Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39322e302f32322d3232203d3e20323639313637.roa
File:                     34352e3138302e39322e302f32322d3232203d3e20323639313637.roa (raw, json)
Hash identifier:          ZMWq1m8Z9DdQoNOFgJ3IX5MFXSHwf3X/w8ue80W9IvU=
Subject key identifier:   DA:FF:26:20:A4:39:00:1F:CF:F5:94:D9:B6:8B:92:0E:25:1D:34:4C
Certificate issuer:       /CN=355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF
Certificate serial:       64FD067EE28545F87A8A4862FFBD04F2C1A2C3E5
Authority key identifier: 35:5B:10:65:0D:F5:BB:4E:3A:92:9E:D6:6E:6B:FE:A2:5B:BB:94:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39322e302f32322d3232203d3e20323639313637.roa
Signing time:             Fri 05 May 2023 00:34:20 +0000
ROA not before:           Fri 05 May 2023 00:29:20 +0000
ROA not after:            Fri 03 May 2024 00:34:20 +0000
asID:                     269167
IP address blocks:        45.180.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fd:06:7e:e2:85:45:f8:7a:8a:48:62:ff:bd:04:f2:c1:a2:c3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF
        Validity
            Not Before: May  5 00:29:20 2023 GMT
            Not After : May  3 00:34:20 2024 GMT
        Subject: CN=DAFF2620A439001FCFF594D9B68B920E251D344C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:aa:dd:4e:1c:f1:8b:47:67:5e:99:b0:f8:
                    64:e6:8c:70:eb:f3:df:47:b4:fa:5f:a4:be:90:56:
                    5f:cc:9e:de:d0:5d:13:0e:d5:3f:00:36:31:79:ad:
                    65:7f:36:9e:5d:d0:94:f2:f0:a3:0b:53:d8:33:1a:
                    08:ab:a5:13:ef:8f:88:87:d4:a8:bd:cb:6c:75:43:
                    30:5a:5f:07:4a:01:83:b8:10:f8:9c:54:15:be:50:
                    ca:0d:4c:28:55:80:c8:33:61:21:6a:5d:57:60:d4:
                    41:99:75:04:aa:fe:a3:ad:9f:44:fc:fc:a4:c1:72:
                    e6:f3:26:d9:6b:a4:aa:f4:73:41:d1:ac:fd:94:1f:
                    5a:64:f8:ed:4d:ad:2b:18:e5:8f:90:40:42:07:d8:
                    7f:17:b9:cf:7c:01:8f:0e:53:ed:cc:a1:ed:1a:73:
                    77:b3:2e:c9:4b:4b:74:ab:11:fa:55:4e:c1:18:24:
                    54:c5:47:2d:dd:bd:07:69:e7:a9:58:ca:8e:a5:68:
                    c7:e7:5a:4d:40:36:36:32:47:cf:ba:41:c4:31:1a:
                    3d:af:3c:a8:ca:d0:7e:a0:0c:87:a7:cc:e6:5d:0e:
                    c7:3d:00:1d:f6:ea:dc:e8:61:87:a2:f7:a2:0e:b2:
                    ba:8f:51:a1:3f:55:64:2c:90:ff:e2:49:55:46:3e:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FF:26:20:A4:39:00:1F:CF:F5:94:D9:B6:8B:92:0E:25:1D:34:4C
            X509v3 Authority Key Identifier:
                keyid:35:5B:10:65:0D:F5:BB:4E:3A:92:9E:D6:6E:6B:FE:A2:5B:BB:94:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39322e302f32322d3232203d3e20323639313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:a1:ef:a3:8f:30:cb:8e:2b:59:e2:64:44:d6:35:37:23:
         21:1a:af:0f:d3:89:1b:ea:c7:8a:d9:55:ec:41:c2:19:ac:67:
         f8:e1:3b:d1:d5:ba:f2:38:ee:b1:66:a1:8d:93:61:20:1e:d4:
         af:e1:be:df:52:7a:6f:56:29:b5:23:5b:7c:11:b3:d5:fb:22:
         6b:63:45:7c:d6:41:65:3e:a5:46:44:65:23:41:26:25:b6:83:
         fc:c2:cd:f2:b2:0c:ca:05:c4:79:dc:66:7e:12:0d:4d:8a:76:
         35:5c:b6:df:c7:87:cd:f2:de:0d:05:f6:ad:62:bf:4f:41:ba:
         cb:79:c8:66:68:a7:c2:5f:e3:16:71:1d:01:d0:dc:e7:14:23:
         dd:d2:a8:99:87:10:5f:a2:8e:3e:cb:0d:7a:10:a2:d6:4c:64:
         b5:37:3d:ef:5d:36:45:6e:43:e7:6b:99:58:ac:5a:6a:cf:f6:
         9d:b0:2d:e2:6f:0d:cd:89:b9:8c:67:14:33:5b:8c:68:19:36:
         23:70:ca:fa:d0:1b:4f:c7:63:84:c0:f8:7d:2a:d7:80:4b:48:
         cd:76:1b:3a:de:6e:ad:e0:1e:71:84:b7:02:45:a6:68:d3:20:
         6d:b9:d9:94:fc:67:dd:30:97:0a:6e:ed:a1:00:81:92:9a:3e:
         68:5a:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org