Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32322d3233203d3e20323636303636.roa
File:                     34352e342e3132342e302f32322d3233203d3e20323636303636.roa (raw, json)
Hash identifier:          EzIuopyHK/ftKeTUrWqHCMGtg2Rh6rsdBdd1Z1UqXH4=
Subject key identifier:   E7:CC:67:F4:81:18:D1:CF:E8:B6:30:AE:A6:C8:90:B2:43:1C:9F:09
Certificate issuer:       /CN=0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F
Certificate serial:       47841A71981D54B96D9741627C87C897FADE08AE
Authority key identifier: 02:32:A5:24:64:A2:5A:FD:8F:00:BF:BF:1F:AB:0A:A8:6A:82:1F:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32322d3233203d3e20323636303636.roa
Signing time:             Sun 28 May 2023 02:21:29 +0000
ROA not before:           Sun 28 May 2023 02:16:29 +0000
ROA not after:            Sun 26 May 2024 02:21:29 +0000
asID:                     266066
IP address blocks:        45.4.124.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:84:1a:71:98:1d:54:b9:6d:97:41:62:7c:87:c8:97:fa:de:08:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F
        Validity
            Not Before: May 28 02:16:29 2023 GMT
            Not After : May 26 02:21:29 2024 GMT
        Subject: CN=E7CC67F48118D1CFE8B630AEA6C890B2431C9F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:d1:25:e4:09:07:67:30:c8:80:31:d0:40:
                    ba:bc:c1:bd:04:a7:6a:ad:ed:b8:6c:cc:0f:99:46:
                    ae:97:a4:97:7f:62:c8:a5:3a:1b:32:a0:e8:3c:21:
                    9e:91:ce:0f:8d:49:24:39:1e:52:ee:f0:ad:06:d2:
                    57:67:52:e3:0b:3f:2f:af:8d:dc:75:2f:9c:36:36:
                    7c:3a:d3:8f:e9:ea:17:05:26:3a:59:b2:3e:82:ba:
                    62:eb:0f:bb:5c:70:8e:aa:67:34:da:3e:11:28:6f:
                    16:59:e5:f6:87:75:c8:57:ac:af:25:a9:cb:23:e0:
                    8d:73:f8:b3:2a:29:fa:98:0c:53:fe:36:45:a6:20:
                    4c:eb:88:e1:f4:72:f2:72:92:bd:d7:f7:63:03:e1:
                    8c:66:ce:ee:6a:4c:2c:27:14:de:9b:ac:70:f8:9e:
                    d7:c7:6c:41:2e:88:0f:4f:ba:7c:55:88:4f:41:7a:
                    9f:f8:dd:fa:dd:00:10:f9:fd:4f:d1:89:b0:ef:6b:
                    94:fe:1d:aa:ee:b4:e2:cc:39:70:9b:f2:a5:ad:fb:
                    8c:16:8d:f2:bc:7b:b0:ea:48:07:30:79:0b:c3:df:
                    58:90:a4:17:95:4a:55:dd:52:d2:a6:6d:0d:58:4e:
                    90:c7:8e:ee:72:18:c4:b4:6d:67:92:7a:8b:77:33:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CC:67:F4:81:18:D1:CF:E8:B6:30:AE:A6:C8:90:B2:43:1C:9F:09
            X509v3 Authority Key Identifier:
                keyid:02:32:A5:24:64:A2:5A:FD:8F:00:BF:BF:1F:AB:0A:A8:6A:82:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32322d3233203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:0f:2e:c2:e4:d6:a8:11:a0:26:35:0f:ee:47:79:14:b9:d8:
         ee:e3:a4:dc:51:9a:9d:d1:c1:25:7b:77:37:74:6b:5c:e9:8d:
         b8:7f:6b:80:79:0e:a7:b6:18:1b:33:ce:a5:7d:c5:d9:79:6b:
         00:3f:24:a8:5f:d6:4e:48:7e:03:d9:fe:48:65:50:21:be:4f:
         f3:37:0f:58:b6:57:1b:8b:16:ed:30:82:ce:be:fe:91:65:da:
         e4:ce:27:11:bb:7f:72:69:f6:47:ee:8e:a6:9a:96:ea:46:4f:
         ac:ee:a4:93:7f:ea:85:70:a1:0a:07:ee:ad:c7:3c:9d:e6:13:
         23:3d:79:eb:d2:35:5f:5b:51:4e:fb:c5:08:f6:d6:91:13:42:
         97:7e:d5:fc:3e:07:6b:fe:6e:e0:01:e9:6d:d0:b4:d3:db:67:
         1e:33:35:f2:db:87:4f:60:47:e1:49:d1:b9:df:a6:d1:39:24:
         c6:2b:32:cc:02:82:10:45:66:29:85:d9:a2:9a:b6:1a:ba:0b:
         1d:e2:7a:c5:ab:ab:75:fc:4f:da:75:17:5a:9a:a5:78:51:a2:
         33:89:3f:a3:66:3a:6c:8b:f9:32:cd:39:65:19:08:9d:7b:45:
         b2:26:a7:86:2b:99:7c:b3:8e:3d:87:60:f3:92:69:e0:f7:5e:
         7e:b0:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org