Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa
File:                     34352e3233352e34342e302f32322d3234203d3e20323638323030.roa (raw, json)
Hash identifier:          nBRZH6QrtwAMGVYPR+MiGRCho3via9K+OEiRtHaxbCg=
Subject key identifier:   41:1D:7A:13:75:FD:A2:8D:29:3B:25:1F:9C:97:12:F9:55:7F:24:E6
Certificate issuer:       /CN=6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84
Certificate serial:       03A1691D82AAAEE1CBCA202209D4A1A050C133F9
Authority key identifier: 6F:3C:B5:D7:68:70:1F:AF:EA:70:64:BE:F7:BD:95:14:1D:F9:CA:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa
Signing time:             Fri 27 Oct 2023 13:42:09 +0000
ROA not before:           Fri 27 Oct 2023 13:37:09 +0000
ROA not after:            Fri 25 Oct 2024 13:42:09 +0000
asID:                     268200
IP address blocks:        45.235.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a1:69:1d:82:aa:ae:e1:cb:ca:20:22:09:d4:a1:a0:50:c1:33:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84
        Validity
            Not Before: Oct 27 13:37:09 2023 GMT
            Not After : Oct 25 13:42:09 2024 GMT
        Subject: CN=411D7A1375FDA28D293B251F9C9712F9557F24E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:94:91:6d:68:b7:59:dd:51:54:3c:bf:80:
                    3d:fc:fb:82:5f:73:1a:bb:10:75:2f:5a:1c:fd:20:
                    31:de:cd:15:87:a8:6f:b4:a9:48:47:db:58:29:71:
                    c8:65:a9:4b:80:1a:69:64:9f:44:78:bb:e8:68:d8:
                    e9:db:51:83:f0:d8:31:04:9d:49:72:54:ff:d9:bd:
                    93:18:00:4b:52:a0:62:23:2d:47:b4:cf:f0:98:a1:
                    52:87:50:d7:c1:01:08:a3:52:05:95:ec:e0:d6:a1:
                    e5:ca:ea:13:38:21:1a:62:5f:73:2d:c4:27:a4:f5:
                    91:3e:5d:a3:c2:fe:41:57:b7:60:52:e2:10:b1:9b:
                    db:04:93:67:5a:48:78:79:58:dd:70:f9:76:ed:09:
                    dd:a8:a2:30:8e:89:80:24:9a:8e:cf:1c:03:a7:6e:
                    bf:07:3c:5f:11:14:dd:8b:21:20:e6:8e:fe:4d:26:
                    6e:2c:03:67:e6:cb:d7:fe:ec:c9:62:46:a1:c6:42:
                    b8:44:71:54:ef:f4:eb:03:be:23:e0:a9:0d:25:b5:
                    28:85:bf:6e:db:f9:4c:0e:cb:ef:55:b2:ae:26:b8:
                    16:05:60:da:68:17:cc:28:de:2a:3d:7f:82:c5:49:
                    e0:81:97:10:ee:c8:2d:75:43:4e:7f:06:41:b8:7f:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:7A:13:75:FD:A2:8D:29:3B:25:1F:9C:97:12:F9:55:7F:24:E6
            X509v3 Authority Key Identifier:
                keyid:6F:3C:B5:D7:68:70:1F:AF:EA:70:64:BE:F7:BD:95:14:1D:F9:CA:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:ad:d3:59:3a:2f:5e:d3:5c:07:c5:82:62:49:06:2a:87:a5:
         33:8a:90:c1:e4:d4:fc:27:ca:c9:11:1c:17:2e:3c:9a:e0:db:
         89:65:a1:69:99:b7:dd:9c:4b:85:f8:e2:01:af:41:e0:f2:ce:
         ff:d4:d8:25:bd:2e:a9:32:07:cc:4c:b9:1b:aa:9a:33:5d:62:
         aa:d2:ad:b0:c4:1c:9e:f4:07:ff:93:01:8a:a8:f7:c6:f1:ea:
         ea:ac:31:c9:3b:ac:3b:c2:1e:42:59:46:b9:ef:af:fc:15:cf:
         8c:fc:de:23:7f:eb:85:c2:b0:22:ea:bc:96:9f:a0:0f:0a:a8:
         b1:0f:39:78:cb:66:9c:c4:4c:66:e4:59:37:29:0e:1e:e5:c6:
         ab:fa:20:e1:d4:8c:24:a0:35:51:f8:01:fb:62:5d:37:20:5a:
         8f:00:fa:5a:13:ad:34:87:3b:3e:ea:da:b9:00:de:01:87:0d:
         c8:ff:7e:08:49:b0:f0:52:51:d4:03:a4:66:ed:d9:76:1e:2e:
         af:8b:29:c8:91:68:b1:5f:fa:ea:74:e0:ba:03:06:b7:a4:bf:
         fb:f5:45:09:e1:8a:c5:76:f0:12:0b:40:11:c7:35:b7:cf:34:
         2b:c9:89:3c:89:aa:62:4e:30:9b:11:cc:a4:26:fb:42:d0:da:
         f1:c9:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org