Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa
File:                     34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa (raw, json)
Hash identifier:          aEZhNl6qeYt9Qn7LNHG+llbNw995S4YzOxFkGfBav74=
Subject key identifier:   7D:F0:66:B7:70:A8:E6:91:E5:50:7A:F8:95:4F:20:B5:A8:25:35:45
Certificate issuer:       /CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
Certificate serial:       1C17241EA9786FCDBAC08B9754F0C546D838EB69
Authority key identifier: 53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa
Signing time:             Fri 02 Feb 2024 14:20:05 +0000
ROA not before:           Fri 02 Feb 2024 14:15:05 +0000
ROA not after:            Fri 31 Jan 2025 14:20:05 +0000
asID:                     267229
IP address blocks:        45.231.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:17:24:1e:a9:78:6f:cd:ba:c0:8b:97:54:f0:c5:46:d8:38:eb:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
        Validity
            Not Before: Feb  2 14:15:05 2024 GMT
            Not After : Jan 31 14:20:05 2025 GMT
        Subject: CN=7DF066B770A8E691E5507AF8954F20B5A8253545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:9b:b9:e4:86:3a:ad:05:54:30:c1:58:78:
                    9a:f8:30:27:0b:21:72:fb:b8:82:82:fb:d6:82:ef:
                    29:65:45:1b:7a:4d:9f:39:49:e8:c1:9b:c9:8e:dd:
                    f8:19:64:7c:58:d0:4b:9f:6f:50:c6:86:87:37:09:
                    c4:db:cc:4e:4b:a3:68:80:97:9b:ce:2d:48:7b:57:
                    dd:80:39:4c:c7:56:74:87:c7:75:2e:31:90:16:63:
                    a7:93:16:55:3f:64:5e:46:95:c6:79:b1:5a:70:d9:
                    8a:1a:29:61:9e:8a:e4:1c:28:8b:92:84:6e:ee:60:
                    79:20:83:77:b2:d7:b1:91:88:ef:0e:06:24:4c:af:
                    67:66:fd:d5:8b:82:c3:96:9e:eb:56:96:13:6e:bc:
                    33:53:4f:65:b8:76:d1:b9:9f:c9:59:cc:90:6d:be:
                    aa:09:9f:ce:5f:ab:ea:3c:56:ec:b7:1b:1c:01:d7:
                    28:6e:17:f9:b8:50:86:b0:87:b6:75:e4:33:be:dd:
                    9a:80:ae:34:70:15:c1:00:f1:4f:ad:d7:0d:6d:bc:
                    1c:08:84:35:f2:80:a2:d7:e4:c1:c6:1b:40:09:07:
                    13:77:6d:f8:30:ec:bc:57:e0:9d:cd:52:e7:0d:10:
                    19:3b:d0:c8:9e:3b:5c:27:8e:07:4c:40:b6:ba:09:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F0:66:B7:70:A8:E6:91:E5:50:7A:F8:95:4F:20:B5:A8:25:35:45
            X509v3 Authority Key Identifier:
                keyid:53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:78:cb:cb:6a:96:f0:c3:c5:e1:1a:c8:01:90:8c:de:6d:57:
         eb:89:4f:0a:ee:d2:05:e8:16:29:79:ef:c3:7a:66:9c:bc:b4:
         05:a3:c4:90:dd:fe:e1:38:08:19:dd:4a:e7:fe:66:1d:bf:62:
         83:fd:18:70:64:3e:73:77:9e:06:fd:ae:28:41:fd:f2:9a:9e:
         7e:6c:0f:f5:83:ba:fe:20:8e:cf:9a:a5:d9:26:80:81:80:9c:
         f1:53:54:46:3c:a1:95:99:7d:6e:cb:80:34:be:e5:4a:72:e4:
         4b:c5:75:24:c1:df:f4:92:17:6e:7a:8d:7a:31:6e:f3:fc:42:
         28:27:7f:f8:3f:e5:b9:bc:fc:ef:74:98:fc:15:a4:03:01:13:
         dc:1f:de:d2:39:f3:73:44:df:61:5d:7c:77:57:f5:72:97:19:
         ed:a4:51:39:24:14:98:20:33:50:8e:7c:9e:0b:96:3d:54:15:
         c5:10:c2:80:d3:76:69:7a:8d:59:9b:91:80:1a:7e:38:20:99:
         d7:b0:41:3d:ce:02:94:00:8b:2e:a6:9a:3f:72:10:6d:49:95:
         0d:6f:1b:9b:f0:ac:f9:42:d2:36:e3:22:24:9a:95:a4:f5:a2:
         b2:18:ab:7f:75:d3:d9:2f:dd:81:39:fe:fe:69:c0:a1:58:21:
         4d:80:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org