Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32332d3233203d3e20323636303534.roa
File:                     34352e342e34322e302f32332d3233203d3e20323636303534.roa (raw, json)
Hash identifier:          yxa+Cu7ul4I3GKTfw6yXuUV3RaK/AkLIsMTI8r5LwB4=
Subject key identifier:   88:D5:20:1B:4B:3A:2E:73:DE:AB:8C:13:E0:6B:17:E8:72:61:45:4D
Certificate issuer:       /CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
Certificate serial:       65E6BBC282EC1EA1B5D39EB5743E603FBCED5F83
Authority key identifier: EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32332d3233203d3e20323636303534.roa
Signing time:             Thu 15 Feb 2024 14:56:46 +0000
ROA not before:           Thu 15 Feb 2024 14:51:46 +0000
ROA not after:            Thu 13 Feb 2025 14:56:46 +0000
asID:                     266054
IP address blocks:        45.4.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e6:bb:c2:82:ec:1e:a1:b5:d3:9e:b5:74:3e:60:3f:bc:ed:5f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
        Validity
            Not Before: Feb 15 14:51:46 2024 GMT
            Not After : Feb 13 14:56:46 2025 GMT
        Subject: CN=88D5201B4B3A2E73DEAB8C13E06B17E87261454D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:dd:72:b1:f9:05:cd:91:ff:c4:8e:9b:34:
                    ce:cd:70:6d:b4:ac:0a:91:d7:0a:c6:91:53:7f:1b:
                    c5:e3:46:f8:00:ad:13:f8:30:d0:e7:ba:50:9c:92:
                    62:9c:12:00:87:2f:96:6e:fa:2d:50:bb:32:6b:f2:
                    b8:84:af:f9:ed:4c:1b:27:1a:85:f0:94:b1:9a:65:
                    5f:27:8a:72:e7:05:5f:db:a8:d2:ed:80:1f:70:15:
                    3b:ec:c1:e2:15:64:ae:ce:7a:5b:a4:a6:16:3e:e2:
                    47:10:60:e4:b5:e4:45:3f:7b:1d:c4:27:bc:70:cd:
                    90:e5:50:68:1d:72:1a:10:0f:a5:ae:80:94:87:63:
                    0a:ff:36:ee:46:59:a6:9c:c5:07:2c:d2:59:ca:01:
                    99:6f:56:e1:1b:15:ab:87:ef:ca:c6:89:f6:bb:3b:
                    b5:9b:ba:55:ae:5b:23:61:38:2a:7a:2e:14:4d:c6:
                    d4:6b:34:9d:09:e0:bf:7a:18:8d:f2:61:8b:51:2b:
                    50:8b:0d:96:a2:b2:de:dc:ab:4b:39:7c:78:87:a7:
                    a9:c8:4f:78:45:a8:cf:5c:8d:2e:75:f6:eb:e2:f2:
                    18:71:0f:53:de:f1:b6:7d:ca:7b:67:ef:a2:a8:91:
                    8e:a3:98:8a:5c:85:2b:f3:c4:17:2e:fa:31:33:4c:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D5:20:1B:4B:3A:2E:73:DE:AB:8C:13:E0:6B:17:E8:72:61:45:4D
            X509v3 Authority Key Identifier:
                keyid:EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32332d3233203d3e20323636303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:e7:a2:57:57:77:34:62:b0:26:f3:00:5f:09:84:df:4a:84:
         6c:b4:6f:42:24:38:ac:bb:84:c8:15:03:78:ea:59:14:2b:58:
         b4:1a:b1:69:70:70:21:84:55:b6:48:04:1d:a2:aa:68:1f:c6:
         2f:1d:a3:ef:be:5f:6f:8c:92:68:97:46:b5:88:4f:f4:2b:b5:
         5a:ea:9c:11:98:96:a6:c1:be:c4:99:90:b2:c6:a9:03:0b:df:
         2d:02:bd:b1:c7:c2:12:55:26:5a:52:0e:af:cc:f6:b9:98:71:
         6d:37:64:a7:d9:89:96:e8:02:4a:f1:64:b1:90:9c:46:e0:61:
         75:20:b2:50:1a:ed:ae:8a:bf:94:42:dd:2f:ac:b9:ed:60:86:
         26:cf:56:2f:01:26:d0:ec:52:9e:ae:2f:aa:54:7c:b3:d5:7d:
         0a:1a:2c:cd:6d:ad:28:54:38:37:c3:36:47:78:31:90:3c:33:
         97:2a:4c:52:23:f3:e3:df:76:ab:7c:8e:45:b5:24:1e:59:3f:
         fa:69:5e:06:7d:8c:98:86:c0:c7:cd:d9:27:02:d8:8d:49:d9:
         79:c3:71:7b:6f:6b:0e:d3:00:97:7f:e8:ae:7c:15:3a:85:de:
         07:61:02:10:de:ac:62:77:19:7c:d6:eb:1e:3b:8d:eb:34:a3:
         21:39:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org