Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e302e302f32332d3233203d3e20323639353032.roa
File:                     34352e3138362e302e302f32332d3233203d3e20323639353032.roa (raw, json)
Hash identifier:          V06SF18YkhuJAnzEY8uUW8/2yx6Zbf5Lxkxcex9y9d4=
Subject key identifier:   C8:6E:28:3A:1B:77:2E:D8:F5:5E:F5:84:38:A1:18:27:98:0C:9B:12
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       34C8A0C61008B73112D4FF727AD183035C899FE3
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e302e302f32332d3233203d3e20323639353032.roa
Signing time:             Tue 22 Aug 2023 18:05:09 +0000
ROA not before:           Tue 22 Aug 2023 18:00:09 +0000
ROA not after:            Tue 20 Aug 2024 18:05:09 +0000
asID:                     269502
IP address blocks:        45.186.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c8:a0:c6:10:08:b7:31:12:d4:ff:72:7a:d1:83:03:5c:89:9f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Aug 22 18:00:09 2023 GMT
            Not After : Aug 20 18:05:09 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:39:d0:1f:f2:95:ac:a8:dd:87:d4:b3:53:
                    78:26:3c:c5:3e:6a:81:d5:0e:ca:5e:e0:51:40:1d:
                    a0:e1:36:ea:c4:13:a9:a0:86:ff:cc:7e:e8:ee:b4:
                    61:04:a9:91:5e:67:21:70:81:b9:d4:bf:88:e2:c7:
                    c5:13:6d:5f:8c:31:11:71:bd:bb:4a:f2:2f:79:6f:
                    1f:81:29:7a:56:f6:ef:13:b1:a2:30:8c:ce:e7:6f:
                    14:5b:a7:40:b7:a4:ca:db:89:10:42:6a:4b:87:a6:
                    ca:e7:d2:e1:d2:99:68:ba:7c:72:f3:f3:94:92:f5:
                    c8:c6:c9:5d:b8:d7:63:62:9e:00:f0:be:4e:cf:56:
                    95:29:a3:40:09:cf:59:ef:a2:a6:f9:ce:b5:53:67:
                    46:c8:eb:14:d6:9a:c3:bc:d6:cb:8b:85:8c:82:17:
                    47:1e:4a:37:e6:da:c3:e4:ad:a3:0d:f9:b5:93:5a:
                    47:7b:f3:ee:4b:a0:9a:d0:af:cc:9c:82:66:86:f6:
                    f7:c2:1a:2b:f1:81:b7:ff:17:66:1d:e6:9b:a6:52:
                    40:4b:19:cf:93:c0:28:81:eb:ef:7e:af:3b:e9:8d:
                    a2:a6:49:8e:60:bc:44:db:59:c1:f5:e3:dd:46:90:
                    b2:01:60:96:70:f8:00:90:4c:d7:56:2f:22:b0:f6:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6E:28:3A:1B:77:2E:D8:F5:5E:F5:84:38:A1:18:27:98:0C:9B:12
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e302e302f32332d3233203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:e0:fa:c6:8f:eb:6e:e5:39:71:18:9f:1b:5a:3f:30:6d:0f:
         e2:c5:58:db:9d:96:04:75:a5:fb:77:81:c8:a9:04:e7:14:f6:
         5e:3c:34:62:fe:ac:f1:ed:b5:3b:32:7d:31:5d:43:e0:03:1f:
         ba:45:60:9a:a3:0f:60:7d:75:ac:ea:7f:80:6a:f4:b2:c7:8b:
         39:b9:a9:83:25:b5:4e:02:bc:ad:80:9a:5c:cc:09:96:ff:48:
         6d:75:f3:9f:d0:e0:e0:29:f0:f4:18:87:32:77:a8:77:0c:f9:
         a5:7a:99:82:74:9d:55:b6:c3:c3:7d:1d:60:7c:61:6b:a0:38:
         9a:81:08:c0:51:fa:7f:39:21:ce:f0:92:b1:81:a2:65:62:ef:
         ad:c7:93:21:15:83:95:4d:53:69:9d:aa:f9:28:9e:fc:36:94:
         eb:d4:fd:37:4f:1d:b8:e4:18:e2:ee:95:5c:f6:ae:b8:8e:09:
         2f:1d:0b:20:2d:0c:d6:17:60:8f:a9:f4:74:8b:f1:bf:eb:5c:
         b2:5e:2c:42:d8:e5:3d:cc:32:73:45:d8:82:40:75:f4:76:76:
         02:70:23:65:b4:6b:1b:c9:3f:d8:9b:57:84:75:0a:77:e4:e0:
         df:82:97:51:4c:4d:9e:3b:32:3c:d8:b4:8b:c9:f8:02:3b:dc:
         03:9b:b1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org