Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa
File:                     34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa (raw, json)
Hash identifier:          O79h39HyOqeVzuFrErJ5+YExgAulyTSo1V5eC1k6rks=
Subject key identifier:   AA:53:F8:40:3F:21:06:11:23:73:B0:EB:8A:FE:3E:15:D7:34:44:E7
Certificate issuer:       /CN=2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0
Certificate serial:       0A3F26647DF000EFF13221BECEA2EFEEACBFDA00
Authority key identifier: 2D:F3:3D:7B:F9:AA:7A:D1:BF:99:8B:F3:42:E6:D4:16:96:7E:57:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa
Signing time:             Thu 15 Feb 2024 16:54:21 +0000
ROA not before:           Thu 15 Feb 2024 16:49:21 +0000
ROA not after:            Thu 13 Feb 2025 16:54:21 +0000
asID:                     268798
IP address blocks:        45.171.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3f:26:64:7d:f0:00:ef:f1:32:21:be:ce:a2:ef:ee:ac:bf:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0
        Validity
            Not Before: Feb 15 16:49:21 2024 GMT
            Not After : Feb 13 16:54:21 2025 GMT
        Subject: CN=AA53F8403F2106112373B0EB8AFE3E15D73444E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:1c:27:bb:0a:58:c7:02:b2:10:ec:85:cc:
                    bc:29:e8:91:0a:30:bd:fe:d7:3e:ff:35:42:02:9d:
                    97:0b:64:5a:de:71:75:83:e5:24:45:5f:71:1d:c8:
                    73:9b:f2:a2:fb:da:e2:05:68:72:e2:a4:b2:f7:08:
                    d7:19:75:bf:7d:74:76:dd:f7:07:e7:71:76:bd:53:
                    ff:26:9e:d5:51:4e:fb:5d:8d:62:ec:1d:0c:85:8e:
                    14:c9:94:54:fe:0d:01:3d:ee:50:4f:bb:0e:4b:bc:
                    1f:4c:81:ad:d7:84:1e:96:32:25:0e:02:7f:25:47:
                    fa:86:80:c3:77:61:48:06:f5:a0:8a:96:fb:a6:8c:
                    4b:9d:15:64:b8:72:4f:97:d1:0d:f5:82:32:00:74:
                    65:6b:4c:20:6b:a6:73:e1:99:d8:8a:d0:7e:c5:ab:
                    62:7c:90:ee:f1:48:3e:d9:81:c1:7a:fe:65:14:68:
                    21:8d:82:31:c2:e0:57:2c:f6:eb:34:d5:39:d5:fc:
                    e1:0a:a3:06:36:e2:4e:57:0b:d8:24:10:6e:21:13:
                    99:ad:65:e6:82:39:9b:1d:31:2c:cf:a6:43:a4:45:
                    6c:7e:dc:84:e4:1e:1e:94:d7:cb:a8:f9:8e:46:5c:
                    c8:31:32:e6:a6:30:d3:65:3f:5b:56:b7:c6:ef:55:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:53:F8:40:3F:21:06:11:23:73:B0:EB:8A:FE:3E:15:D7:34:44:E7
            X509v3 Authority Key Identifier:
                keyid:2D:F3:3D:7B:F9:AA:7A:D1:BF:99:8B:F3:42:E6:D4:16:96:7E:57:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:5a:98:db:9c:86:4c:a7:03:32:f0:e4:68:74:04:52:02:12:
         2b:cd:92:40:54:f2:df:da:a4:71:e4:b4:fe:8e:c6:e9:4d:f1:
         e1:46:3e:0d:55:3d:7c:23:dc:d3:52:6c:aa:4d:75:5f:ce:34:
         7d:f4:07:f2:d1:b4:61:46:df:37:3e:cd:01:67:98:e1:f0:4f:
         75:8b:26:83:1d:4d:e5:31:eb:7d:82:8b:1c:ce:92:37:97:fd:
         16:21:da:4b:fd:5d:3d:7e:b3:56:86:e7:b1:a1:9c:c7:08:33:
         c8:bb:c4:71:c2:b7:0b:9a:3e:b5:59:e8:0b:50:da:45:83:11:
         f2:a9:20:1e:44:4c:83:4c:ef:f9:af:67:f8:68:69:ee:64:a7:
         6f:77:24:54:24:10:5e:e1:f2:79:aa:b5:96:db:cb:13:a2:fc:
         d3:da:1d:39:5b:17:7c:86:8c:28:cb:d5:25:0f:68:99:94:e0:
         f5:a2:7f:dd:f9:5e:55:82:21:d7:c9:52:aa:ae:5c:79:c9:d9:
         23:ef:20:8d:1e:14:30:95:3e:4d:17:52:b8:78:65:72:b2:38:
         64:22:ac:74:8f:67:8a:b2:4b:59:56:bc:55:0f:a4:86:8d:ca:
         aa:ec:9e:c1:fd:a5:e7:ed:e1:38:78:0b:75:72:7f:4b:b9:6c:
         5a:04:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org