Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3232203d3e20323638303239.roa
File:                     34352e3136382e35322e302f32322d3232203d3e20323638303239.roa (raw, json)
Hash identifier:          UhpcQwKSRibPAojvHczQhERtcSws2M9trj382npGLHY=
Subject key identifier:   88:E6:95:35:85:91:1D:D9:AB:7B:70:54:58:E9:94:0B:77:ED:C6:27
Certificate issuer:       /CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
Certificate serial:       223105A761473B4BED1575F5BD061811557AB14F
Authority key identifier: 5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3232203d3e20323638303239.roa
Signing time:             Thu 02 Feb 2023 13:59:59 +0000
ROA not before:           Thu 02 Feb 2023 13:54:59 +0000
ROA not after:            Thu 01 Feb 2024 13:59:59 +0000
asID:                     268029
IP address blocks:        45.168.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:31:05:a7:61:47:3b:4b:ed:15:75:f5:bd:06:18:11:55:7a:b1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
        Validity
            Not Before: Feb  2 13:54:59 2023 GMT
            Not After : Feb  1 13:59:59 2024 GMT
        Subject: CN=88E6953585911DD9AB7B705458E9940B77EDC627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:d9:68:05:fa:fa:b9:b3:44:98:2f:c1:fe:
                    14:d5:5d:57:2e:58:61:f4:72:3d:98:48:37:f4:97:
                    02:9f:51:82:7f:16:c0:bc:e8:51:69:58:01:e8:45:
                    bc:0e:89:0d:a1:d6:dd:22:8f:d6:71:72:f6:29:dc:
                    b1:7c:be:eb:70:1c:2e:7c:08:5c:1b:b6:6d:5d:07:
                    5f:c6:3a:fa:90:62:28:84:d9:75:46:ef:42:2a:44:
                    03:1a:c7:5c:60:f4:f4:b0:48:6c:0b:27:72:a0:a7:
                    b5:c5:c5:09:4b:8e:7f:e3:9b:4e:f5:c7:d0:f2:79:
                    a8:ba:b4:59:96:49:c2:f4:bb:25:06:c8:35:57:e3:
                    8a:bc:a3:88:a4:cf:22:0f:e9:1f:0a:6c:5a:5e:1a:
                    24:75:bf:d7:bd:4a:4f:7b:a1:d8:c9:e2:7e:1a:10:
                    f1:14:c0:e0:a2:2a:61:d4:5f:51:04:8c:e8:85:36:
                    e6:dc:53:7b:b2:a5:ea:76:57:a9:0a:d0:83:e6:b9:
                    d8:ad:cb:a9:0a:96:6a:6e:5b:51:61:16:eb:cf:72:
                    9b:8f:f5:3b:db:0e:4c:21:a1:37:66:88:c9:8a:af:
                    f5:1c:4b:45:11:91:65:cc:00:99:f1:a5:c2:35:e3:
                    dd:f3:6d:b8:fe:2b:51:68:d7:6c:be:42:80:89:f7:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E6:95:35:85:91:1D:D9:AB:7B:70:54:58:E9:94:0B:77:ED:C6:27
            X509v3 Authority Key Identifier:
                keyid:5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3232203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:0a:86:b3:cc:02:2e:9d:7e:48:57:03:e9:7c:a3:90:48:dc:
         54:ca:64:2c:9a:86:3b:f0:ae:33:48:07:b8:e2:1f:86:e7:e9:
         99:4e:1c:4c:64:a8:bf:a9:05:26:62:f5:42:87:6b:d6:ab:e3:
         96:89:1d:c1:2a:4b:95:77:45:cf:47:ba:38:7b:36:0a:4e:32:
         f0:3f:cd:00:1b:ed:76:09:c5:f3:03:f0:a0:49:4c:33:99:0a:
         46:c5:54:34:7f:2e:a0:d7:db:f9:ce:2c:5b:3f:e3:d5:fa:84:
         65:3c:4a:59:58:26:31:32:92:c0:d2:d9:21:3a:d3:06:39:ad:
         e7:52:70:51:26:3e:fe:c7:7b:d1:32:1c:fa:55:0c:7a:cb:2c:
         41:50:f3:22:25:f1:e7:f2:c1:55:df:5e:cd:6a:56:7e:0c:41:
         49:c3:d3:c9:f1:b6:5a:71:08:86:8c:82:c1:11:d3:fe:e0:61:
         ec:e4:aa:65:30:4f:53:8f:6c:47:be:0f:a8:5b:2a:29:f6:12:
         7a:49:0a:92:21:3e:48:c1:7a:08:23:ef:b0:5d:1d:19:28:76:
         56:f6:c6:b1:0d:1b:56:3a:ff:95:ab:63:a2:86:d6:5f:c1:42:
         36:12:ec:99:9f:21:48:ff:71:b8:1d:a0:74:1d:50:d0:ca:92:
         6f:a6:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org