Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa
File:                     34352e3232392e32302e302f32322d3232203d3e20323637303931.roa (raw, json)
Hash identifier:          5hcsveObdnOMWHxc/lsQ2nP+31XsmqVqUJv05bQOKNA=
Subject key identifier:   92:2B:E3:28:09:0F:C8:6D:9D:DF:35:5B:B7:84:86:35:8A:CF:EA:20
Certificate issuer:       /CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
Certificate serial:       041DAB31FE756D060BC19A24ECEFFB8E15337260
Authority key identifier: D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa
Signing time:             Thu 22 Feb 2024 07:05:51 +0000
ROA not before:           Thu 22 Feb 2024 07:00:51 +0000
ROA not after:            Thu 20 Feb 2025 07:05:51 +0000
asID:                     267091
IP address blocks:        45.229.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1d:ab:31:fe:75:6d:06:0b:c1:9a:24:ec:ef:fb:8e:15:33:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
        Validity
            Not Before: Feb 22 07:00:51 2024 GMT
            Not After : Feb 20 07:05:51 2025 GMT
        Subject: CN=922BE328090FC86D9DDF355BB78486358ACFEA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:3f:78:cb:40:e5:dd:4e:31:d9:80:7c:7c:
                    b5:e8:75:aa:ee:bd:a6:c4:6c:46:7b:9e:a1:c0:01:
                    33:c2:1b:2a:ca:15:f4:f7:f8:60:30:69:d9:95:81:
                    cd:85:21:53:3f:de:56:3c:b9:ec:37:98:fe:d3:f5:
                    4d:a5:e1:9f:28:c8:5a:42:25:01:7e:15:36:e9:3b:
                    ed:20:24:3b:55:04:de:43:ac:3a:cf:44:84:3a:d1:
                    e0:5a:f3:d6:52:1c:72:b0:7b:a8:aa:10:dd:cb:67:
                    36:6d:a9:f1:83:6f:d4:01:25:b2:a6:76:65:72:d4:
                    c1:f2:78:a5:71:a9:b0:d2:c1:b1:6f:80:98:33:51:
                    97:0b:a5:c1:c4:7f:42:09:b6:6c:8b:9c:d8:8c:14:
                    51:da:0d:60:ae:39:c5:ad:b2:ab:ce:17:ea:9d:14:
                    19:c3:3e:ec:dd:ad:d6:18:5e:84:d4:59:fd:89:06:
                    f5:97:73:35:9f:ff:f4:65:33:d2:c5:b1:a6:77:13:
                    2e:48:f7:29:cd:41:a6:2f:fd:a2:6a:2d:1e:43:41:
                    4c:96:57:85:6b:d6:3e:10:f9:7e:50:68:13:85:5c:
                    bd:21:78:34:26:d8:e9:9f:34:18:14:36:b4:ed:cb:
                    4a:f5:b1:0f:7f:d2:49:82:0f:73:7f:82:b7:f9:48:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2B:E3:28:09:0F:C8:6D:9D:DF:35:5B:B7:84:86:35:8A:CF:EA:20
            X509v3 Authority Key Identifier:
                keyid:D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:ca:b8:ca:ce:3c:91:20:09:b4:2b:73:b3:76:50:71:f8:7c:
         66:07:09:6f:ca:60:ed:f3:f5:e7:02:06:94:c3:bc:07:4c:dd:
         00:37:20:43:5c:fe:95:b5:f0:ee:10:1f:36:8c:c2:f9:06:b3:
         4e:aa:86:7a:bc:95:98:1a:8d:d8:e3:a1:92:4f:18:c4:88:98:
         b8:6e:f6:8d:7e:27:16:4d:6b:17:29:4f:bd:b3:a7:a6:10:1c:
         2a:b6:72:a1:da:02:da:b6:2f:d4:5f:d5:37:f6:a3:7d:b9:49:
         53:13:50:8c:63:39:55:77:3c:2e:9b:70:b1:d3:02:da:71:44:
         a8:fc:84:10:39:c6:60:34:2f:85:9e:12:24:c7:42:ed:0c:32:
         9f:59:19:1c:75:b3:cf:bb:6f:58:09:21:76:05:db:48:ed:ee:
         79:cd:db:68:f4:6a:52:f8:02:28:cc:90:2c:fa:b6:de:f9:08:
         af:38:24:c6:ee:52:a6:23:20:3f:e5:8b:b8:f6:83:51:10:92:
         de:63:74:0c:e6:76:37:eb:4d:a9:c8:b9:fc:4d:ca:35:ec:04:
         67:c4:7a:7c:71:96:2a:b4:28:82:f7:66:d3:8d:aa:d2:80:b8:
         28:65:81:0a:81:3a:5b:3d:6b:a0:87:be:39:78:92:ac:36:3b:
         ff:a0:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org