Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/34352e3138342e3138342e302f32322d3232203d3e20323639333338.roa
File:                     34352e3138342e3138342e302f32322d3232203d3e20323639333338.roa (raw, json)
Hash identifier:          Qs17GPbKWDecpubzOYXM5sfDDr4avvYI/VrrzroTJYQ=
Subject key identifier:   45:8C:AA:18:18:F1:42:25:AB:38:4F:7F:93:1E:58:BA:37:EB:55:9B
Certificate issuer:       /CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
Certificate serial:       2A0FC3FDEC7A26495543E930B37BF0D3302092F6
Authority key identifier: 28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/34352e3138342e3138342e302f32322d3232203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:05 +0000
ROA not before:           Sat 13 Apr 2024 16:11:05 +0000
ROA not after:            Sat 12 Apr 2025 16:16:05 +0000
asID:                     269338
IP address blocks:        45.184.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0f:c3:fd:ec:7a:26:49:55:43:e9:30:b3:7b:f0:d3:30:20:92:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
        Validity
            Not Before: Apr 13 16:11:05 2024 GMT
            Not After : Apr 12 16:16:05 2025 GMT
        Subject: CN=458CAA1818F14225AB384F7F931E58BA37EB559B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:4c:ae:21:03:6a:96:ef:5c:fe:80:ad:79:
                    11:f5:b4:1d:9e:21:58:c9:1a:02:9b:cb:90:10:0a:
                    b0:b5:0c:75:46:06:99:e8:60:b6:3c:e3:4c:f1:68:
                    b5:63:1b:36:76:56:61:ac:bc:8a:dc:76:03:0e:52:
                    48:2e:63:1e:ac:21:0f:33:5e:32:f0:42:90:8a:b0:
                    0d:8c:94:2c:09:43:99:7e:91:15:48:e1:58:2f:a0:
                    3d:aa:4e:a4:c7:ee:53:0d:47:92:ad:87:0a:e4:c7:
                    23:0d:c6:f7:61:cb:d7:3c:a4:05:fe:1e:fe:b0:d9:
                    89:39:c7:93:2e:d4:c8:35:13:c7:af:be:3b:4a:30:
                    7c:26:0c:85:d8:5a:38:64:74:2e:54:7f:24:14:48:
                    1c:77:65:f2:8b:5a:07:22:75:87:06:ab:fa:f4:2c:
                    40:2f:f0:99:18:60:1b:f9:60:bf:a8:91:be:93:94:
                    8e:8e:bc:3f:43:72:17:1b:80:f4:af:8a:b4:93:e1:
                    21:88:e4:2a:a8:1a:a7:85:63:ea:22:b8:a6:b0:42:
                    b3:15:42:0b:63:42:91:27:ab:06:83:3d:c2:e8:8b:
                    ef:4a:cd:78:51:aa:2d:ca:19:af:4b:f2:2e:58:70:
                    1b:61:33:de:30:49:4b:e2:72:7a:e2:eb:51:94:33:
                    34:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8C:AA:18:18:F1:42:25:AB:38:4F:7F:93:1E:58:BA:37:EB:55:9B
            X509v3 Authority Key Identifier:
                keyid:28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/28EE46D4F099B24B9DA8C80842FED277ABB924AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/34352e3138342e3138342e302f32322d3232203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:74:98:ee:52:3a:a0:64:46:c0:12:dd:53:21:0b:09:18:10:
         92:60:e7:e9:5b:f9:b5:25:96:78:9b:0e:c0:5f:9b:11:a2:5e:
         23:a2:19:4d:48:e6:2e:18:8a:d3:ab:0d:1e:43:dc:f4:72:30:
         02:8c:33:6f:45:47:71:f1:48:fd:f4:e4:13:c8:ed:a0:17:70:
         15:00:ee:49:93:66:28:73:b8:8b:81:87:56:2e:c2:10:2e:9c:
         4d:99:36:3e:ce:17:8d:99:ee:da:e9:bc:a0:8d:91:a5:7a:e4:
         63:69:a5:2e:b7:32:83:b8:7c:c5:b2:40:ef:32:1c:39:f5:9e:
         83:aa:15:a8:ab:39:39:55:28:b6:e8:0a:82:2a:ec:c9:78:bc:
         7d:36:75:2a:f2:41:2a:62:1b:ed:80:76:8f:69:53:d4:02:f5:
         b8:ce:bf:71:6b:fe:95:e6:c3:73:88:05:64:84:2e:c1:5b:6b:
         ab:9a:cb:ce:5c:21:0a:e1:31:dc:06:56:cf:ee:e5:c1:0b:8c:
         dc:6f:bb:3f:38:47:e9:d2:8f:27:30:5e:b4:a5:91:1e:6c:d5:
         c5:72:b1:39:5e:0f:07:9f:1a:91:dd:8a:cf:9b:28:96:c4:bf:
         1e:2b:47:5a:dd:fe:b6:3a:ca:01:f5:11:b2:fb:21:11:00:dd:
         f3:f1:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org