Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3233342e3234382e302f32322d3234203d3e20323637333838.roa
File:                     34352e3233342e3234382e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          YHl6cujTjSX/o/G8z6IY4UMt6WQ17RXE9J+aww70i90=
Subject key identifier:   B1:20:B9:83:83:F0:A7:A9:69:62:AC:58:E7:38:58:7B:48:76:E3:A0
Certificate issuer:       /CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
Certificate serial:       38A55E1989CD41B39A429C5430F8146ACCA54DFF
Authority key identifier: BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3233342e3234382e302f32322d3234203d3e20323637333838.roa
Signing time:             Tue 12 Mar 2024 21:17:14 +0000
ROA not before:           Tue 12 Mar 2024 21:12:14 +0000
ROA not after:            Tue 11 Mar 2025 21:17:14 +0000
asID:                     267388
IP address blocks:        45.234.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a5:5e:19:89:cd:41:b3:9a:42:9c:54:30:f8:14:6a:cc:a5:4d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
        Validity
            Not Before: Mar 12 21:12:14 2024 GMT
            Not After : Mar 11 21:17:14 2025 GMT
        Subject: CN=B120B98383F0A7A96962AC58E738587B4876E3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:be:e7:02:b6:81:e3:de:4d:89:e8:19:5f:69:
                    3f:06:b8:d0:b3:79:1b:7b:ba:d8:7d:ca:59:b3:a3:
                    90:c7:cb:9f:21:91:02:b1:ea:f6:9b:4c:21:78:41:
                    25:ff:99:d9:2b:d1:50:d5:21:27:3a:a3:45:b7:77:
                    04:99:7a:cc:a5:f7:d5:be:b5:5e:9a:b4:06:de:e1:
                    1c:bb:75:3e:89:11:27:64:d7:28:bc:b7:52:cb:5f:
                    a3:e7:ae:00:d1:8a:6a:40:4c:9c:91:69:60:8d:1e:
                    b8:d6:d8:4c:aa:17:1f:ff:51:01:70:46:9b:73:1e:
                    25:b5:3d:bb:ff:76:80:e1:e2:1b:f9:c8:d5:8d:24:
                    ec:e0:88:98:e4:0f:53:76:32:20:52:69:6d:d2:9b:
                    e5:05:ca:60:78:72:bc:8e:84:82:a0:18:b9:2b:31:
                    84:bb:d1:15:46:47:5c:24:3b:32:2e:7b:af:6f:d5:
                    46:62:a9:43:c6:2a:c0:91:9d:f7:88:5c:68:aa:2d:
                    7b:9d:9b:cd:aa:f2:c8:c5:b0:61:92:63:7e:d4:64:
                    c7:84:74:33:90:95:b4:76:2e:4b:87:24:13:c4:5d:
                    a8:84:d4:01:26:4f:86:ed:28:76:83:3e:f8:9e:b8:
                    63:00:50:33:34:74:1a:33:0f:77:0e:ff:80:71:a6:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:20:B9:83:83:F0:A7:A9:69:62:AC:58:E7:38:58:7B:48:76:E3:A0
            X509v3 Authority Key Identifier:
                keyid:BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3233342e3234382e302f32322d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:58:23:f6:ee:92:be:54:31:74:b8:db:f4:8c:38:57:2d:8d:
         29:bc:d9:b3:60:da:1f:8e:e7:09:82:56:f9:6a:a5:58:16:f1:
         6e:3a:67:db:d8:2c:2b:13:59:cc:84:4b:d9:92:27:b7:21:d3:
         62:92:6e:15:70:0d:b6:6d:37:46:b9:62:9c:50:5e:d1:1d:8f:
         59:cb:0d:a5:2d:cb:16:7f:f9:3e:8d:80:f5:ce:19:b6:4f:05:
         94:bf:06:9b:e9:6c:ab:0f:c4:2b:f0:d7:70:84:fc:ef:34:55:
         cb:4b:fc:2b:4a:ce:bd:8a:67:3b:27:33:3a:a4:35:0b:1f:d0:
         9c:ab:94:67:a9:97:67:0a:10:68:87:57:1e:9d:c4:66:3b:cb:
         b2:dc:b1:a9:c0:57:e8:7c:f7:6d:2f:be:4a:be:ae:43:7b:aa:
         82:69:fb:d4:a2:66:2c:6c:67:5b:0f:01:55:cf:6d:a2:7a:ce:
         ca:18:9d:75:1f:3f:bf:10:c0:1e:62:f4:71:8a:fe:ba:ee:c7:
         d1:84:df:2b:b1:3c:cb:ab:c1:bd:70:51:42:02:6a:6c:e6:3d:
         88:32:24:6f:17:bc:de:2b:94:ad:86:80:ca:70:1b:43:83:dc:
         fc:84:56:1e:ba:3e:d8:d0:d6:d5:68:d2:3a:2b:5d:57:e1:3a:
         77:bf:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org