Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e37312e3232342e302f32322d3234203d3e203238313436.roa
File:                     34352e37312e3232342e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          6B8tHh9LwUWxw6W924XJJ36Y1HLmvLrIsX1DkT1hwqg=
Subject key identifier:   90:CE:78:3C:88:D6:C1:6C:06:AD:43:49:3D:FB:4D:3B:8A:A2:F7:DA
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       15574EF1F486C57FDA9179A703DC1115420B0B03
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e37312e3232342e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:48 +0000
ROA not before:           Wed 21 Dec 2022 17:11:48 +0000
ROA not after:            Wed 20 Dec 2023 17:16:48 +0000
asID:                     28146
IP address blocks:        45.71.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:57:4e:f1:f4:86:c5:7f:da:91:79:a7:03:dc:11:15:42:0b:0b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:48 2022 GMT
            Not After : Dec 20 17:16:48 2023 GMT
        Subject: CN=90CE783C88D6C16C06AD43493DFB4D3B8AA2F7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:5a:0f:21:0d:fa:b7:e6:4a:17:94:09:59:
                    ce:51:95:28:1b:6f:73:8e:d8:ee:3f:ed:d4:1a:98:
                    61:5b:f7:c2:05:0d:59:3f:99:bf:fd:2c:fc:60:af:
                    48:99:a1:aa:6b:5f:bd:a2:85:22:23:94:31:fb:35:
                    e9:96:9a:54:65:78:21:72:e0:c8:2a:a1:f6:51:38:
                    3b:9e:0a:d8:c5:a4:a8:64:fc:de:be:dc:42:83:a9:
                    04:c2:8e:61:11:58:ca:ee:d7:9a:bc:db:31:78:45:
                    b6:e1:9b:f6:e3:e5:fb:57:d9:21:5b:68:3a:d4:9f:
                    d5:ee:04:ac:16:ac:21:f9:f1:ff:3c:41:37:22:3d:
                    d1:59:34:a8:47:72:62:e4:6b:d6:e1:f1:e6:19:bf:
                    f6:ea:9a:53:f6:68:1e:5d:d7:9f:e4:b4:31:a4:b6:
                    8f:dc:28:3d:46:c6:09:0f:b2:8d:bc:19:1a:2a:62:
                    59:26:17:cf:02:73:b6:35:b5:4d:c6:a0:ec:e3:de:
                    c5:c9:e1:bb:d0:af:ed:2c:8e:a4:0b:c1:75:d4:c2:
                    e7:77:2b:0c:fb:0d:38:1d:23:c2:f6:c4:de:2f:ee:
                    f0:79:d0:a6:0a:0f:b3:94:a9:28:7e:15:92:24:50:
                    a8:e8:7a:0a:69:de:2b:8e:23:c9:fc:e8:76:be:dd:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CE:78:3C:88:D6:C1:6C:06:AD:43:49:3D:FB:4D:3B:8A:A2:F7:DA
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e37312e3232342e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:66:f1:da:a8:df:5c:c0:d5:72:31:ac:17:5f:71:f9:a3:80:
         d6:e9:5c:6b:21:1d:d6:f1:3e:de:7d:79:23:8c:46:0b:b3:23:
         6e:5a:6a:ca:5a:21:2e:d2:e1:a6:1e:42:28:7f:cd:d1:fb:32:
         fc:b1:99:35:73:7b:4c:c6:ad:58:ec:d1:df:7a:4d:82:89:27:
         5e:bc:9c:33:1d:45:88:7a:a8:c0:5b:85:60:0e:f1:cc:91:eb:
         cc:db:2c:9c:5c:00:97:65:34:4d:76:52:51:97:98:d2:55:49:
         1e:04:12:8c:d9:da:cb:c2:03:32:62:2a:f6:31:74:dc:71:54:
         90:0d:84:b5:a8:a4:3a:4a:4b:17:5c:f2:2e:27:25:9a:6f:06:
         82:39:70:d2:f8:02:a3:f0:e8:32:26:85:a7:e0:46:ad:55:42:
         01:0e:95:fe:34:d1:0c:89:6c:d9:d3:0b:f6:f6:aa:34:60:4d:
         6f:b6:c3:d1:cb:ea:33:4c:86:f9:5f:f4:ab:d5:47:ef:8f:c8:
         86:28:44:f5:1e:db:95:4e:ad:4a:3f:bc:d2:17:3c:5b:e4:56:
         0c:ca:ae:3a:d9:bd:69:e7:de:98:bf:d9:49:86:15:c9:f2:5b:
         91:11:06:c2:a9:92:77:28:dd:79:2a:06:f4:31:1f:45:5b:88:
         67:54:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org