Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32332d3233203d3e20323639353032.roa
File:                     34352e3138362e322e302f32332d3233203d3e20323639353032.roa (raw, json)
Hash identifier:          MUvDdqPIWAPeQG0BFjaDs1ZeDygupkBxpZzPXzshVD4=
Subject key identifier:   38:25:C9:90:51:65:B6:6A:16:FC:4C:F3:26:36:DE:8D:8F:26:1B:FA
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       1F05B036727B67E92298796040EA25FB88D93DE3
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32332d3233203d3e20323639353032.roa
Signing time:             Tue 22 Aug 2023 18:05:38 +0000
ROA not before:           Tue 22 Aug 2023 18:00:38 +0000
ROA not after:            Tue 20 Aug 2024 18:05:38 +0000
asID:                     269502
IP address blocks:        45.186.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:05:b0:36:72:7b:67:e9:22:98:79:60:40:ea:25:fb:88:d9:3d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Aug 22 18:00:38 2023 GMT
            Not After : Aug 20 18:05:38 2024 GMT
        Subject: CN=3082010A0282010100B654BAFC2AC0ACBBFF2BB213A6149AA61D1F6855BE1520B76C41FD4F008D79ADB289715E2D8F810FCAD23E72F6F0DB6D1B126C681FD04868E0C3BF41EF89F766D5553C26B9504CC65359AC2785D082450BF193AC05385219CC9DEFFDCC88DDC1326915C5643F2BDDBAB9B005257A4CF786BD536CB2AC96F067A0CF5E963183E2BC29FC581CBCFB5C97F4341586F31FF783044F4CCCC11D856CB2757A646B7FA789B953E39BAF9ADA450AD70B8EE8D7C2ABEBE653EFE1927652155729BF56085F6309E1CDB967CF000F2DB33FF09365B23B4376E0DDD62724A8F7A6EA8204C80E961145FB47F6F17CCD5AA80BD18E9C85218BE6ABD80575978C4984278AB1DF1D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:ba:fc:2a:c0:ac:bb:ff:2b:b2:13:a6:14:
                    9a:a6:1d:1f:68:55:be:15:20:b7:6c:41:fd:4f:00:
                    8d:79:ad:b2:89:71:5e:2d:8f:81:0f:ca:d2:3e:72:
                    f6:f0:db:6d:1b:12:6c:68:1f:d0:48:68:e0:c3:bf:
                    41:ef:89:f7:66:d5:55:3c:26:b9:50:4c:c6:53:59:
                    ac:27:85:d0:82:45:0b:f1:93:ac:05:38:52:19:cc:
                    9d:ef:fd:cc:88:dd:c1:32:69:15:c5:64:3f:2b:dd:
                    ba:b9:b0:05:25:7a:4c:f7:86:bd:53:6c:b2:ac:96:
                    f0:67:a0:cf:5e:96:31:83:e2:bc:29:fc:58:1c:bc:
                    fb:5c:97:f4:34:15:86:f3:1f:f7:83:04:4f:4c:cc:
                    c1:1d:85:6c:b2:75:7a:64:6b:7f:a7:89:b9:53:e3:
                    9b:af:9a:da:45:0a:d7:0b:8e:e8:d7:c2:ab:eb:e6:
                    53:ef:e1:92:76:52:15:57:29:bf:56:08:5f:63:09:
                    e1:cd:b9:67:cf:00:0f:2d:b3:3f:f0:93:65:b2:3b:
                    43:76:e0:dd:d6:27:24:a8:f7:a6:ea:82:04:c8:0e:
                    96:11:45:fb:47:f6:f1:7c:cd:5a:a8:0b:d1:8e:9c:
                    85:21:8b:e6:ab:d8:05:75:97:8c:49:84:27:8a:b1:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:25:C9:90:51:65:B6:6A:16:FC:4C:F3:26:36:DE:8D:8F:26:1B:FA
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32332d3233203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:c1:81:aa:d3:8c:6a:c9:68:7c:5f:44:02:bb:03:6d:b8:
         94:12:35:fa:7b:a2:4c:db:6e:8a:db:9e:17:5a:37:8b:af:c1:
         a3:a7:04:5d:3e:a7:64:bc:69:58:05:25:77:43:5f:af:a4:5d:
         ae:92:25:4c:8e:cb:56:8a:95:1c:37:a1:22:fe:93:84:ed:0d:
         32:de:ac:63:1e:1a:a1:84:3e:46:0d:c4:c0:ba:a5:20:69:8b:
         aa:60:f0:cf:bf:17:0d:bd:8c:2f:7a:a6:7b:97:8f:05:36:3e:
         84:6e:f5:94:77:e2:49:ae:d2:e7:5a:63:ad:f1:f7:65:75:6c:
         82:26:1c:4b:05:54:6e:66:5b:94:25:79:1d:d6:d0:14:cb:00:
         24:34:43:ea:9f:d3:cd:45:56:c5:6c:e0:c7:2c:b4:6c:34:7a:
         fa:8a:d6:6d:4b:d9:57:ee:57:04:37:a4:da:be:47:0f:8f:a1:
         b9:b3:8f:89:fd:bc:5f:8b:3a:9e:c3:2d:cd:5b:a0:f0:31:94:
         d0:de:a4:e3:f0:f9:da:3b:82:18:d7:f0:0a:a1:d7:ee:1b:65:
         b2:b9:c9:a8:ad:8e:43:41:9e:00:2b:2f:be:d0:62:9e:9f:b7:
         5d:9a:6c:bb:92:27:c4:06:88:7d:15:4e:40:6a:6f:7b:22:c8:
         af:9b:9a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org