Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33342e302f32332d3233203d3e20323638303438.roa
File:                     34352e3136382e33342e302f32332d3233203d3e20323638303438.roa (raw, json)
Hash identifier:          iLNnIuadXAqf+JlgXwfXVQQPT9sRemE8lf3OyKU8ejs=
Subject key identifier:   0C:7A:A2:E1:52:BA:92:FE:69:25:53:6C:5C:B0:F1:0C:CE:C6:31:C6
Certificate issuer:       /CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Certificate serial:       5D206940FAE68215207AA1E20A2AFE508A201EEF
Authority key identifier: 31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33342e302f32332d3233203d3e20323638303438.roa
Signing time:             Mon 24 Apr 2023 23:55:00 +0000
ROA not before:           Mon 24 Apr 2023 23:50:00 +0000
ROA not after:            Mon 22 Apr 2024 23:55:00 +0000
asID:                     268048
IP address blocks:        45.168.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:20:69:40:fa:e6:82:15:20:7a:a1:e2:0a:2a:fe:50:8a:20:1e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
        Validity
            Not Before: Apr 24 23:50:00 2023 GMT
            Not After : Apr 22 23:55:00 2024 GMT
        Subject: CN=0C7AA2E152BA92FE6925536C5CB0F10CCEC631C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:b8:88:0d:ee:b6:1a:5b:0f:92:12:c3:07:
                    c2:8e:cb:9a:63:e1:20:e0:7c:11:cb:c1:88:42:5e:
                    22:23:b6:96:79:b8:3c:e0:2d:f6:91:00:b4:50:fe:
                    16:cd:57:61:b1:46:ab:96:40:08:a8:a7:17:0b:eb:
                    98:52:90:80:4d:aa:41:57:d1:97:c0:01:51:90:79:
                    13:1b:8b:c5:bd:08:06:34:37:3d:46:ec:3a:51:c8:
                    35:54:3b:41:cd:2f:15:96:2b:5d:1b:fc:a4:fa:c1:
                    12:55:ca:b4:5c:a2:70:e3:83:d6:58:96:3d:34:ab:
                    30:6e:c3:47:75:61:f4:6e:b7:9f:78:39:e5:b7:da:
                    5d:e4:ce:cc:0c:2c:8f:c4:88:2c:db:a9:6a:1a:f8:
                    06:de:50:f3:d5:51:55:1b:27:0d:3f:7a:1c:8c:b5:
                    a5:aa:39:50:e5:ec:6c:9a:12:a5:c2:4a:65:17:ae:
                    b3:f3:8c:b2:02:54:70:d8:6d:e0:25:f7:51:2e:43:
                    09:92:66:6a:9c:e9:d4:76:3c:b1:d0:c6:65:11:da:
                    68:c9:73:6a:98:fb:b9:fb:11:0c:bb:e4:58:8d:cb:
                    dd:57:cf:8e:1c:27:9e:d2:de:fe:83:46:78:aa:bd:
                    9d:7d:08:4f:c1:70:4b:46:1a:66:6c:0c:62:f1:50:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7A:A2:E1:52:BA:92:FE:69:25:53:6C:5C:B0:F1:0C:CE:C6:31:C6
            X509v3 Authority Key Identifier:
                keyid:31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33342e302f32332d3233203d3e20323638303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:c1:ae:46:6e:79:5e:6a:bb:0e:7b:50:cd:02:02:83:fc:
         81:58:57:01:9e:a8:20:94:db:a5:51:76:3d:93:53:d9:7b:74:
         66:81:4d:58:f7:4c:52:ba:18:ec:7a:4d:7f:fc:a9:81:cd:a2:
         81:2b:d2:77:b9:6c:ab:a3:f0:64:28:06:33:e6:3c:ad:d8:f0:
         41:6b:54:35:81:55:d1:39:58:70:37:bb:49:f5:b8:08:0d:7b:
         02:91:3f:79:0f:ee:41:5f:12:4f:08:16:0a:f3:f5:25:36:cd:
         35:1d:2e:62:46:f8:71:0f:e8:76:b1:7c:40:8f:05:b6:6e:b6:
         c5:17:d0:a3:3b:d1:bd:b6:07:5a:db:a8:72:c1:bf:f8:63:ba:
         1f:5a:e5:7d:02:73:01:38:db:19:b2:a9:ea:32:5c:ee:17:2f:
         26:9d:12:10:77:96:5e:56:35:7a:d1:b8:bb:d1:7c:31:dd:1e:
         a9:6f:e1:ad:c4:8e:55:b4:e7:39:57:a7:9e:f9:e8:93:9d:c4:
         2d:e0:31:81:91:d4:3f:52:2d:08:75:7b:81:6a:ee:64:b5:68:
         8d:1c:78:29:17:fa:d4:7b:9a:6e:d0:dd:7b:98:96:99:46:d8:
         5a:8a:d1:74:c6:59:99:9e:35:34:4e:e2:03:6f:e5:34:d6:87:
         97:63:f6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org