Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39342e302f32332d3233203d3e20323638313439.roa
File:                     34352e3137302e39342e302f32332d3233203d3e20323638313439.roa (raw, json)
Hash identifier:          Y+QmEqTLjLnKrdHB+BbSkOGANiRHFcJLtpT1n7rMBLU=
Subject key identifier:   38:3C:BC:E8:FB:D1:EA:4D:62:46:1A:4D:B6:DD:82:EE:60:71:46:13
Certificate issuer:       /CN=4E92EAD6587DB9E347102D89CFCD167FB49AE43E
Certificate serial:       4CF10D9669D21817E2A624DB8D713A946904DA13
Authority key identifier: 4E:92:EA:D6:58:7D:B9:E3:47:10:2D:89:CF:CD:16:7F:B4:9A:E4:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E92EAD6587DB9E347102D89CFCD167FB49AE43E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39342e302f32332d3233203d3e20323638313439.roa
Signing time:             Wed 12 Apr 2023 13:45:45 +0000
ROA not before:           Wed 12 Apr 2023 13:40:45 +0000
ROA not after:            Wed 10 Apr 2024 13:45:45 +0000
asID:                     268149
IP address blocks:        45.170.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f1:0d:96:69:d2:18:17:e2:a6:24:db:8d:71:3a:94:69:04:da:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E92EAD6587DB9E347102D89CFCD167FB49AE43E
        Validity
            Not Before: Apr 12 13:40:45 2023 GMT
            Not After : Apr 10 13:45:45 2024 GMT
        Subject: CN=383CBCE8FBD1EA4D62461A4DB6DD82EE60714613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:57:51:14:31:46:8b:17:20:cc:89:ff:d7:
                    f3:c7:1a:51:e2:16:61:60:a4:02:71:81:2a:a8:81:
                    fe:67:dd:89:5e:ae:5e:b5:49:2b:1b:4c:d8:55:5e:
                    31:5e:f4:c1:ec:47:e2:05:be:f4:6f:0d:19:36:ea:
                    c7:ca:0f:1c:df:de:8a:ef:18:57:53:ba:3d:d1:78:
                    24:5c:7a:47:83:de:8f:c1:35:79:31:2d:9a:83:93:
                    a8:c9:d1:fe:ea:2a:41:91:2c:d7:8e:d9:04:3c:79:
                    bb:0a:d7:f1:5e:0d:ff:1d:01:29:b7:51:c5:d0:af:
                    36:b6:5a:65:ff:54:16:1b:4a:f0:9e:35:61:af:12:
                    d2:e1:d2:56:1b:72:1c:7c:54:f3:be:9d:35:6b:de:
                    92:a1:82:a7:2b:a7:40:ad:3a:b7:8f:0b:58:0e:18:
                    1f:ef:8f:02:fb:5a:a1:b3:f9:7b:fb:dc:38:c6:1d:
                    be:1e:0c:23:19:88:65:16:34:5f:45:93:16:2a:0c:
                    9a:cf:f6:95:c3:3e:97:d8:c9:c3:61:e1:9c:08:db:
                    fa:62:66:21:d4:00:f4:fa:3b:22:e7:d1:a1:98:ee:
                    04:6c:dc:6d:34:cf:9c:2c:36:63:fe:2b:19:ea:b1:
                    e0:a3:d2:a0:49:41:e1:04:88:3b:0f:e9:2c:37:c1:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3C:BC:E8:FB:D1:EA:4D:62:46:1A:4D:B6:DD:82:EE:60:71:46:13
            X509v3 Authority Key Identifier:
                keyid:4E:92:EA:D6:58:7D:B9:E3:47:10:2D:89:CF:CD:16:7F:B4:9A:E4:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/4E92EAD6587DB9E347102D89CFCD167FB49AE43E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E92EAD6587DB9E347102D89CFCD167FB49AE43E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39342e302f32332d3233203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:57:71:f9:a2:0b:98:b6:0e:42:07:50:92:67:a5:ae:59:02:
         a5:24:49:a4:0a:6c:04:94:fe:a5:98:f0:d7:5e:76:69:1c:a8:
         6e:d3:58:68:01:3b:cc:f7:06:c7:5e:56:b4:58:bc:0b:b9:19:
         14:51:58:94:b0:ab:2b:ba:db:0a:f8:ca:f2:42:d5:f6:09:66:
         ab:30:4c:68:0b:12:2f:b9:f6:d1:8d:61:f2:13:98:b4:59:62:
         20:aa:0c:4b:cc:55:f3:6b:8b:50:0c:d1:0b:93:0c:14:53:d7:
         53:95:31:5b:4a:05:04:f1:56:9a:08:29:2d:02:7c:c3:0d:b0:
         78:1d:b0:fb:a8:4c:54:5c:fa:30:a5:ae:e3:34:c3:29:ea:86:
         c1:a6:0b:27:df:b6:61:7f:73:c6:41:4f:95:9c:cb:04:69:e7:
         9c:03:c1:19:f6:b2:42:41:c1:52:7b:1a:0c:5b:38:f0:39:9e:
         b9:cc:92:ee:6a:fb:e2:c3:93:c5:25:55:43:22:8e:56:fd:e5:
         e2:2a:16:92:31:a4:a9:94:9b:6b:5c:32:87:e6:c0:bd:a9:cc:
         64:97:dd:e4:17:ac:03:8c:b5:14:3b:c7:94:83:25:2d:09:04:
         9a:ec:0d:60:88:eb:c1:61:e5:98:78:02:65:4f:48:70:3b:01:
         88:9a:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org