Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134322e302f32332d3233203d3e20323638303131.roa
File:                     34352e3136372e3134322e302f32332d3233203d3e20323638303131.roa (raw, json)
Hash identifier:          HplK60EAADLjeY9YERch1MD+ZkYlpw/grApPf01dCNI=
Subject key identifier:   CE:C9:E9:E0:B3:4B:3C:74:76:61:8A:CA:2D:5E:7E:6F:6B:BB:C9:E8
Certificate issuer:       /CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Certificate serial:       69C370D88BC43F0BF667959BCCD17E0AEDC63EC6
Authority key identifier: 84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134322e302f32332d3233203d3e20323638303131.roa
Signing time:             Wed 22 Nov 2023 17:53:01 +0000
ROA not before:           Wed 22 Nov 2023 17:48:01 +0000
ROA not after:            Wed 20 Nov 2024 17:53:01 +0000
asID:                     268011
IP address blocks:        45.167.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c3:70:d8:8b:c4:3f:0b:f6:67:95:9b:cc:d1:7e:0a:ed:c6:3e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
        Validity
            Not Before: Nov 22 17:48:01 2023 GMT
            Not After : Nov 20 17:53:01 2024 GMT
        Subject: CN=CEC9E9E0B34B3C7476618ACA2D5E7E6F6BBBC9E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:57:45:d6:b3:a1:95:29:cf:dc:44:8b:bb:20:
                    1a:be:6d:c4:71:87:ab:64:67:9b:0c:33:6c:91:1b:
                    9e:e2:72:14:80:fd:33:95:f8:8d:34:09:7a:99:09:
                    ea:2a:de:0f:62:2f:4a:09:9b:b0:16:f0:dd:e2:47:
                    d4:86:1d:3b:3a:15:b9:e9:9b:88:ae:c1:74:34:7c:
                    f8:8d:73:f1:5f:58:b7:3c:4e:da:5a:fb:cf:3f:c2:
                    c1:1f:47:06:99:14:30:b2:f3:bc:11:da:5c:8c:7c:
                    27:23:b3:d0:20:88:44:cd:4e:20:ec:d3:f2:b2:cc:
                    4a:e0:cb:d0:a7:ab:e9:39:fa:40:3e:8b:18:e2:be:
                    eb:57:54:2b:da:78:31:0b:da:ee:4e:6e:c9:07:39:
                    75:13:d7:92:c5:5b:99:72:ee:a1:ab:7c:bc:dc:5a:
                    06:c8:ee:59:a5:bf:e5:9b:ea:8d:19:ae:8b:a1:4f:
                    4e:73:57:11:82:a1:ae:84:87:f8:a3:93:f2:5b:a7:
                    8f:ef:8d:34:ef:a8:1f:30:d3:3f:78:1f:5b:25:0f:
                    ce:71:57:0a:31:1c:3f:d2:c3:ef:64:96:a2:79:a4:
                    ed:b3:49:2c:9b:7b:8d:9c:de:a8:84:a4:18:33:ed:
                    14:bf:03:a2:04:98:20:f3:09:9e:7f:de:06:d8:78:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C9:E9:E0:B3:4B:3C:74:76:61:8A:CA:2D:5E:7E:6F:6B:BB:C9:E8
            X509v3 Authority Key Identifier:
                keyid:84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134322e302f32332d3233203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:e5:e0:d8:21:81:18:68:aa:5b:e1:37:35:2d:13:ac:13:b2:
         21:88:6d:53:c6:85:7d:e9:b8:3f:01:e8:05:44:c2:fd:8c:16:
         90:5b:27:78:f6:61:94:af:2b:7a:9f:55:84:50:80:c6:0f:06:
         cf:42:49:df:76:3f:94:ed:e9:74:81:4d:33:b2:e4:b4:f3:b6:
         56:b6:61:7e:1d:b2:42:e0:05:6b:2c:f5:f1:dd:2a:50:3c:cb:
         4d:49:f2:f5:61:3e:fb:70:8b:b5:d6:1e:45:e2:43:61:21:d1:
         90:b9:90:1a:04:58:b0:8d:00:8a:b5:34:24:50:50:dd:52:c3:
         00:58:3a:d3:ec:81:c6:7d:e3:0b:3d:76:22:65:b3:93:bf:bc:
         2f:a3:8f:ce:d5:da:9f:50:ff:c2:21:a7:8b:41:99:35:75:03:
         7e:ea:59:10:59:f4:92:e1:33:66:ad:e5:a5:3d:a3:2f:01:4b:
         23:80:7d:43:3d:f5:1b:72:b4:eb:6c:8e:c3:5c:fc:67:f4:a8:
         87:7c:3e:39:aa:d2:4e:58:38:94:15:8d:e4:9a:34:5c:d9:0b:
         c3:6c:ea:8a:1d:a2:16:6c:e9:d1:35:5c:f3:ef:fc:86:96:97:
         96:91:8e:cc:f8:0b:b8:dc:d9:4a:cb:5b:93:e8:b2:3e:32:31:
         54:98:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org