Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa
File:                     34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa (raw, json)
Hash identifier:          I/wftt5X/eBK+KRudeBggtDt1AZS9dhukZfpK1hTmiM=
Subject key identifier:   45:AE:92:88:83:F3:FE:D3:EB:AD:3B:08:08:88:89:E0:29:6B:18:16
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       3460B7DB576A1D87C70679B7C1D4BCB08DAE392F
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:05:23 +0000
ROA not before:           Fri 18 Aug 2023 11:00:23 +0000
ROA not after:            Fri 16 Aug 2024 11:05:23 +0000
asID:                     263347
IP address blocks:        45.162.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:60:b7:db:57:6a:1d:87:c7:06:79:b7:c1:d4:bc:b0:8d:ae:39:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 11:00:23 2023 GMT
            Not After : Aug 16 11:05:23 2024 GMT
        Subject: CN=45AE928883F3FED3EBAD3B08088889E0296B1816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:13:15:6b:c5:87:8d:24:59:e7:7c:b6:d9:
                    25:51:c0:af:16:3c:f5:b2:dc:97:3e:c5:e0:ab:2a:
                    01:8f:af:97:c2:fc:c1:01:9b:12:33:3b:04:5c:7f:
                    ab:8d:79:43:2b:5f:75:8c:71:b0:52:76:b4:de:c9:
                    fb:61:83:bc:6c:b3:df:b5:6f:66:b5:b2:c5:62:e2:
                    5e:82:0d:3b:49:08:c5:49:1c:cd:69:58:90:a1:2d:
                    c7:09:8a:eb:84:9f:15:05:c6:ab:79:9b:b2:89:07:
                    6d:cb:74:56:a1:50:1e:73:d5:b0:96:20:58:a2:31:
                    b7:e8:75:39:35:c0:e6:dd:3c:22:09:90:c6:dd:ef:
                    b1:3a:5b:16:1c:96:91:f6:c9:02:5d:65:21:6e:87:
                    41:52:05:c0:90:b5:96:e2:d2:13:eb:be:5a:4c:4a:
                    31:5c:8a:51:45:7c:84:1d:2c:b1:4a:80:02:49:23:
                    f5:56:8c:9c:97:f2:30:76:f5:4e:c1:a3:f4:15:6e:
                    53:28:69:5e:22:ab:b7:62:6d:40:bc:64:28:96:20:
                    49:87:80:c3:ea:ad:08:58:cc:31:df:b8:43:ef:35:
                    4d:cd:0b:d8:46:b9:b7:17:a0:7d:dd:1e:33:9d:06:
                    a9:8a:79:0d:86:35:80:f7:d8:67:e8:bb:5d:8b:35:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AE:92:88:83:F3:FE:D3:EB:AD:3B:08:08:88:89:E0:29:6B:18:16
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:d0:74:04:ab:f7:52:cb:bc:70:41:4d:a5:67:5a:62:d3:39:
         1d:f1:4e:46:b0:6f:3b:33:45:d7:92:76:db:3a:e2:0b:41:6c:
         4f:33:2c:4d:ee:95:ac:3c:a7:43:48:a7:13:dc:f1:2a:16:ed:
         00:e9:dc:e6:4e:da:db:c6:22:89:12:6e:9d:2d:9f:c1:bb:ba:
         36:bb:ed:37:96:5b:c1:79:ca:28:60:bf:12:60:c4:86:0f:b6:
         bf:22:bd:9c:55:69:d7:bb:86:5a:9b:96:e6:bd:82:37:d9:dd:
         58:d8:47:cd:d0:51:12:b5:86:3f:be:38:26:35:b1:1c:0d:d4:
         c7:77:55:16:e7:51:af:cd:75:4d:c3:54:56:8f:b4:71:39:62:
         ee:b6:55:97:af:06:62:12:1e:99:c6:19:2a:da:07:3b:7b:bf:
         81:5b:08:09:86:5c:ce:fb:55:42:63:b0:c2:20:8a:17:66:96:
         e5:de:3e:c4:14:72:aa:25:15:42:94:3f:24:ac:a8:39:10:15:
         cc:b4:a3:d5:d5:fe:31:f0:20:2c:43:17:d5:88:ac:35:78:da:
         d3:01:92:ca:bb:7a:69:da:9f:76:e7:77:6d:1a:ad:ea:cf:d9:
         c0:05:20:01:3e:36:43:95:7b:60:e3:ec:8c:54:d8:a6:eb:e5:
         a5:23:9d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org