Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139382e302f32332d3233203d3e20323637333935.roa
File:                     34352e3233332e3139382e302f32332d3233203d3e20323637333935.roa (raw, json)
Hash identifier:          k3ND9DGSeiYmD/IMMoaKjm58ZTzWF3+gdhuMn493rvQ=
Subject key identifier:   CC:48:2B:66:8D:D9:E8:98:BA:FA:1B:82:68:0A:01:53:76:8A:30:67
Certificate issuer:       /CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Certificate serial:       722D8712CBB11F8AA2F539172CCE2D663EFA0285
Authority key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139382e302f32332d3233203d3e20323637333935.roa
Signing time:             Fri 23 Aug 2024 19:56:49 +0000
ROA not before:           Fri 23 Aug 2024 19:51:49 +0000
ROA not after:            Fri 22 Aug 2025 19:56:49 +0000
asID:                     267395
IP address blocks:        45.233.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2d:87:12:cb:b1:1f:8a:a2:f5:39:17:2c:ce:2d:66:3e:fa:02:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
        Validity
            Not Before: Aug 23 19:51:49 2024 GMT
            Not After : Aug 22 19:56:49 2025 GMT
        Subject: CN=CC482B668DD9E898BAFA1B82680A0153768A3067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:ff:6a:2d:01:0e:10:d7:34:8c:3a:c1:28:
                    18:d6:25:d6:1a:03:0c:c2:01:0f:f6:80:26:b1:c6:
                    4a:5d:86:18:22:cb:35:61:03:63:a8:2d:ed:2c:6d:
                    33:d0:bb:0e:9c:4a:e0:c9:ba:df:87:fb:b5:33:41:
                    11:ec:a3:45:02:99:50:38:a0:30:74:d4:1c:cb:ec:
                    08:17:c4:cb:21:d0:d0:42:f0:38:b6:43:4b:e8:e6:
                    52:fc:04:4b:bc:c8:2c:ee:0a:d7:ca:51:1b:51:ce:
                    7d:41:2f:4b:df:94:40:98:66:33:19:a6:31:fe:59:
                    12:64:f3:7c:0e:29:cf:d0:86:aa:eb:2f:47:83:e7:
                    eb:72:86:a6:6d:9e:24:ad:65:4f:d8:d8:ce:09:22:
                    4e:cc:3f:a8:00:66:47:e9:64:3d:80:3a:b8:59:3c:
                    ff:ef:df:83:d5:04:a1:47:14:5a:18:e8:57:3b:ca:
                    e0:7f:0a:44:55:ca:08:5b:3e:97:75:7b:6e:fd:8e:
                    ef:f9:ee:34:18:2c:15:e3:b0:dc:d9:f8:31:50:26:
                    c5:98:73:17:e0:df:11:3a:ce:88:cb:3a:0e:46:7e:
                    6e:68:8f:87:26:ee:c4:22:1d:53:e5:fc:ea:1d:c5:
                    07:a4:f7:ea:a5:66:71:4f:f3:fb:68:e2:96:ea:4e:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:48:2B:66:8D:D9:E8:98:BA:FA:1B:82:68:0A:01:53:76:8A:30:67
            X509v3 Authority Key Identifier:
                keyid:89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139382e302f32332d3233203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:9b:19:f9:7b:e2:53:e0:d7:fe:b7:40:a5:39:ab:e6:f9:c4:
         d0:01:6d:f6:09:5e:2a:39:72:64:22:d9:18:2d:76:5a:98:4d:
         79:8b:a5:6a:2b:f6:15:58:7b:f4:51:ee:5d:ac:1b:28:41:89:
         75:f2:51:f4:67:e6:11:fb:41:c4:3c:1c:55:bd:75:f8:3e:e3:
         50:36:77:df:07:f2:4c:b0:8a:48:06:c4:2a:16:10:50:53:57:
         61:a4:48:50:15:b4:67:ef:a5:0f:4a:fd:2e:44:0f:62:d1:e0:
         5b:30:63:06:84:c1:ab:d5:c6:fb:70:49:69:59:c6:bf:cd:70:
         79:9e:a0:e6:5b:bf:07:53:d1:35:49:94:2f:ea:eb:87:79:ad:
         2d:19:c5:13:ea:29:c7:7c:7b:db:d8:0b:98:d3:21:f1:7f:bb:
         e1:77:cd:8e:d9:15:71:29:48:54:53:9b:6e:63:a7:dd:cd:60:
         f4:86:ff:cc:28:e0:ea:e0:81:86:c1:b0:9e:61:e4:20:07:9d:
         37:8d:be:dc:b8:bc:5c:ec:6e:2a:e8:3f:86:96:b9:a3:50:01:
         66:97:f8:e0:d0:a6:c6:e0:16:57:ee:91:1d:9e:6d:7d:bc:50:
         18:99:62:23:9e:eb:cd:cc:ac:4e:59:4b:de:91:26:8a:81:7f:
         60:a5:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:31:16 2024 by rpki-client on console-ams.rpki-client.org