Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34342e302f32322d3232203d3e20323636393538.roa
File:                     34352e3232362e34342e302f32322d3232203d3e20323636393538.roa (raw, json)
Hash identifier:          y0tuJ+e/8pvlZiUx/vDRqTadb4oI/RyFJlUdVI8rdBw=
Subject key identifier:   9F:68:48:2E:BB:8D:FE:33:4D:78:4B:22:50:C4:FD:80:A7:56:52:0D
Certificate issuer:       /CN=885C33EE8E30210425E8E25473319F24E3B686FB
Certificate serial:       2E55C02CDBCFFA7B2D6E64DC2EEE53D66F527667
Authority key identifier: 88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34342e302f32322d3232203d3e20323636393538.roa
Signing time:             Thu 09 Nov 2023 21:00:01 +0000
ROA not before:           Thu 09 Nov 2023 20:55:01 +0000
ROA not after:            Thu 07 Nov 2024 21:00:01 +0000
asID:                     266958
IP address blocks:        45.226.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:55:c0:2c:db:cf:fa:7b:2d:6e:64:dc:2e:ee:53:d6:6f:52:76:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885C33EE8E30210425E8E25473319F24E3B686FB
        Validity
            Not Before: Nov  9 20:55:01 2023 GMT
            Not After : Nov  7 21:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:f0:b2:64:ea:b1:22:9f:34:c0:d3:a1:c3:
                    30:8b:ed:e0:b7:2f:69:10:03:c5:3e:ab:0e:0b:b1:
                    05:98:04:7b:69:66:ae:c2:87:2b:eb:28:1a:82:07:
                    eb:d7:b1:a4:9b:9d:0d:6d:ce:bb:09:73:b6:f4:ed:
                    6f:46:1a:0b:3e:04:8b:92:70:4d:77:59:30:03:ed:
                    ac:c9:9f:2a:79:ab:14:93:d8:7e:fe:a1:a6:e4:a2:
                    76:66:4f:a6:db:e4:da:4a:48:b9:99:7e:30:38:43:
                    8e:33:1e:3c:61:5f:8f:63:14:c1:d5:ed:e6:56:1a:
                    a9:be:b5:38:81:64:2e:10:f0:64:4b:0c:b3:38:00:
                    06:12:3d:25:45:db:1a:19:16:d6:d9:13:68:92:6c:
                    22:ec:7f:ad:e2:ca:31:b9:6c:fb:66:e6:4a:3d:5f:
                    e3:f1:a8:9e:95:42:5e:02:3b:cc:19:f4:26:7a:e3:
                    70:f4:c0:02:29:54:c3:c8:81:84:ae:68:63:58:ad:
                    3e:3b:55:35:bf:68:bc:31:0f:41:db:d2:1b:75:0d:
                    e8:9d:3f:70:7a:61:ee:d7:07:9b:c1:f9:e6:01:ca:
                    06:87:db:41:8c:5b:2c:42:03:8c:75:85:dd:f6:60:
                    ff:ca:99:ee:80:29:5a:d3:6f:87:77:60:58:3d:e8:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:68:48:2E:BB:8D:FE:33:4D:78:4B:22:50:C4:FD:80:A7:56:52:0D
            X509v3 Authority Key Identifier:
                keyid:88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/885C33EE8E30210425E8E25473319F24E3B686FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34342e302f32322d3232203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:40:13:4c:37:d6:69:57:91:32:71:8e:db:7b:14:2a:4b:35:
         24:e9:49:b8:63:cb:8f:19:64:f5:15:42:9a:93:bf:3b:57:5c:
         01:47:fb:b8:54:a5:22:13:4f:68:d5:e7:de:e3:02:8b:90:f8:
         7a:4c:77:51:7d:f0:e7:4d:3a:ef:53:c5:58:42:b3:75:87:86:
         b4:41:05:69:1d:3a:e2:f7:df:09:04:68:7e:db:69:cf:43:94:
         42:23:22:5f:14:f9:dc:28:42:09:f2:3e:ee:a3:c2:b7:8f:ff:
         8a:05:66:13:66:f0:10:58:95:78:25:6d:da:eb:f9:86:14:d1:
         80:11:95:68:d4:5e:61:d4:dd:1f:ec:c6:65:56:61:d3:7b:bc:
         cd:ca:b7:6e:f0:7c:74:e6:ea:f0:41:eb:12:63:ee:38:dd:2f:
         ae:12:19:98:29:11:8a:99:0a:a5:52:f5:9c:67:de:87:59:12:
         cc:7a:03:09:e6:a0:b7:06:77:73:4f:09:bb:08:88:15:90:6e:
         cb:a3:e7:76:b0:26:39:de:a4:da:5f:0f:94:8d:2b:b5:27:64:
         f9:22:37:28:33:e6:ff:55:40:6a:27:d7:49:12:bc:6f:36:86:
         4c:81:d5:46:ff:83:be:18:30:51:cf:3e:17:dd:a4:7e:1c:ec:
         0a:e5:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org