Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/34352e3233392e32342e302f32322d3332203d3e203533313831.roa
File:                     34352e3233392e32342e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          Xf8uQcprZL5Lvd8mz9KUTeuGjPrtzjOTSPRkErUQ99g=
Subject key identifier:   A9:D4:2B:35:DB:89:A7:B4:1A:B3:D1:27:21:52:57:89:68:52:23:A4
Certificate issuer:       /CN=427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E
Certificate serial:       26598538D4F79F1D0AF24A0ABEDCB15B49B0B510
Authority key identifier: 42:7F:A1:F0:5F:64:D5:F8:4B:B0:9B:D5:C3:A5:A3:1E:33:E8:1F:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/34352e3233392e32342e302f32322d3332203d3e203533313831.roa
Signing time:             Fri 10 Mar 2023 22:35:12 +0000
ROA not before:           Fri 10 Mar 2023 22:30:12 +0000
ROA not after:            Fri 08 Mar 2024 22:35:12 +0000
asID:                     53181
IP address blocks:        45.239.24.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:59:85:38:d4:f7:9f:1d:0a:f2:4a:0a:be:dc:b1:5b:49:b0:b5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E
        Validity
            Not Before: Mar 10 22:30:12 2023 GMT
            Not After : Mar  8 22:35:12 2024 GMT
        Subject: CN=A9D42B35DB89A7B41AB3D12721525789685223A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:c8:8a:74:bc:c3:a8:7c:a8:97:6e:3b:c9:
                    ec:33:46:38:a2:7d:a3:67:59:6f:3d:1f:7d:0c:65:
                    62:d8:e6:8e:c8:6c:c5:52:22:07:10:24:87:a8:29:
                    fd:c8:91:5c:af:ee:a5:07:58:c1:f3:87:a4:d2:a4:
                    86:73:21:b6:27:59:d2:db:86:82:29:4a:52:96:42:
                    52:12:7f:bb:a4:3b:7a:31:58:78:f7:13:36:a8:7a:
                    48:00:80:f7:2f:3e:96:7e:e6:4d:6a:d4:86:8c:f9:
                    cd:fd:a2:ec:14:f8:ce:0d:a4:f6:17:79:a1:fe:85:
                    bd:a5:1c:e7:56:45:89:9b:2b:35:0d:82:2b:67:b6:
                    52:6b:9a:40:56:9b:05:b5:b1:5c:11:d4:5e:73:88:
                    09:18:84:77:72:9d:28:65:69:94:f8:5f:89:a5:73:
                    b7:59:6d:9e:b4:06:73:88:94:5c:11:cf:04:ef:f3:
                    62:6d:b4:3d:13:0d:05:16:e1:db:7d:3c:d0:d7:ff:
                    47:87:c3:93:2a:46:6d:40:9a:4a:01:2b:ac:52:7a:
                    73:17:9c:0a:59:bf:8b:1d:b4:d0:3f:07:d2:e4:75:
                    a4:8a:26:ef:20:60:d4:cf:37:94:67:c6:73:fe:74:
                    79:b9:df:d8:ec:6d:f3:4b:9f:64:53:0c:dd:af:0f:
                    73:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D4:2B:35:DB:89:A7:B4:1A:B3:D1:27:21:52:57:89:68:52:23:A4
            X509v3 Authority Key Identifier:
                keyid:42:7F:A1:F0:5F:64:D5:F8:4B:B0:9B:D5:C3:A5:A3:1E:33:E8:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/34352e3233392e32342e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:7c:45:65:18:c7:5d:b2:21:34:e4:cd:27:13:66:3b:49:
         15:6c:19:ae:57:c7:f9:31:75:1c:b5:3b:66:de:e0:2a:3e:a5:
         9e:dc:00:de:91:81:c6:21:4b:b5:27:f9:1f:6e:3d:ef:67:5d:
         d1:a1:ac:8b:c4:d2:dc:53:a7:dd:80:b4:be:ff:96:65:35:05:
         67:df:c7:16:11:b4:d3:73:4c:1f:6e:61:e3:9d:c9:67:cd:e2:
         4c:08:06:8f:08:78:14:7a:f7:18:5b:7c:89:03:8a:69:58:05:
         39:ae:66:e1:5f:7e:11:e6:f3:ff:a2:80:68:18:6c:93:25:82:
         a8:d7:c4:2f:cd:46:22:bd:9a:da:28:c7:78:51:9d:d4:61:e6:
         3c:a1:19:9a:9b:06:48:7b:c1:b4:9e:c5:86:b5:ef:36:22:23:
         84:20:f2:0c:2a:3c:0a:45:20:a2:cc:52:b6:3c:f0:f7:14:73:
         0b:79:8f:e2:51:41:31:a4:27:58:3b:41:71:ec:b1:4d:6c:80:
         2e:71:20:b0:a5:9a:a9:7e:8f:d3:8a:3c:54:98:df:d3:07:3d:
         94:c6:d9:c4:1d:11:f1:93:a8:02:79:fe:9d:a7:ca:d5:ae:e5:
         96:02:a3:dc:75:1f:81:49:3a:6a:ec:94:2f:36:ca:9c:16:14:
         55:e6:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org