Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa
File:                     34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier:          Z+QEtx1fcWhsXkWyWUBEW4BtRwovDMM6d6SwwSoUbmo=
Subject key identifier:   1E:42:39:95:62:97:7E:E8:08:43:83:79:F3:D1:29:7C:7C:89:95:7D
Certificate issuer:       /CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Certificate serial:       36E1106D6E6258B6CDF0DA2C2A4734D99A00D409
Authority key identifier: 84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa
Signing time:             Wed 22 Nov 2023 17:52:59 +0000
ROA not before:           Wed 22 Nov 2023 17:47:59 +0000
ROA not after:            Wed 20 Nov 2024 17:52:59 +0000
asID:                     268011
IP address blocks:        45.167.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e1:10:6d:6e:62:58:b6:cd:f0:da:2c:2a:47:34:d9:9a:00:d4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
        Validity
            Not Before: Nov 22 17:47:59 2023 GMT
            Not After : Nov 20 17:52:59 2024 GMT
        Subject: CN=1E42399562977EE808438379F3D1297C7C89957D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:a0:b1:6f:37:f2:5c:12:43:3f:b3:8f:58:
                    4f:8a:47:73:d2:76:19:5c:f3:98:eb:b1:bb:0e:d9:
                    4c:41:ce:a9:ea:1e:89:6e:68:f6:3c:db:01:54:5b:
                    1e:35:08:9e:ce:94:4a:44:8a:b9:46:8d:2d:e2:b4:
                    bb:04:96:7a:7c:89:10:30:99:c7:81:ac:80:ea:d1:
                    45:49:b5:9c:03:9c:00:56:80:4d:1b:73:be:37:1a:
                    ad:9f:ce:06:54:8a:70:17:d2:32:c3:05:f6:ae:1c:
                    a7:b6:fc:2d:ab:35:7c:14:fb:85:4d:e9:c9:24:13:
                    09:ef:59:a5:b6:81:64:0f:a3:4a:b9:49:c8:a8:04:
                    f6:a7:8d:e2:c7:54:17:c8:d6:fb:d4:bc:0b:4f:c9:
                    19:e6:4a:f5:19:11:91:01:2b:20:ab:5a:33:db:ea:
                    e7:f3:8e:2e:10:99:91:49:65:80:08:b3:34:e3:7c:
                    70:d7:06:7e:e0:93:07:29:19:8d:88:2d:bd:5e:ce:
                    59:5e:08:cd:d6:af:57:83:e9:48:a8:c3:51:3b:67:
                    45:68:3c:ec:3d:d4:18:7b:7a:92:6d:bc:2e:9b:3f:
                    f6:d2:11:d1:59:a8:9a:a6:b8:51:61:71:08:61:2c:
                    ec:ca:1e:75:25:86:24:4e:b7:08:67:92:75:8d:e0:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:42:39:95:62:97:7E:E8:08:43:83:79:F3:D1:29:7C:7C:89:95:7D
            X509v3 Authority Key Identifier:
                keyid:84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7e:78:96:e5:65:00:f7:27:da:c3:7d:75:33:a5:f3:95:60:
         25:09:0d:df:65:41:c3:ca:3f:17:41:7f:f0:fa:e4:46:29:31:
         84:e8:9b:74:74:ea:f4:42:f0:f8:26:2b:7c:78:64:f2:30:cb:
         f9:ad:a7:06:b9:ec:a2:0b:62:89:e0:2a:18:45:0d:ee:23:28:
         e8:fc:84:ce:ea:fe:e5:1e:1f:30:93:ca:e8:ed:8b:4e:ce:05:
         4a:13:3d:83:cd:75:85:40:68:f7:7f:64:d0:de:91:92:da:fb:
         06:b2:e7:5a:ec:86:75:89:1b:32:cf:7d:e9:dc:4b:82:b9:05:
         a4:fb:16:fb:67:ac:15:f2:5f:c3:43:1d:27:dd:76:01:a9:68:
         80:23:64:50:ff:95:2e:ec:8d:ec:ba:e0:79:c4:b5:73:4f:90:
         1c:f6:b0:6e:8a:1e:1a:e5:1c:3a:6c:20:41:43:f7:38:9a:ec:
         9d:e6:1f:7b:77:2f:f0:99:4b:84:fd:b2:54:2e:33:41:4e:70:
         38:ed:42:b9:f4:59:c1:65:0e:36:10:dd:7d:c2:42:66:a8:0b:
         e2:02:a6:ff:4c:bb:44:3c:78:03:79:0f:76:ab:3d:57:e7:34:
         94:88:3b:cd:59:bf:73:d7:8c:1b:2b:1e:24:05:1e:ed:95:47:
         88:58:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org