Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233362e302f32322d3232203d3e20323637313736.roa
File:                     34352e3233302e3233362e302f32322d3232203d3e20323637313736.roa (raw, json)
Hash identifier:          MCjuVYQBMmUzPhvafTTtYf01bjNLT8SNUm3P5Ju3UtU=
Subject key identifier:   39:14:84:91:F3:83:DD:C5:74:2B:60:6E:7F:3A:69:F9:06:CE:84:B9
Certificate issuer:       /CN=5EA554640E24C8A21AF8DE1A497FDC6F9592F374
Certificate serial:       2172C545987C9ADCA0AA348F40C3027E1DB92ECD
Authority key identifier: 5E:A5:54:64:0E:24:C8:A2:1A:F8:DE:1A:49:7F:DC:6F:95:92:F3:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233362e302f32322d3232203d3e20323637313736.roa
Signing time:             Wed 18 Oct 2023 17:45:10 +0000
ROA not before:           Wed 18 Oct 2023 17:40:10 +0000
ROA not after:            Wed 16 Oct 2024 17:45:10 +0000
asID:                     267176
IP address blocks:        45.230.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:72:c5:45:98:7c:9a:dc:a0:aa:34:8f:40:c3:02:7e:1d:b9:2e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA554640E24C8A21AF8DE1A497FDC6F9592F374
        Validity
            Not Before: Oct 18 17:40:10 2023 GMT
            Not After : Oct 16 17:45:10 2024 GMT
        Subject: CN=39148491F383DDC5742B606E7F3A69F906CE84B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:5e:75:e3:5a:fd:75:8f:1a:59:8c:f1:b2:
                    db:a6:7b:d3:d8:bd:8d:71:87:85:a8:c4:c8:9a:2d:
                    6e:6e:f4:ff:04:51:0f:04:0b:e3:18:41:61:dc:ee:
                    7d:f3:64:e3:4e:43:e7:3d:79:5e:ef:40:a6:f1:35:
                    ad:0e:9e:f4:c0:19:44:bb:87:fa:08:17:e2:1f:49:
                    f4:02:c0:2a:d8:a2:5f:14:6d:dc:2c:17:2b:3e:2f:
                    d3:e7:70:a8:55:f8:a8:6c:4a:5d:17:19:d0:4b:6d:
                    13:32:ee:00:74:34:3b:9b:1a:8b:94:74:6e:50:85:
                    9e:4e:65:d1:33:e2:91:9a:54:bd:6d:a4:7b:c0:6e:
                    c3:62:c1:28:26:c3:9d:d2:57:5d:40:5c:74:5e:e7:
                    ca:d7:dc:6a:5e:88:3b:26:7c:24:9c:73:15:84:8e:
                    a9:f1:9c:f3:32:7b:4f:5e:a4:8c:df:06:ec:e5:ee:
                    a1:5a:59:1b:9d:31:24:3b:a0:9a:8a:7b:1c:af:6a:
                    d4:a1:72:d8:55:f6:86:e7:c8:67:71:f2:1f:2f:64:
                    75:f4:13:e6:3e:61:ff:a9:64:3b:c2:3b:9d:8a:c0:
                    f8:58:3d:31:5d:3a:89:97:9d:4c:47:29:7c:92:b6:
                    ed:ea:36:2e:40:09:a5:5f:f9:f6:22:cd:ea:c6:f3:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:14:84:91:F3:83:DD:C5:74:2B:60:6E:7F:3A:69:F9:06:CE:84:B9
            X509v3 Authority Key Identifier:
                keyid:5E:A5:54:64:0E:24:C8:A2:1A:F8:DE:1A:49:7F:DC:6F:95:92:F3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233362e302f32322d3232203d3e20323637313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:81:63:87:51:91:6b:7a:5a:91:c2:1e:76:d1:e9:c9:65:23:
         3d:eb:c2:a7:75:51:e9:c4:57:9c:5c:e1:ac:f6:f1:4c:52:ea:
         2f:c6:64:64:61:5e:50:78:4b:67:da:6b:88:2c:69:ea:04:58:
         ad:b5:34:ed:3a:4b:a4:3b:c7:24:d1:1d:7f:7b:4b:c6:a8:fb:
         93:c8:59:a1:0b:1d:82:af:72:7b:ff:d8:db:3a:f6:01:d8:55:
         d1:51:31:b6:05:06:d4:4d:31:43:9a:73:84:bf:51:12:83:74:
         38:41:bd:fa:0b:30:5a:67:58:2f:77:f9:d5:5f:38:f5:00:78:
         8d:bb:28:78:17:4f:3a:f3:22:23:3d:3d:7b:dc:70:de:d5:3f:
         2f:5a:dd:8d:6c:50:9e:3c:a0:8f:64:14:b9:12:89:48:94:c7:
         b4:04:12:30:fc:e8:ef:5f:47:25:2d:cf:1c:f5:1a:07:10:cd:
         96:b9:62:e0:a9:c4:bd:54:0c:7e:a2:d9:a6:f4:ec:70:9d:7c:
         4e:4a:28:18:ff:5a:95:08:41:19:94:47:27:ad:d3:65:b6:c9:
         04:c4:b8:ee:db:15:2b:61:7f:5c:a9:7a:92:6c:ab:b2:36:49:
         b3:eb:92:cb:ea:c0:12:3c:cb:c8:2d:58:70:a8:37:d5:7a:fb:
         80:bc:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org