Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32342d3234203d3e20323633343237.roa
File:                     34352e3136322e3234302e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          ECMMqbDcDTc+GEJRfDYkEqc+02RTYiybLW78HPFb6uY=
Subject key identifier:   E1:D5:38:77:C2:BE:3B:99:78:79:BE:BD:09:B5:73:33:35:82:76:1B
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       7AC8381BF0BF82CF37EEA1C45F31DF518D5C9C27
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32342d3234203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:05:22 +0000
ROA not before:           Fri 09 Jun 2023 22:00:22 +0000
ROA not after:            Fri 07 Jun 2024 22:05:22 +0000
asID:                     263427
IP address blocks:        45.162.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c8:38:1b:f0:bf:82:cf:37:ee:a1:c4:5f:31:df:51:8d:5c:9c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 22:00:22 2023 GMT
            Not After : Jun  7 22:05:22 2024 GMT
        Subject: CN=E1D53877C2BE3B997879BEBD09B573333582761B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5c:e8:9c:59:25:89:48:c2:ce:d3:e5:12:9b:
                    27:47:07:1a:0b:74:d2:ab:4f:0d:1b:6b:f3:5e:24:
                    c6:29:c0:b6:c5:72:07:2a:d4:71:fe:a9:82:52:d7:
                    11:ad:19:44:a6:af:23:06:6e:a6:45:96:79:07:85:
                    0d:d9:45:b3:6a:ee:33:92:49:b7:5e:13:84:fc:db:
                    fb:81:88:b2:44:ed:33:50:cb:35:c6:e4:8e:4d:e3:
                    53:1e:1b:99:6a:4f:17:58:42:a6:d0:ca:ac:b0:4a:
                    c0:58:4d:4a:2e:e7:c9:84:0c:55:5d:3c:7a:71:a2:
                    bc:69:3b:2e:e4:f2:51:52:ac:6e:61:34:92:38:14:
                    a9:11:19:3e:68:bc:fc:2d:72:e6:c0:6f:de:2f:48:
                    6a:0d:72:fe:d3:5b:14:a7:46:4e:a0:8d:d8:f3:67:
                    e7:e3:92:ea:9f:42:31:10:54:c9:d2:5c:04:64:22:
                    f0:4c:d0:47:cc:87:bd:e6:9a:45:dc:19:6b:27:be:
                    37:12:ff:e8:d4:39:f4:e9:b6:f7:e7:83:e6:13:34:
                    9e:c9:82:0b:9e:d3:22:77:e8:c9:e2:e6:79:86:dc:
                    05:37:01:9e:4e:06:ed:83:d0:e0:98:a3:b9:03:70:
                    f3:2b:5d:cf:7d:0a:16:4e:2b:ab:7a:1a:10:d6:51:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D5:38:77:C2:BE:3B:99:78:79:BE:BD:09:B5:73:33:35:82:76:1B
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:27:1f:96:53:66:5d:94:2c:9d:10:b2:e1:e9:72:68:18:17:
         19:e0:32:2e:51:5a:cf:a8:ea:7f:60:5e:26:a5:3a:63:94:b7:
         45:e2:6a:33:f1:c0:84:aa:fc:ac:39:49:7f:0f:1e:71:f0:b2:
         21:57:25:9d:dd:a8:18:c0:43:02:24:5c:0f:cb:27:7d:03:a0:
         95:4f:4f:ad:85:33:b0:b4:e1:f2:9d:f6:4c:2c:7b:33:e3:2c:
         a1:b7:7f:96:dd:c9:9c:2e:ca:7c:fc:36:42:d8:6c:51:85:b1:
         4f:53:35:78:ef:d7:e3:08:03:4a:69:3f:0c:26:51:8d:85:a4:
         91:f0:c3:84:f3:5b:2d:a4:cc:70:35:98:dd:52:41:1c:ab:63:
         9f:eb:4f:1d:87:f1:19:74:b2:93:85:6b:2d:1b:a0:40:0f:8d:
         cc:e0:22:3d:34:d4:a4:ea:8d:1c:20:26:fd:6e:f9:27:0c:9b:
         df:6f:51:cd:8f:55:e9:ac:10:e7:7d:1a:25:b9:ac:35:fa:76:
         f0:89:97:ec:fd:c1:57:53:52:86:68:8e:53:c9:7f:65:6d:1b:
         ad:bf:98:fd:a8:c4:fa:42:3e:ff:79:0d:76:72:16:f9:ee:d1:
         cf:90:98:ec:69:9a:7d:b9:d7:6d:bc:da:3f:1b:50:72:df:40:
         cb:31:7e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org