Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/34352e3137342e3133352e302f32342d3332203d3e203238333239.roa
File:                     34352e3137342e3133352e302f32342d3332203d3e203238333239.roa (raw, json)
Hash identifier:          NxXUf2dkFPF4l6M+MrX8PKjNQOg+3PVqr8PmwGlzleI=
Subject key identifier:   21:01:1C:E1:66:11:F3:5C:E0:B1:1E:CF:F1:7E:52:2A:9C:F2:14:05
Certificate issuer:       /CN=6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E
Certificate serial:       701429801458A38468A4C874FB907D8ED3D8075A
Authority key identifier: 69:44:C5:5B:F9:B2:E6:46:89:5F:4A:0B:34:0F:DB:CB:1A:D4:B6:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/34352e3137342e3133352e302f32342d3332203d3e203238333239.roa
Signing time:             Tue 16 Jan 2024 16:00:00 +0000
ROA not before:           Tue 16 Jan 2024 15:55:00 +0000
ROA not after:            Thu 16 Jan 2025 16:00:00 +0000
asID:                     28329
IP address blocks:        45.174.135.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:14:29:80:14:58:a3:84:68:a4:c8:74:fb:90:7d:8e:d3:d8:07:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E
        Validity
            Not Before: Jan 16 15:55:00 2024 GMT
            Not After : Jan 16 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:e9:a9:9d:db:15:e3:ec:70:ec:54:ac:38:
                    3a:57:f1:11:d2:ef:e8:83:f3:a7:90:23:1a:b8:4e:
                    08:e3:64:a0:7c:d7:2a:50:ef:72:e3:78:d5:a8:54:
                    f4:e4:00:86:22:4e:29:44:76:2a:aa:96:29:6b:82:
                    11:63:7d:f5:5c:cc:6b:2c:54:9b:ed:e1:62:b5:27:
                    be:d8:4f:6f:ca:56:af:97:3b:1f:84:f2:83:55:9a:
                    c8:6f:61:52:45:5b:73:33:08:7f:49:40:80:b2:a6:
                    eb:68:08:72:fb:4f:57:4c:17:e5:a3:68:2b:a1:c0:
                    85:1e:a6:e6:80:84:fc:de:62:3b:ea:73:21:9d:ef:
                    de:25:6e:8f:5e:75:af:1a:cf:36:44:c6:3b:7f:85:
                    aa:22:1a:83:99:c7:a4:48:e9:19:7f:30:84:b0:de:
                    71:14:89:b9:3e:52:9a:e4:9b:a6:2e:0d:0a:7d:12:
                    08:22:50:cd:40:9e:30:d9:20:bd:ff:37:02:91:fc:
                    c4:fc:54:78:0f:97:e8:b7:1e:bc:3d:c3:8c:b8:0a:
                    96:ec:5a:37:10:53:26:d8:9b:38:91:96:cb:ad:e0:
                    74:1a:e8:41:4b:3d:4d:9f:81:67:da:a7:06:8d:b8:
                    ff:15:95:a9:b5:e1:8c:e0:e4:5a:cd:60:20:b6:51:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:01:1C:E1:66:11:F3:5C:E0:B1:1E:CF:F1:7E:52:2A:9C:F2:14:05
            X509v3 Authority Key Identifier:
                keyid:69:44:C5:5B:F9:B2:E6:46:89:5F:4A:0B:34:0F:DB:CB:1A:D4:B6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/34352e3137342e3133352e302f32342d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:60:67:41:3b:29:71:61:8e:d5:59:b5:6d:d1:a8:50:4a:d9:
         9f:39:d4:60:f7:44:b7:f2:45:e1:79:2c:7a:ab:67:87:2f:09:
         a6:8b:e5:84:0c:8f:a0:01:bd:88:9e:12:65:23:fe:1f:d2:ab:
         cb:e4:d2:3d:f4:88:17:87:77:fa:2a:7b:dc:b9:46:5d:b7:07:
         d0:f8:59:15:b5:2f:21:09:7a:7d:83:bc:7f:e8:a5:42:7a:27:
         d9:cd:1c:36:6f:4c:0a:dc:9c:ba:05:7d:4e:19:e9:25:72:aa:
         3b:ca:b6:c0:8b:77:57:ab:7f:c3:3a:9a:b7:ef:30:3c:fa:d3:
         6f:fb:2f:35:0f:27:6e:a9:d4:1b:34:c8:fe:37:e3:1a:86:eb:
         f5:66:3a:e0:bc:4d:cf:3e:8e:87:eb:2e:b8:52:cd:61:c3:f1:
         64:e0:13:b8:f1:2f:43:78:de:a0:cd:67:8d:e1:f9:fb:0f:ec:
         1c:2d:b8:c1:2d:70:24:d6:63:8c:b3:f3:f1:24:5f:45:01:98:
         34:e1:5f:bb:97:d7:3e:b4:20:08:d2:44:bb:66:98:30:50:5c:
         d0:f6:51:1b:cf:8d:d4:64:4f:c6:cc:e0:17:c4:d8:45:2a:bf:
         38:8d:42:28:70:c9:1d:e9:e9:c2:bc:33:aa:2b:d9:ff:be:6c:
         bd:8d:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org