Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34342e302f32342d3234203d3e20323636393538.roa
File:                     34352e3232362e34342e302f32342d3234203d3e20323636393538.roa (raw, json)
Hash identifier:          L5jzhGR62NqgVYSPn+EwU89BSdVZxUytUPfMi8kOvag=
Subject key identifier:   C6:36:53:47:E5:BD:3F:07:10:0A:81:1D:C4:98:A5:B0:EA:58:C5:DE
Certificate issuer:       /CN=885C33EE8E30210425E8E25473319F24E3B686FB
Certificate serial:       63B9E0FCF06C7158F6A4CC48980B5C3F8969DDC0
Authority key identifier: 88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34342e302f32342d3234203d3e20323636393538.roa
Signing time:             Thu 09 Nov 2023 21:00:00 +0000
ROA not before:           Thu 09 Nov 2023 20:55:00 +0000
ROA not after:            Thu 07 Nov 2024 21:00:00 +0000
asID:                     266958
IP address blocks:        45.226.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b9:e0:fc:f0:6c:71:58:f6:a4:cc:48:98:0b:5c:3f:89:69:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885C33EE8E30210425E8E25473319F24E3B686FB
        Validity
            Not Before: Nov  9 20:55:00 2023 GMT
            Not After : Nov  7 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:32:c2:4a:c6:43:c7:26:20:b1:f9:cb:57:dc:
                    8c:43:1f:2a:1a:b5:57:1d:2c:9a:20:35:c7:9b:f9:
                    4f:04:df:45:c5:3a:56:d9:7b:8b:84:66:e8:ac:9e:
                    a2:f3:50:39:cb:83:71:f4:41:e2:44:6c:25:96:9f:
                    87:3b:be:44:ba:6a:27:93:7a:2d:e8:80:17:7c:b5:
                    74:83:81:19:a0:8f:2b:b0:b9:8c:25:4e:f1:ae:e9:
                    d3:4e:29:87:97:99:cb:be:9b:72:b7:4c:7a:2f:82:
                    b5:d4:2d:77:47:74:60:08:2a:ff:f2:b4:27:0b:aa:
                    2a:3a:9f:e4:93:4b:47:ef:a9:b9:08:a7:3d:aa:74:
                    cd:b1:aa:af:b9:f1:a6:e0:c1:0c:7e:b6:df:ed:f2:
                    1b:74:d1:04:47:33:54:6c:62:60:9a:83:7c:67:65:
                    81:67:74:ba:7a:61:64:e5:d2:b5:6a:6d:b5:dd:f8:
                    66:bd:7f:d5:77:98:9c:2d:09:d8:de:6c:df:91:96:
                    37:9e:6e:d2:1c:59:7a:d7:a0:df:bb:72:a1:d1:14:
                    1d:af:e9:5b:09:9d:e4:56:a7:95:72:31:19:95:c5:
                    d0:6b:53:63:40:76:b2:0f:47:16:dc:2d:c9:f6:7b:
                    b5:22:bb:2e:ce:6b:df:b8:9a:0a:24:4c:b4:42:da:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:36:53:47:E5:BD:3F:07:10:0A:81:1D:C4:98:A5:B0:EA:58:C5:DE
            X509v3 Authority Key Identifier:
                keyid:88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/885C33EE8E30210425E8E25473319F24E3B686FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34342e302f32342d3234203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:7a:27:d0:fd:a2:ba:40:e4:d8:06:df:7c:87:a9:13:a4:9e:
         59:7a:3d:f5:2f:48:f6:2a:d5:b1:cf:b0:72:04:fb:53:3c:25:
         af:3c:25:ce:ec:35:d3:2d:a0:54:0d:71:2a:9c:da:43:c7:67:
         07:05:98:a8:ef:37:ce:a3:d0:2a:47:d0:a7:56:05:37:5c:cd:
         65:5d:d6:b1:e9:69:a8:c7:a7:0a:bb:d8:53:96:a5:d4:d5:cc:
         df:29:a4:93:35:14:30:04:94:3b:5d:fb:b6:f9:b2:69:5a:2d:
         b3:f5:9d:41:b0:87:5a:3a:a8:1a:55:e5:49:a0:5e:cb:ab:e2:
         c7:14:19:a8:a5:45:a1:3a:6b:76:a3:77:01:ae:57:54:c6:73:
         27:c9:28:31:77:1a:9e:eb:b6:cb:46:b1:b0:2e:30:d9:93:a4:
         d4:74:12:16:97:ef:49:c4:12:67:c4:99:5b:8b:99:ae:ee:01:
         28:b7:21:dd:57:c5:9c:af:2e:2a:4c:86:f5:48:78:3f:e1:37:
         ec:25:e2:c1:e7:fc:10:f8:90:27:9d:0b:61:52:73:72:17:28:
         2d:65:b1:97:a1:cb:fe:51:25:27:a5:7c:89:57:53:63:d6:0d:
         75:24:d9:02:32:63:48:c9:07:d7:d9:15:39:16:48:b3:b3:62:
         46:31:df:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org