Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39342e302f32342d3234203d3e20323639313637.roa
File:                     34352e3138302e39342e302f32342d3234203d3e20323639313637.roa (raw, json)
Hash identifier:          WHA8D3dm/MsIPk9GiDZkZ47bKFsiedII6Awcx+g3QX0=
Subject key identifier:   AE:36:4E:73:98:FD:F1:0B:B8:CB:73:68:4E:7F:29:9E:02:94:B9:75
Certificate issuer:       /CN=355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF
Certificate serial:       6E1262DAAB7616ADE98ACB62F89BF3C5FF486A69
Authority key identifier: 35:5B:10:65:0D:F5:BB:4E:3A:92:9E:D6:6E:6B:FE:A2:5B:BB:94:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39342e302f32342d3234203d3e20323639313637.roa
Signing time:             Fri 09 Jun 2023 18:16:39 +0000
ROA not before:           Fri 09 Jun 2023 18:11:39 +0000
ROA not after:            Fri 07 Jun 2024 18:16:39 +0000
asID:                     269167
IP address blocks:        45.180.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:12:62:da:ab:76:16:ad:e9:8a:cb:62:f8:9b:f3:c5:ff:48:6a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF
        Validity
            Not Before: Jun  9 18:11:39 2023 GMT
            Not After : Jun  7 18:16:39 2024 GMT
        Subject: CN=AE364E7398FDF10BB8CB73684E7F299E0294B975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:50:02:c3:1c:d8:96:2b:b9:51:65:aa:59:
                    f0:65:46:00:6c:9e:4c:5f:5b:b3:53:00:41:d6:d9:
                    bd:c4:27:1b:d1:d1:3e:6e:58:39:90:25:f9:c1:1a:
                    c2:95:0b:4a:68:6c:92:cd:69:15:ce:fd:91:a0:c6:
                    b1:87:fe:0b:ec:28:f4:e8:96:de:c1:22:3d:d2:e5:
                    9c:c2:f1:4b:ec:10:ed:02:13:55:5a:5d:b8:75:c5:
                    df:4e:c9:a9:58:75:5e:1e:84:d7:b7:08:9e:7f:e8:
                    73:b0:87:5a:87:51:ff:39:2a:ac:53:52:d9:7f:5d:
                    0d:8b:05:1d:5a:f8:58:e9:00:47:82:88:20:e3:a5:
                    72:e9:94:dc:b6:c6:39:9c:04:ae:b8:a5:b0:aa:e6:
                    73:68:be:b8:19:a0:dd:31:ac:7d:3b:7d:35:9d:49:
                    f4:d3:b9:f8:1c:4b:8f:69:39:56:40:f2:e4:ed:7d:
                    5d:80:47:6e:a4:70:b7:ef:f1:37:5e:74:91:19:ea:
                    98:3e:1c:ef:c9:e9:0c:d6:3b:06:6d:89:d8:0e:f2:
                    40:e3:18:a9:5d:6a:d9:62:4d:46:54:63:c9:f8:3a:
                    87:d4:aa:d1:bb:27:90:d6:a4:b2:a7:fa:c3:4f:72:
                    db:0f:19:00:9b:10:7d:9e:be:26:d7:02:a3:e7:e4:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:36:4E:73:98:FD:F1:0B:B8:CB:73:68:4E:7F:29:9E:02:94:B9:75
            X509v3 Authority Key Identifier:
                keyid:35:5B:10:65:0D:F5:BB:4E:3A:92:9E:D6:6E:6B:FE:A2:5B:BB:94:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39342e302f32342d3234203d3e20323639313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:4b:24:37:56:ec:f8:0b:26:38:14:f7:98:f7:a3:67:29:c3:
         8f:11:70:f7:de:6a:66:42:c9:d7:8a:25:3e:4b:38:19:72:6a:
         0f:61:32:41:d9:11:22:44:21:a0:ec:dc:b6:07:42:39:86:98:
         58:ff:e5:4f:48:8b:56:30:0c:30:6e:53:94:46:dc:27:40:c0:
         c0:13:fb:be:33:3d:c5:79:2f:48:d2:1f:55:2d:a5:34:97:83:
         cb:ed:99:ec:90:f0:7b:06:61:59:0f:07:07:d5:de:a3:5f:e3:
         c1:e6:7c:82:a2:48:0a:cf:bd:f5:2e:6f:3a:cb:6e:85:eb:11:
         7b:a8:f2:c4:04:1e:01:da:f9:73:d4:91:f5:a3:f7:e0:29:90:
         60:e5:ce:b7:1b:9e:81:dc:00:e4:dc:34:4e:ec:8b:e2:97:98:
         08:69:43:ca:9a:23:e1:f7:30:6d:9c:fa:39:ff:5a:39:33:ab:
         b8:a6:93:22:eb:d4:45:5f:0e:96:a6:80:ea:29:6f:2b:de:6a:
         f6:e7:5a:36:07:f4:ee:c6:34:bf:6e:03:e6:cb:10:aa:0c:54:
         d2:09:cd:37:a7:3a:d6:f4:a7:9a:43:2d:82:8c:e2:eb:fb:2b:
         2f:11:99:97:6b:da:44:42:7c:a5:91:e7:fd:fd:63:b0:7f:5a:
         98:78:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org