Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e3233382e3130382e302f32322d3234203d3e203238313436.roa
File:                     34352e3233382e3130382e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          I+pI2JjO3CARdFCcu+J3IdlPmO48pSK8jwoQHR7XX3M=
Subject key identifier:   57:AA:21:BC:A0:F3:9F:48:FB:D6:3B:59:0A:5B:B1:92:27:03:32:4D
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       2DAF542F658D92414E9D06F89D7A967939A1AA71
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e3233382e3130382e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:51 +0000
ROA not before:           Wed 21 Dec 2022 17:11:51 +0000
ROA not after:            Wed 20 Dec 2023 17:16:51 +0000
asID:                     28146
IP address blocks:        45.238.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:af:54:2f:65:8d:92:41:4e:9d:06:f8:9d:7a:96:79:39:a1:aa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:51 2022 GMT
            Not After : Dec 20 17:16:51 2023 GMT
        Subject: CN=57AA21BCA0F39F48FBD63B590A5BB1922703324D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:73:28:ef:d1:72:bb:d7:15:df:69:07:a7:
                    8c:49:40:c0:9c:35:50:53:98:21:38:d5:d6:30:48:
                    d0:ff:74:4c:e3:9c:40:62:39:0f:e1:4c:a1:31:b0:
                    26:ce:48:4d:c7:6d:77:32:9b:cd:c1:92:ca:dc:4a:
                    7e:67:a9:b6:c9:db:db:b9:e5:ab:54:26:f9:3d:de:
                    3f:9d:52:77:11:d8:c3:3b:a9:74:94:bd:62:52:85:
                    94:ae:0a:63:ef:49:43:7b:d0:4c:c1:ec:1e:14:78:
                    ac:16:be:9a:61:9d:43:c7:4e:d2:d5:ab:42:21:98:
                    b1:94:42:34:43:78:3d:d9:ed:e4:60:aa:b6:71:27:
                    41:3c:ed:1c:83:fc:66:b9:2d:f1:5c:c3:93:d5:af:
                    49:a6:ce:85:5b:31:b3:8f:0e:80:41:42:07:9f:cd:
                    74:39:c4:59:a6:e0:1e:30:7b:8f:07:3e:6f:19:69:
                    13:45:95:a0:c8:29:89:f3:b2:c4:b3:5f:e3:f4:3d:
                    c5:99:dc:3c:30:59:ff:01:2b:48:66:48:60:72:4f:
                    4f:ca:99:03:7b:e8:17:f9:3c:28:87:e6:59:18:a8:
                    9e:89:b9:a7:e3:76:5f:73:3a:e1:86:01:14:25:55:
                    0d:03:fa:e1:6a:b9:22:c1:c2:a1:86:64:bc:96:71:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AA:21:BC:A0:F3:9F:48:FB:D6:3B:59:0A:5B:B1:92:27:03:32:4D
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e3233382e3130382e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:fe:68:5c:90:e3:d9:f6:11:d0:46:39:a5:90:f2:5e:50:b5:
         c5:8a:ac:2b:9b:62:f9:19:6c:49:0b:10:50:2a:dd:61:26:59:
         3c:61:fa:26:07:a0:56:00:62:d6:3c:ef:b4:b5:42:4f:5a:b0:
         33:51:13:bd:5b:ad:03:21:4b:e8:c4:02:7c:ef:97:ec:be:25:
         c7:6a:dc:09:6b:da:c1:bb:3c:b5:15:bb:35:32:38:03:96:7a:
         70:e0:fb:4b:77:e0:c3:57:83:73:4f:f2:3b:9c:59:7e:ff:c6:
         e0:20:aa:d1:f5:9e:5f:ff:b0:8c:09:4a:26:61:03:f9:fd:9c:
         98:da:e7:e7:52:fa:42:00:92:2b:28:8f:72:8b:02:9d:ac:e6:
         2b:c0:84:54:80:b5:9b:1a:66:f2:28:01:c7:c1:3b:30:e2:05:
         4b:ad:43:20:fb:4d:50:d0:0c:e3:36:c9:f8:54:06:c7:ea:2e:
         7f:a4:c7:66:a3:9f:72:13:83:5a:91:e7:8c:02:7f:2e:9a:15:
         e1:c3:c3:55:c5:f1:55:16:02:98:5c:e1:13:91:3d:d3:be:80:
         0f:75:3f:7f:c4:d7:55:fa:0c:73:45:08:47:c3:e2:40:95:f8:
         80:df:c0:44:62:0f:0b:3c:f4:1a:a5:dd:1e:22:fc:6d:62:5d:
         b9:8f:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org