Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/34352e342e38302e302f32322d3332203d3e20323635393333.roa
File:                     34352e342e38302e302f32322d3332203d3e20323635393333.roa (raw, json)
Hash identifier:          FfeNpHd2MW7z2Hd6QlnLyd2GmXNpojzJFV9Ar+PvgKE=
Subject key identifier:   E4:BA:57:C5:55:B9:19:2D:A5:A6:95:3A:F8:E1:6F:1A:53:09:A2:65
Certificate issuer:       /CN=02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3
Certificate serial:       0AF332DCEB3081AFE64DC34D48DAE24F6E8FF3A4
Authority key identifier: 02:F6:BC:2B:54:6E:9E:BC:68:6F:E1:C2:23:C0:CF:4F:8F:A2:4A:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/34352e342e38302e302f32322d3332203d3e20323635393333.roa
Signing time:             Mon 12 Feb 2024 13:54:10 +0000
ROA not before:           Mon 12 Feb 2024 13:49:10 +0000
ROA not after:            Mon 10 Feb 2025 13:54:10 +0000
asID:                     265933
IP address blocks:        45.4.80.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f3:32:dc:eb:30:81:af:e6:4d:c3:4d:48:da:e2:4f:6e:8f:f3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3
        Validity
            Not Before: Feb 12 13:49:10 2024 GMT
            Not After : Feb 10 13:54:10 2025 GMT
        Subject: CN=E4BA57C555B9192DA5A6953AF8E16F1A5309A265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:f1:b5:7d:81:1e:7b:d5:a5:a0:2d:4a:a1:
                    44:0f:f0:03:ed:55:fb:a7:59:4a:2c:44:22:0c:26:
                    34:c2:65:0e:87:8e:9a:6c:83:33:76:f6:a2:99:7f:
                    24:5f:00:df:1e:f9:4c:ec:14:6d:3a:c0:56:1c:c3:
                    a8:bc:2d:51:75:b2:e3:cb:70:ee:82:f9:8f:9c:41:
                    98:bf:c3:cd:ec:bf:51:03:ff:60:e7:a7:ad:b3:01:
                    aa:02:9d:00:64:ad:56:40:53:7a:45:8f:a2:0f:e7:
                    a4:db:c4:ca:cb:82:f8:1e:83:4c:01:a9:9f:19:ba:
                    56:92:36:d3:64:bd:df:b9:fc:8c:64:24:bc:43:1c:
                    34:78:0f:b5:a1:c8:f6:12:8d:d2:f3:5c:f8:d7:f8:
                    53:48:9b:96:1b:80:3b:21:15:4c:ee:de:61:aa:70:
                    87:df:c6:c9:fe:08:37:df:95:f4:84:5d:fa:34:4c:
                    70:e8:4f:f7:17:9b:bf:13:c5:83:a7:be:e2:fb:f9:
                    70:fb:f0:68:5a:bb:21:1d:cd:70:4b:d6:37:2f:91:
                    2c:23:d5:5a:ef:4e:4f:30:28:63:53:c3:4b:0f:93:
                    00:8b:c3:01:d5:33:c1:c6:ed:b0:af:2a:a6:96:48:
                    56:74:0c:a0:d0:3d:93:2e:39:69:47:52:c9:e0:3c:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BA:57:C5:55:B9:19:2D:A5:A6:95:3A:F8:E1:6F:1A:53:09:A2:65
            X509v3 Authority Key Identifier:
                keyid:02:F6:BC:2B:54:6E:9E:BC:68:6F:E1:C2:23:C0:CF:4F:8F:A2:4A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/34352e342e38302e302f32322d3332203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:59:45:0a:81:5a:38:2f:13:56:0e:60:83:2f:81:eb:05:
         45:65:33:50:95:bc:12:02:e7:a2:99:fe:a2:29:f3:10:6f:fc:
         ff:d7:f8:de:fa:42:08:40:ab:c8:b6:e4:60:c9:26:89:a9:25:
         6d:9e:74:ef:2b:34:e8:b1:55:ef:7b:d5:fe:1a:9d:c1:bc:77:
         2f:ca:b4:6e:22:19:1c:5a:8f:1c:e8:35:50:92:db:49:45:aa:
         64:0b:17:c1:10:65:6e:4d:57:43:c0:db:6d:6f:31:8c:ed:e4:
         aa:5b:07:3b:a3:3e:81:0f:b0:5a:80:f3:72:58:63:66:27:04:
         30:f2:45:26:63:cf:3a:9f:78:58:9e:9e:3c:fc:4a:0e:d7:ba:
         52:1e:2b:52:7c:85:db:3f:09:0d:f0:80:36:10:b4:cf:6e:80:
         b4:17:02:7c:a4:ad:d4:24:14:5a:6b:b9:31:79:21:fc:ba:59:
         f6:ed:5d:63:c1:e4:00:ca:a1:08:5c:cb:ab:98:aa:b2:cd:24:
         22:7e:90:eb:9e:75:62:d2:01:ce:1d:4b:e6:a2:f8:15:42:2f:
         ff:57:57:b7:b9:a0:ec:78:88:9d:e3:5e:e7:04:b4:09:63:1f:
         f0:07:43:e0:c2:48:d3:cf:b2:a2:cb:2a:14:59:a9:83:aa:87:
         05:86:f1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org