Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33382e302f32332d3234203d3e20323636313532.roa
File:                     34352e362e33382e302f32332d3234203d3e20323636313532.roa (raw, json)
Hash identifier:          9lSkA9HTiZVG7twUH2ly9dchbHwnIZV9m/PJafvBKA4=
Subject key identifier:   7E:56:DD:60:2E:F2:9A:77:7D:05:28:77:11:04:25:5C:88:2F:7C:63
Certificate issuer:       /CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
Certificate serial:       67E84E2BF217E9E1BB77FBE9CCD8F69393E18CE1
Authority key identifier: 43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33382e302f32332d3234203d3e20323636313532.roa
Signing time:             Mon 14 Nov 2022 21:45:10 +0000
ROA not before:           Mon 14 Nov 2022 21:40:10 +0000
ROA not after:            Mon 13 Nov 2023 21:45:10 +0000
asID:                     266152
IP address blocks:        45.6.38.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e8:4e:2b:f2:17:e9:e1:bb:77:fb:e9:cc:d8:f6:93:93:e1:8c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
        Validity
            Not Before: Nov 14 21:40:10 2022 GMT
            Not After : Nov 13 21:45:10 2023 GMT
        Subject: CN=7E56DD602EF29A777D0528771104255C882F7C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:69:c5:08:c9:1d:f4:95:eb:34:21:99:42:f4:
                    70:db:3a:ec:91:ae:c1:04:d3:95:db:fa:88:4d:a5:
                    cf:dd:ea:be:86:ef:8f:7b:a2:44:2d:80:f8:be:f0:
                    de:0d:82:bc:ad:87:84:d4:b1:cf:6b:cc:42:68:dd:
                    45:be:77:38:90:e8:c3:e5:50:08:9c:d8:59:56:27:
                    32:71:f2:0b:64:dc:54:3e:3e:01:c7:d9:41:44:d8:
                    5a:02:d8:60:ae:37:55:33:7e:30:1e:ae:de:55:9d:
                    fd:7e:01:fb:95:57:ba:8b:5d:ed:13:91:af:34:cd:
                    b8:8e:3f:20:b9:1e:d9:3c:ec:bd:35:de:dd:45:61:
                    3a:c3:92:23:eb:fd:33:43:a0:e8:92:55:a3:5c:c6:
                    cd:d7:59:82:46:57:48:0f:87:09:7f:f1:54:d4:64:
                    72:97:5d:b1:9d:87:39:aa:0f:76:42:7c:53:de:a4:
                    69:5c:7c:89:7f:d1:77:58:3f:96:25:ed:37:c3:3c:
                    ff:bf:ee:30:16:4e:49:ef:ad:7a:a9:d9:c6:3d:30:
                    ba:81:08:1f:c0:70:9d:d7:cf:2e:59:c3:1c:fd:68:
                    fc:14:f0:d6:8a:e3:fb:c5:56:cb:63:20:2b:93:7e:
                    e0:5f:06:b2:8a:81:26:e1:d6:00:56:f4:b4:b8:e3:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:DD:60:2E:F2:9A:77:7D:05:28:77:11:04:25:5C:88:2F:7C:63
            X509v3 Authority Key Identifier:
                keyid:43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33382e302f32332d3234203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:39:24:e1:a1:ac:94:13:06:df:b5:99:15:20:24:ee:c8:
         d0:8f:0a:89:a1:20:1e:4e:10:1c:ac:d0:5a:56:bf:a2:b4:d3:
         a2:0e:16:d6:c3:d6:43:a0:0a:ca:9a:d2:e2:38:9e:c8:53:ab:
         dd:b6:d5:60:18:dc:61:fc:d8:ea:3a:f1:d7:a7:34:30:74:a1:
         9c:66:02:1f:62:04:66:4c:74:6d:6f:e7:35:b9:ea:43:99:47:
         63:31:cf:4a:29:ef:61:84:a9:bb:72:56:7c:14:b9:2f:3c:45:
         d1:37:bb:43:a6:33:e9:f7:fa:27:ba:cb:28:7f:63:81:55:35:
         ad:1c:66:13:7f:58:77:42:32:d1:de:0b:d4:5d:40:45:af:b7:
         63:31:ae:0c:a1:97:5d:6e:92:e4:48:3d:87:7f:ba:76:16:31:
         c6:2e:96:da:84:46:1d:ae:ef:7e:c1:86:8c:ad:aa:56:ab:41:
         41:5e:7a:d7:32:a9:d5:3e:b5:a4:94:46:84:ad:fe:ba:f5:ed:
         1d:45:56:15:eb:75:c8:86:b3:a1:c3:6c:c4:62:f1:2e:6f:86:
         bf:41:08:09:60:83:8e:08:e5:ef:9c:31:24:22:d3:21:f2:d8:
         c6:8d:32:1e:e7:a8:8c:78:d3:38:cf:f8:03:01:04:d7:64:ce:
         7a:1a:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org