Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa
File:                     34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa (raw, json)
Hash identifier:          Pfa7s/VaQjdyXUBxHjz1q3TPLqM5hFIS0rNgDf4KKAw=
Subject key identifier:   44:ED:D2:03:EC:00:61:63:55:41:55:DF:6C:49:56:96:2A:C1:E3:D0
Certificate issuer:       /CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Certificate serial:       3821C596DA819B7A0BA361E70214BC5F824B7253
Authority key identifier: 84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa
Signing time:             Wed 22 Nov 2023 17:53:00 +0000
ROA not before:           Wed 22 Nov 2023 17:48:00 +0000
ROA not after:            Wed 20 Nov 2024 17:53:00 +0000
asID:                     268011
IP address blocks:        45.167.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:21:c5:96:da:81:9b:7a:0b:a3:61:e7:02:14:bc:5f:82:4b:72:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
        Validity
            Not Before: Nov 22 17:48:00 2023 GMT
            Not After : Nov 20 17:53:00 2024 GMT
        Subject: CN=44EDD203EC006163554155DF6C4956962AC1E3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:0b:db:69:cd:ac:f0:fd:89:c7:9a:09:fd:
                    95:87:3b:a3:c6:9f:f4:e7:46:4d:04:da:ee:17:2c:
                    9d:c9:f9:4b:fc:42:f9:4f:6e:48:54:8c:f7:bb:a5:
                    52:51:a5:a3:6b:4a:98:19:26:70:80:cd:d0:f5:1d:
                    b0:ee:76:21:6e:1c:8b:ea:84:b2:45:a8:3a:be:58:
                    ef:1c:6c:4d:41:a3:2a:99:17:82:bd:1e:a1:39:3e:
                    24:69:1b:79:a2:bc:2e:be:c4:e2:e0:b1:0e:8a:75:
                    39:c2:3c:1c:4b:40:64:88:4b:7e:9e:6f:ef:ce:89:
                    19:ac:86:35:e0:88:c9:9d:06:b9:a8:43:b8:68:88:
                    1c:a8:b9:f6:72:fc:53:0b:2b:3e:81:46:38:a7:1c:
                    b0:b8:5f:f2:2e:91:24:8e:0b:66:9d:ed:99:74:a0:
                    24:c1:9e:0b:1d:7f:6f:fe:39:41:84:b6:cb:24:ce:
                    ba:d6:34:06:47:a8:e7:4a:75:9b:40:4e:0e:5b:17:
                    82:47:99:a2:aa:b6:00:2b:ea:38:78:ee:8a:a3:75:
                    50:2e:92:a3:e8:c9:34:3a:3e:5d:5d:9f:f8:54:ea:
                    dd:4f:33:99:bb:1e:98:8a:27:e6:9a:f2:0f:15:39:
                    8a:a7:60:29:9e:01:a2:92:b3:bc:aa:9a:6d:92:1e:
                    d6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:ED:D2:03:EC:00:61:63:55:41:55:DF:6C:49:56:96:2A:C1:E3:D0
            X509v3 Authority Key Identifier:
                keyid:84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:57:3a:bb:2f:a6:1d:7a:3b:e4:02:d1:98:5b:a3:b5:4c:89:
         aa:a0:3f:5c:ac:0e:1e:12:7a:92:6e:f1:f4:a9:aa:14:47:ed:
         a7:0b:d5:57:51:4a:01:7d:34:d9:77:79:f2:3b:77:f9:85:11:
         8b:82:99:76:27:a6:95:2f:50:82:f0:79:82:26:e2:a8:4a:33:
         13:96:c8:9a:f4:43:c1:a3:3a:7e:1d:85:9c:86:cb:ab:00:45:
         ad:10:f1:0b:a3:b2:63:d2:43:27:47:a9:e0:07:12:00:08:ef:
         25:fd:48:4d:d9:2a:40:bc:83:bf:5a:ee:e7:1d:94:99:a8:d9:
         36:be:f3:bd:f4:e3:a7:8f:d6:b0:ae:1d:8e:44:f4:c7:31:cb:
         c2:c6:43:9b:17:58:1d:4f:6c:0d:42:b2:ab:a8:d7:d9:e3:63:
         3e:73:77:a3:6f:07:eb:03:99:fb:27:1c:39:cd:42:0e:55:60:
         13:3b:ee:15:39:96:e6:30:8a:d1:6f:bd:ae:03:75:b1:9f:de:
         be:48:b0:60:31:8b:94:eb:91:b6:2c:dc:75:a8:d0:c0:3e:29:
         e9:3a:15:5c:b5:f1:0f:f7:b9:5b:6f:e5:48:fd:4b:1b:68:59:
         ad:b7:bd:a5:fc:d6:ec:aa:2d:3b:d4:8c:42:f7:29:f4:48:53:
         5a:ad:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org