Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133342e302f32332d3233203d3e20323639323832.roa
File:                     34352e3138332e3133342e302f32332d3233203d3e20323639323832.roa (raw, json)
Hash identifier:          NZqn8HwMcPpG2HklkNce2iX8yx6rtMtKWSSnTKnizwY=
Subject key identifier:   6A:F4:41:4E:34:95:AD:10:BC:D1:B6:98:26:55:82:1E:F5:5E:98:00
Certificate issuer:       /CN=BBFE20962257408769607F1ABD1CADD22ED820AB
Certificate serial:       2D8BD6A292F63E580169772C28F9C38CDD6DC3D7
Authority key identifier: BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBFE20962257408769607F1ABD1CADD22ED820AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133342e302f32332d3233203d3e20323639323832.roa
Signing time:             Tue 05 Dec 2023 20:02:41 +0000
ROA not before:           Tue 05 Dec 2023 19:57:41 +0000
ROA not after:            Tue 03 Dec 2024 20:02:41 +0000
asID:                     269282
IP address blocks:        45.183.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8b:d6:a2:92:f6:3e:58:01:69:77:2c:28:f9:c3:8c:dd:6d:c3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBFE20962257408769607F1ABD1CADD22ED820AB
        Validity
            Not Before: Dec  5 19:57:41 2023 GMT
            Not After : Dec  3 20:02:41 2024 GMT
        Subject: CN=6AF4414E3495AD10BCD1B6982655821EF55E9800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:8c:f1:d6:45:89:1c:3c:68:a7:24:78:d2:
                    ca:b3:cc:1d:95:94:0d:df:a4:f0:79:1b:92:49:4b:
                    c4:d8:4a:70:f1:1c:fe:70:bf:50:37:9f:21:de:b8:
                    13:20:59:a0:af:61:fd:b1:43:6f:3b:d0:50:bb:76:
                    b8:69:89:ad:2b:75:86:ae:ec:32:33:3a:00:20:81:
                    9d:c1:4c:39:64:b4:1c:2f:c0:a6:04:03:b2:77:d8:
                    da:6e:cd:07:8f:c8:c9:a0:0a:51:d9:6c:5b:67:b3:
                    7f:b0:47:e5:30:be:6f:c1:35:db:3b:35:81:1e:3b:
                    bf:36:f1:3a:e0:2e:0b:c9:9b:d5:b6:f2:77:85:d4:
                    99:16:0c:b2:28:e2:61:36:13:61:97:7b:8a:0b:86:
                    d4:0a:34:20:0a:8b:65:2e:40:af:cb:47:13:e8:92:
                    54:28:c5:08:b4:61:1e:e5:ec:97:16:55:44:5f:4c:
                    94:75:20:f9:b8:63:d5:e3:b3:b2:14:6e:8c:98:3c:
                    37:e0:af:97:fe:23:d3:7d:f1:cb:55:57:5a:ba:fe:
                    5e:a2:2a:ff:fc:42:35:6f:f7:57:34:bd:05:77:6d:
                    00:41:18:3c:0a:83:a5:46:0e:2b:9d:5e:74:54:85:
                    25:51:78:43:9e:d2:51:98:f8:59:2f:30:bf:c9:37:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:41:4E:34:95:AD:10:BC:D1:B6:98:26:55:82:1E:F5:5E:98:00
            X509v3 Authority Key Identifier:
                keyid:BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/BBFE20962257408769607F1ABD1CADD22ED820AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBFE20962257408769607F1ABD1CADD22ED820AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133342e302f32332d3233203d3e20323639323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:52:be:ae:53:35:a8:f2:cf:ce:e5:4d:4e:e1:3f:fb:b6:df:
         ec:a7:50:54:a8:c2:45:c2:87:79:85:8e:96:fc:0d:9d:1b:01:
         3f:7a:a3:48:ec:2a:46:5d:43:cb:5b:a6:57:56:f8:78:f2:fe:
         c9:01:17:9c:9d:02:63:fd:3e:25:5d:5a:e1:64:b8:b3:08:5f:
         1a:01:15:a2:0d:84:95:97:a6:e9:63:3f:6c:a7:ea:eb:c5:93:
         e0:4f:ed:28:5e:78:b5:8b:7c:6e:ac:86:c0:16:f3:bc:1e:49:
         c4:a8:cb:48:f6:b1:4d:8e:e0:aa:5f:cd:42:89:85:4a:d7:19:
         c7:3c:b6:c8:c0:95:a1:e0:10:53:5a:1f:ac:44:28:1f:e5:c7:
         ea:6d:f5:cf:f1:82:3d:66:d8:c1:8b:9d:94:53:a4:76:53:e6:
         2e:af:8e:d0:45:20:df:07:b5:51:6d:76:70:1e:8b:0e:18:c1:
         a8:63:36:e5:dd:90:e7:b8:c1:9c:46:ce:7d:38:c1:22:80:dd:
         7a:e7:d6:bf:5c:c2:48:d8:b9:e6:b8:a5:f3:1b:a3:34:c4:cd:
         7a:b6:a0:eb:ab:5d:bc:64:85:d3:61:1e:d0:1a:11:0e:df:59:
         c0:58:92:f2:5d:1d:67:32:e6:80:88:43:d0:8f:85:ca:6b:4d:
         cc:29:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org