Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/34352e3232382e362e302f32332d3233203d3e20323637303339.roa
File:                     34352e3232382e362e302f32332d3233203d3e20323637303339.roa (raw, json)
Hash identifier:          TZL2iuZaoh5aGYH4s75NKG0FQ+vyYR/1F5wqFk4tq2s=
Subject key identifier:   D8:EA:CC:4D:F0:23:C0:EA:64:5E:14:D5:10:2C:C1:3E:86:28:A5:3D
Certificate issuer:       /CN=8A5CAC0220F1C0DF5BC8EF97E5534FF358717618
Certificate serial:       343A7F41FFEB5543D31129C87321E7EAC193E2D4
Authority key identifier: 8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/34352e3232382e362e302f32332d3233203d3e20323637303339.roa
Signing time:             Thu 07 Dec 2023 19:00:00 +0000
ROA not before:           Thu 07 Dec 2023 18:55:00 +0000
ROA not after:            Thu 05 Dec 2024 19:00:00 +0000
asID:                     267039
IP address blocks:        45.228.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3a:7f:41:ff:eb:55:43:d3:11:29:c8:73:21:e7:ea:c1:93:e2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5CAC0220F1C0DF5BC8EF97E5534FF358717618
        Validity
            Not Before: Dec  7 18:55:00 2023 GMT
            Not After : Dec  5 19:00:00 2024 GMT
        Subject: CN=D8EACC4DF023C0EA645E14D5102CC13E8628A53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:69:38:f3:22:ea:51:95:24:4a:2e:6d:84:
                    c2:77:80:d4:23:40:79:f1:86:7f:46:31:0e:ce:13:
                    7b:e6:96:ea:f4:15:bc:6a:df:f7:30:1e:f6:06:13:
                    7a:e7:36:37:9b:d9:ae:cd:8b:a1:c8:88:65:39:ff:
                    3d:83:4a:7c:08:c5:c4:91:74:43:3d:55:f9:5b:2e:
                    b4:13:f7:dd:63:4a:6f:5b:95:e3:b9:1e:f2:a6:66:
                    bc:7c:3e:93:00:4b:3e:24:6d:46:3b:fc:5a:33:32:
                    dc:91:fd:6b:7b:18:86:47:27:0e:ff:72:09:4b:7f:
                    62:46:b5:3e:f4:51:28:67:7d:2c:53:7c:7b:8f:d9:
                    65:97:26:5b:27:4e:7c:2f:28:ee:6d:a7:df:c7:fb:
                    fd:a7:93:4f:f2:00:3f:4a:4c:db:63:4a:7a:b9:45:
                    dc:e9:db:53:b5:2a:6c:58:f3:b8:d3:45:7c:6e:25:
                    5b:45:be:f2:55:44:56:e9:21:e1:7a:46:9d:12:1d:
                    7a:84:bc:06:82:38:c2:76:14:cd:21:82:06:9e:ab:
                    44:ed:31:bb:6b:11:23:89:12:af:7b:fb:cb:a8:3a:
                    d3:a6:e2:81:d9:59:a3:03:d7:e1:ff:80:b8:65:63:
                    b6:d3:6d:64:c3:fe:12:7b:af:a5:17:19:f8:d0:d9:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EA:CC:4D:F0:23:C0:EA:64:5E:14:D5:10:2C:C1:3E:86:28:A5:3D
            X509v3 Authority Key Identifier:
                keyid:8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/34352e3232382e362e302f32332d3233203d3e20323637303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:36:75:55:df:8c:59:5d:9c:b9:af:2a:f2:57:74:2a:59:f7:
         fa:49:39:a6:0e:31:c0:c6:c6:b0:d5:94:a5:51:e7:b1:70:95:
         74:e9:f6:84:29:12:fd:10:a7:23:a2:4d:76:b1:66:ef:e0:f9:
         68:5b:fc:0c:41:44:08:22:fe:ee:f5:57:39:12:fb:bb:d3:29:
         77:42:9a:17:06:81:3f:10:b1:27:c5:6c:ff:81:b0:e2:8b:71:
         ac:f8:f8:37:12:7d:c8:0e:a8:b3:8a:30:dd:09:00:15:18:ce:
         d0:cf:59:88:7c:f5:83:e5:61:d7:be:11:9b:18:de:98:af:a9:
         45:d1:b1:5b:fb:dd:fe:c1:c4:81:96:63:fe:52:95:13:41:2a:
         d3:c4:cc:41:16:0b:4a:5d:ee:d1:58:96:42:14:29:33:c4:4f:
         ba:34:38:69:b5:a6:dc:cb:94:b0:7e:3d:e3:f4:fc:e1:92:2e:
         2b:52:44:cd:a3:74:74:98:72:de:29:cf:2e:30:ef:dd:c2:a4:
         2c:cb:63:13:6c:5a:40:64:7f:47:7b:a1:ac:ff:25:9b:34:1e:
         8b:9f:de:78:d3:94:39:d7:8a:8e:c4:bb:d8:fe:70:9d:69:f1:
         50:15:46:f5:17:1a:1a:55:23:d0:89:95:63:0a:83:f7:3c:e0:
         d6:ed:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org