Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/34352e3136332e3234302e302f32332d3233203d3e20323638353834.roa
File:                     34352e3136332e3234302e302f32332d3233203d3e20323638353834.roa (raw, json)
Hash identifier:          rxkVT+uBFmuyp1RsmHwgQHIvVLbOA5yDyw5743stzSc=
Subject key identifier:   2B:96:29:CC:92:E9:65:41:12:96:1A:71:29:8F:54:BB:0A:97:EE:F7
Certificate issuer:       /CN=4BD795F092B94300EC0509053A12492273477784
Certificate serial:       201666255B62F96420E910D5C8DA3EEC9DFC1888
Authority key identifier: 4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/34352e3136332e3234302e302f32332d3233203d3e20323638353834.roa
Signing time:             Tue 02 Jan 2024 17:16:09 +0000
ROA not before:           Tue 02 Jan 2024 17:11:09 +0000
ROA not after:            Tue 31 Dec 2024 17:16:09 +0000
asID:                     268584
IP address blocks:        45.163.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:16:66:25:5b:62:f9:64:20:e9:10:d5:c8:da:3e:ec:9d:fc:18:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD795F092B94300EC0509053A12492273477784
        Validity
            Not Before: Jan  2 17:11:09 2024 GMT
            Not After : Dec 31 17:16:09 2024 GMT
        Subject: CN=2B9629CC92E9654112961A71298F54BB0A97EEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:00:d4:4a:7f:0c:9a:b2:fb:b7:36:58:49:
                    16:2e:03:3b:54:59:1e:7a:f7:3a:74:6c:22:c3:88:
                    af:ac:e4:d4:70:44:17:2c:70:68:7b:10:58:61:cb:
                    94:21:24:87:65:f4:af:6f:8b:7a:5b:97:7d:b8:bb:
                    11:75:8b:1c:21:61:1a:7d:63:27:15:0d:33:9a:05:
                    0b:fd:77:1c:82:f5:35:81:5f:92:8d:05:0e:96:5d:
                    cd:15:e8:08:2f:a6:a1:d7:6b:37:ed:77:fe:35:f5:
                    a5:78:f7:b9:11:0f:43:0e:8c:fa:d5:f7:2d:ee:76:
                    34:4c:c7:9b:01:ce:20:65:46:a2:77:34:ef:35:b7:
                    fc:6b:c4:d1:b7:ef:58:1a:0d:e7:d7:2d:22:dd:17:
                    4b:7b:79:f0:b7:12:55:e0:53:aa:15:f2:5e:ba:07:
                    3b:4a:43:63:42:ca:9e:10:5b:59:f0:e3:75:cb:8c:
                    4a:a4:7a:c7:7e:d6:f6:25:6f:3e:36:e6:2c:cf:ce:
                    0f:49:13:4d:92:8f:4b:da:ad:3c:ae:99:06:05:cd:
                    7c:05:2b:87:7e:0b:a2:90:a6:32:0a:0c:d0:ac:65:
                    f0:4f:2e:de:7c:6d:88:11:38:12:c0:fd:39:35:59:
                    61:21:4b:49:a4:63:0b:13:a4:cc:c6:2d:ce:09:ad:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:96:29:CC:92:E9:65:41:12:96:1A:71:29:8F:54:BB:0A:97:EE:F7
            X509v3 Authority Key Identifier:
                keyid:4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/4BD795F092B94300EC0509053A12492273477784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/34352e3136332e3234302e302f32332d3233203d3e20323638353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:02:20:02:52:e0:ae:22:7b:be:39:4c:92:a6:7c:2a:8d:b5:
         ba:90:53:b7:83:e0:2b:c2:40:a3:eb:da:a8:e2:e4:06:89:e8:
         a7:24:b9:f0:e2:e7:cc:2d:6f:02:8c:ec:01:17:37:ce:ce:db:
         87:f4:5e:9e:ce:84:9e:4a:51:53:11:69:9a:6e:24:e9:97:0d:
         2c:ba:8c:88:2b:d4:92:e6:dd:82:a6:b3:10:b5:28:34:3e:8c:
         1a:61:a7:97:7b:88:59:b9:e7:4f:c3:1b:d2:48:5b:a2:34:4a:
         4d:dc:8c:b1:26:25:19:35:66:b5:a6:b2:79:e0:68:63:62:16:
         0d:bc:81:93:88:b3:6e:28:0b:03:b8:7e:6e:4f:20:d4:6e:83:
         6f:d9:2d:29:bd:7f:6e:ad:5e:e3:e5:f0:09:c3:0e:d3:bf:fa:
         ac:7c:41:80:64:87:45:0d:56:3b:20:48:e9:06:ae:d2:f2:b8:
         67:c2:50:a1:c6:cb:aa:56:63:f8:82:b1:71:93:2f:a7:22:a4:
         35:a9:a4:45:19:cc:e9:f6:c1:81:53:7e:ad:ad:38:d1:bb:7c:
         92:27:a8:cc:49:15:0e:d4:30:03:9b:a7:41:bd:bc:78:9b:20:
         19:17:c3:46:3a:e6:73:c5:79:aa:2b:c2:4c:89:c5:d5:e6:f1:
         7a:ea:ec:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org