Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39342e302f32332d3233203d3e20323639313637.roa
File:                     34352e3138302e39342e302f32332d3233203d3e20323639313637.roa (raw, json)
Hash identifier:          grIq39wmkpqARKUVBgCuM9Tax69hHggokKmb8mJHxKA=
Subject key identifier:   51:24:54:69:0E:06:35:15:3F:A2:92:D0:A2:81:8F:00:2B:71:86:3B
Certificate issuer:       /CN=355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF
Certificate serial:       5F64D607FFFAB275A24779773E3C7D66BF214072
Authority key identifier: 35:5B:10:65:0D:F5:BB:4E:3A:92:9E:D6:6E:6B:FE:A2:5B:BB:94:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39342e302f32332d3233203d3e20323639313637.roa
Signing time:             Fri 05 May 2023 00:34:25 +0000
ROA not before:           Fri 05 May 2023 00:29:25 +0000
ROA not after:            Fri 03 May 2024 00:34:25 +0000
asID:                     269167
IP address blocks:        45.180.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:64:d6:07:ff:fa:b2:75:a2:47:79:77:3e:3c:7d:66:bf:21:40:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF
        Validity
            Not Before: May  5 00:29:25 2023 GMT
            Not After : May  3 00:34:25 2024 GMT
        Subject: CN=512454690E0635153FA292D0A2818F002B71863B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:b5:6d:51:dd:1c:9d:b8:7f:1e:36:a2:7e:
                    69:14:9a:4d:ae:82:b8:a0:f0:ad:bc:30:3e:ae:58:
                    15:17:9c:db:9e:90:4a:78:49:cb:4d:2d:aa:3e:4d:
                    99:d6:8f:55:17:78:e1:ef:ec:ca:9f:25:e9:99:f7:
                    55:91:cf:2c:19:e4:19:22:dc:ce:dc:6b:21:f9:26:
                    43:2d:34:9a:ec:aa:46:ea:49:59:52:ba:5b:9f:d4:
                    43:64:ba:b8:68:b2:70:5f:a0:7d:e7:85:b3:b1:59:
                    ba:c1:50:74:66:3d:99:ea:77:c1:7c:78:96:9b:94:
                    b6:b3:99:7c:53:c6:bd:a6:ee:84:da:1d:86:92:47:
                    46:00:39:9c:2c:f6:7e:cc:f7:e3:05:fa:38:de:4e:
                    eb:1b:69:e6:d5:0a:31:f3:f0:84:d5:c9:36:2d:9b:
                    8d:de:0d:36:26:8c:27:e3:be:ea:bb:d2:67:3f:c9:
                    05:7b:bc:ce:b0:12:08:eb:22:2a:f8:1f:43:a6:c6:
                    ba:06:6a:26:2a:2d:7f:9e:b3:36:fd:01:6c:ae:ce:
                    98:c1:74:7a:00:c3:cf:87:3c:75:e6:2a:aa:5e:b5:
                    94:1c:c4:a7:2b:82:47:2c:d0:4a:2c:d4:9b:27:04:
                    1c:5d:8e:65:fd:ed:b4:ac:52:1a:19:ca:1a:55:ab:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:24:54:69:0E:06:35:15:3F:A2:92:D0:A2:81:8F:00:2B:71:86:3B
            X509v3 Authority Key Identifier:
                keyid:35:5B:10:65:0D:F5:BB:4E:3A:92:9E:D6:6E:6B:FE:A2:5B:BB:94:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39342e302f32332d3233203d3e20323639313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:5f:f1:7b:79:bf:04:e9:e1:5d:1b:a6:99:59:58:5d:9d:71:
         19:ed:6b:f3:f6:f3:3f:f9:65:ed:53:3d:81:b4:79:59:8a:2b:
         d2:0b:2e:c3:1e:f4:0e:3c:5d:e5:84:3e:75:7e:61:74:7e:27:
         4d:42:5d:7c:4d:e1:0a:45:01:9f:84:17:4e:3f:3e:91:00:92:
         22:5a:be:fe:90:2c:34:5d:8d:83:6e:db:e7:1f:73:ab:d0:d9:
         ff:6a:73:04:a3:dc:a9:a2:a9:0e:b7:21:22:06:80:2c:60:31:
         be:1f:0f:10:c2:38:5c:9a:97:52:e6:91:cc:7d:78:f1:94:6e:
         b4:36:84:a6:77:ad:6e:2d:32:54:fd:b5:75:6e:6a:6a:42:96:
         ea:4f:0f:94:9d:8b:25:13:f7:7a:9b:30:e5:8b:bb:b7:85:de:
         35:57:eb:23:ec:05:03:ad:b5:a0:bb:0b:3e:6e:39:b9:c4:13:
         3c:0c:79:e6:b4:fb:ec:ba:65:75:45:73:9b:2f:89:30:63:c8:
         15:51:4f:8d:2e:0d:f7:7b:ca:5f:36:23:99:89:8c:e8:df:ca:
         78:fe:80:97:e8:35:19:18:15:8b:a2:1f:5a:da:22:05:82:0b:
         c2:36:b9:69:3c:11:80:7d:52:c4:58:67:c6:3e:70:fe:40:b8:
         17:b1:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org