Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/34352e3138342e3230342e302f32322d3234203d3e20323639333433.roa
File:                     34352e3138342e3230342e302f32322d3234203d3e20323639333433.roa (raw, json)
Hash identifier:          ID6fRbZms5CD1Zeix21tue/InizWAiPiK+qVKfKvLxw=
Subject key identifier:   A2:8D:58:36:1A:1D:C3:BC:B6:17:85:08:3B:4A:6C:A6:FD:4A:84:7B
Certificate issuer:       /CN=5AE72D5BF2F268D9B2E465B549705E334171A62A
Certificate serial:       14D55FB92F5DE936F75594835A6EE59A116065F6
Authority key identifier: 5A:E7:2D:5B:F2:F2:68:D9:B2:E4:65:B5:49:70:5E:33:41:71:A6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AE72D5BF2F268D9B2E465B549705E334171A62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/34352e3138342e3230342e302f32322d3234203d3e20323639333433.roa
Signing time:             Fri 20 Oct 2023 08:30:38 +0000
ROA not before:           Fri 20 Oct 2023 08:25:38 +0000
ROA not after:            Fri 18 Oct 2024 08:30:38 +0000
asID:                     269343
IP address blocks:        45.184.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d5:5f:b9:2f:5d:e9:36:f7:55:94:83:5a:6e:e5:9a:11:60:65:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE72D5BF2F268D9B2E465B549705E334171A62A
        Validity
            Not Before: Oct 20 08:25:38 2023 GMT
            Not After : Oct 18 08:30:38 2024 GMT
        Subject: CN=A28D58361A1DC3BCB61785083B4A6CA6FD4A847B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:a4:54:61:37:53:26:1f:fd:d9:ec:dd:60:
                    9b:cc:88:6e:ad:cd:79:78:4e:e5:aa:3c:c0:5a:fd:
                    1d:ff:cc:65:28:ab:6d:5e:88:90:cd:12:2b:a5:16:
                    17:23:e5:51:84:08:62:b5:7c:48:a7:49:c3:d1:44:
                    4e:fe:b6:f6:05:5b:81:64:15:61:4b:91:1a:ae:b9:
                    e4:8a:bd:d3:12:8b:95:84:2e:ed:74:2b:ec:90:06:
                    f5:0a:44:9a:23:8e:25:9c:22:db:6a:14:c6:2b:78:
                    2a:3a:9d:7a:d3:c0:18:07:fa:fa:44:a3:c2:ae:32:
                    a2:ac:4d:09:0f:ed:7f:83:62:45:79:0d:50:a0:ac:
                    d4:8c:cd:54:e9:eb:77:70:b6:1b:f5:b2:fa:86:53:
                    bf:78:39:b1:1c:5b:12:cf:65:cf:43:c2:29:31:d1:
                    78:e3:97:27:d1:84:ab:09:67:a1:8c:70:dc:71:1c:
                    27:ef:16:c5:cd:67:76:02:44:5f:41:af:f4:38:21:
                    ee:da:8b:45:53:0c:e7:64:b0:a4:cd:09:2b:1a:30:
                    f9:ed:07:51:d2:8e:82:80:d2:22:0b:bc:67:5e:01:
                    4b:64:0b:5e:18:77:68:94:b8:4d:a5:39:c2:40:9f:
                    e0:64:8a:1b:22:2e:e5:f3:99:e0:d0:af:a2:94:cd:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8D:58:36:1A:1D:C3:BC:B6:17:85:08:3B:4A:6C:A6:FD:4A:84:7B
            X509v3 Authority Key Identifier:
                keyid:5A:E7:2D:5B:F2:F2:68:D9:B2:E4:65:B5:49:70:5E:33:41:71:A6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/5AE72D5BF2F268D9B2E465B549705E334171A62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AE72D5BF2F268D9B2E465B549705E334171A62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/34352e3138342e3230342e302f32322d3234203d3e20323639333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:40:a3:3d:b5:d5:39:b2:df:01:6b:e7:b7:4b:aa:d5:04:ee:
         29:fd:a0:02:78:a6:01:8f:39:9c:1d:5d:c3:44:73:4b:ad:c9:
         09:f3:3c:d0:dd:8c:bf:47:37:cd:1d:b4:5b:b1:40:35:3e:01:
         e1:c9:cd:f3:e9:cc:ec:0b:07:1f:d8:1b:d9:75:e9:42:29:9d:
         2a:77:08:5b:64:b4:38:df:0f:1c:85:eb:b0:73:32:50:5c:06:
         19:30:9c:58:e9:64:8f:56:29:2f:12:d1:f6:6a:c0:f1:21:8a:
         18:3a:ce:bf:f2:ad:fc:f6:49:e5:cd:f2:6d:31:e6:c9:5a:d0:
         07:bb:d3:80:06:3a:44:39:b2:bb:ba:de:0a:ce:59:21:78:46:
         90:f7:fe:6a:fe:ba:89:63:d7:ee:bc:1c:11:3f:c6:11:e9:b8:
         35:e0:8c:3a:ed:ba:e4:b6:ef:38:52:f5:08:08:35:52:3a:d8:
         81:8a:55:e2:2e:a3:b3:12:25:74:75:de:bb:b7:49:b5:af:2f:
         9c:f4:67:1c:6f:a5:f6:ae:39:e4:fd:87:88:5d:1a:c2:b7:e6:
         0a:c7:f1:4f:53:2e:a2:c2:73:e9:67:52:4a:d1:62:27:7d:58:
         c7:4a:25:a5:15:74:17:16:52:44:2e:3a:a4:44:84:fb:b0:45:
         c4:67:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org