Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32322d3234203d3e20323638383432.roa
File:                     34352e3137342e34302e302f32322d3234203d3e20323638383432.roa (raw, json)
Hash identifier:          qmHE/gYfREzJXFBGtJhzPj6s6/i+afmVYb3rQkbe7o8=
Subject key identifier:   5C:89:49:29:84:C3:57:BD:51:33:B7:7A:1B:8B:CC:F7:8E:91:53:C4
Certificate issuer:       /CN=0F047AA6C1AB573EF113512D5843094035A22397
Certificate serial:       7E14459026A45EECC1181533D290B0FEBB7129D7
Authority key identifier: 0F:04:7A:A6:C1:AB:57:3E:F1:13:51:2D:58:43:09:40:35:A2:23:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F047AA6C1AB573EF113512D5843094035A22397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32322d3234203d3e20323638383432.roa
Signing time:             Tue 07 Nov 2023 12:19:01 +0000
ROA not before:           Tue 07 Nov 2023 12:14:01 +0000
ROA not after:            Tue 05 Nov 2024 12:19:01 +0000
asID:                     268842
IP address blocks:        45.174.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:14:45:90:26:a4:5e:ec:c1:18:15:33:d2:90:b0:fe:bb:71:29:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F047AA6C1AB573EF113512D5843094035A22397
        Validity
            Not Before: Nov  7 12:14:01 2023 GMT
            Not After : Nov  5 12:19:01 2024 GMT
        Subject: CN=5C89492984C357BD5133B77A1B8BCCF78E9153C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:dd:4d:f6:e2:2d:74:66:07:ec:ac:e7:0a:
                    97:48:19:86:03:7c:9c:8f:23:c4:20:82:f9:f9:d7:
                    ad:20:83:0d:02:c5:c0:1f:17:68:19:cb:d0:e8:2d:
                    2f:0f:5a:f8:e3:e9:f7:0a:fe:c7:5a:82:5e:d0:1a:
                    51:86:a5:35:42:a3:61:cd:d1:e9:ef:f5:57:d6:cc:
                    e9:d5:f6:7e:e4:3c:7a:86:74:a1:da:c2:23:7d:f4:
                    2e:c4:c6:86:b3:d5:cc:22:8e:09:e5:2e:26:2a:c9:
                    49:7a:90:d5:69:bb:f3:95:b8:eb:27:a5:25:bd:24:
                    e4:08:50:db:c9:bd:d4:01:fe:09:1b:b3:aa:1f:01:
                    42:cc:65:0d:3c:da:25:2f:8d:9d:2a:db:f7:59:6e:
                    5d:29:c6:48:7b:cf:8e:09:42:55:04:31:bc:45:6e:
                    7e:75:3c:cf:c4:2f:b0:b0:b4:62:9f:b0:11:9b:92:
                    41:34:e8:8f:c5:41:0e:ba:24:92:62:55:39:0e:d3:
                    71:f6:1f:0c:43:ba:c4:59:43:bb:d2:0e:a5:e8:b5:
                    16:7e:14:43:97:3c:f2:28:c3:41:9d:31:26:e2:8b:
                    97:c7:a0:46:ed:9b:d0:8e:e9:52:43:64:e5:a2:06:
                    50:d1:25:82:a3:f3:65:17:a9:5c:12:a1:a7:65:f9:
                    df:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:89:49:29:84:C3:57:BD:51:33:B7:7A:1B:8B:CC:F7:8E:91:53:C4
            X509v3 Authority Key Identifier:
                keyid:0F:04:7A:A6:C1:AB:57:3E:F1:13:51:2D:58:43:09:40:35:A2:23:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/0F047AA6C1AB573EF113512D5843094035A22397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F047AA6C1AB573EF113512D5843094035A22397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32322d3234203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:12:0d:b7:1e:13:98:a5:90:91:20:b9:63:71:fc:25:a8:84:
         59:2f:dd:95:6e:a5:94:f3:43:e4:6f:e7:ab:77:4f:f8:e2:31:
         46:cc:d6:d8:38:57:6f:46:3b:81:c1:92:73:4d:6c:c5:b2:c7:
         5d:10:4b:eb:1a:51:05:08:c6:07:05:f6:44:1c:d3:d9:46:92:
         a6:f3:8d:d5:4a:7f:49:e2:52:1a:2b:33:b4:01:63:af:d2:c5:
         04:89:fe:c6:ef:d5:74:7e:aa:d3:90:5c:85:95:40:e4:d0:32:
         50:28:fb:07:8e:25:46:b0:00:b4:e0:0e:8e:de:c7:12:98:fd:
         68:1b:f4:1a:cb:06:bf:46:ca:82:8a:78:70:c9:86:a4:c5:94:
         70:fc:8c:29:e8:8a:61:51:8a:a6:c2:49:b5:73:fd:13:46:4d:
         3b:ca:03:11:76:0a:a9:c0:30:99:01:06:15:a9:43:59:04:54:
         fb:f1:44:9f:bb:ec:c9:44:ff:21:fd:61:d2:ca:48:e5:89:4b:
         12:c5:56:b5:cd:e4:60:df:43:d6:c3:1a:4a:79:c4:01:98:04:
         40:58:e9:5c:5b:4c:91:4b:7e:35:6b:c1:17:4d:1b:66:4d:17:
         94:f8:e9:dd:37:8c:71:e0:3e:82:bc:b8:06:cb:6e:55:d5:74:
         76:b2:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org