca:08:0e:
                    ba:09:03:01:a9:77:a2:56:3b:f0:05:4e:2a:4e:86:
                    cc:f7:cf:c1:d4:14:cd:77:a8:50:e9:fd:3d:00:84:
                    e2:ad:0e:ad:d8:de:b3:22:a8:56:12:10:ed:be:a1:
                    69:80:0e:5a:76:b3:45:d7:15:a1:67:fd:64:72:bc:
                    95:9d:8f:6f:c0:65:8b:8e:4f:15:f7:66:be:cf:07:
                    ab:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:39:D1:25:74:6F:87:A6:71:48:0B:DA:30:E0:95:78:8C:FE:D2:0B
            X509v3 Authority Key Identifier:
                keyid:45:E9:E7:48:FA:23:E0:B3:2B:88:66:76:6D:D8:E6:84:BE:FA:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/45E9E748FA23E0B32B8866766DD8E684BEFA7670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E9E748FA23E0B32B8866766DD8E684BEFA7670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:f8:d4:99:25:6d:e5:ca:a0:ea:13:1b:fc:b8:54:78:46:a2:
         58:eb:b9:b5:06:f4:3a:78:e0:0b:9e:dd:fd:a6:c8:85:c2:2b:
         af:ae:77:24:99:56:a3:ea:c7:09:ae:c5:43:4e:2b:32:4f:ec:
         e0:72:63:95:1d:76:df:cf:5a:e2:61:cf:44:86:45:af:75:7a:
         17:36:ab:10:33:ec:40:86:0c:8b:ef:9c:0b:39:b0:60:0d:4a:
         85:d9:68:98:bd:1b:41:2d:f1:01:40:26:dd:65:a3:8f:de:9b:
         26:7c:1e:54:c3:14:ba:10:12:6a:55:6d:ef:f8:45:5e:dd:00:
         cd:4e:28:f9:5d:e2:de:d8:78:ca:80:59:de:63:a1:dd:e9:ee:
         84:41:31:2b:54:66:cf:47:36:1f:e0:d6:71:17:70:fa:ab:62:
         9e:2d:81:e8:28:d7:73:6f:31:37:62:7e:bd:61:b6:ef:50:5a:
         ea:07:3c:ac:0f:7b:70:09:1a:17:68:aa:72:9c:45:3d:e5:7b:
         05:de:e2:67:51:dc:90:da:ea:07:ee:ce:c6:30:32:12:af:9f:
         a2:13:ea:fa:83:78:92:7f:d4:e6:29:70:15:62:78:73:75:8c:
         e4:39:16:d9:d1:5a:31:3f:83:ac:af:15:bd:fe:ed:53:1c:0c:
         00:91:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org