Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233322e302f32322d3234203d3e20323637313737.roa
File:                     34352e3233302e3233322e302f32322d3234203d3e20323637313737.roa (raw, json)
Hash identifier:          d13FHW4ccstAJn3y8e02WFqrK8t6CaOxT79/d5jME5k=
Subject key identifier:   A8:69:B2:5C:57:19:08:3A:D1:A6:A3:FE:00:14:40:D0:7F:3E:4D:0F
Certificate issuer:       /CN=0B2871DC54261C0A0EA37A5B8879E292492F1577
Certificate serial:       33CAA6D16F0F44F60F049F158A2CD4D481A4493F
Authority key identifier: 0B:28:71:DC:54:26:1C:0A:0E:A3:7A:5B:88:79:E2:92:49:2F:15:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B2871DC54261C0A0EA37A5B8879E292492F1577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233322e302f32322d3234203d3e20323637313737.roa
Signing time:             Thu 22 Sep 2022 03:27:15 +0000
ROA not before:           Thu 22 Sep 2022 03:22:15 +0000
ROA not after:            Thu 21 Sep 2023 03:27:15 +0000
asID:                     267177
IP address blocks:        45.230.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ca:a6:d1:6f:0f:44:f6:0f:04:9f:15:8a:2c:d4:d4:81:a4:49:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B2871DC54261C0A0EA37A5B8879E292492F1577
        Validity
            Not Before: Sep 22 03:22:15 2022 GMT
            Not After : Sep 21 03:27:15 2023 GMT
        Subject: CN=A869B25C5719083AD1A6A3FE001440D07F3E4D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f7:d0:66:86:e4:85:f7:f9:35:94:0a:e9:e4:
                    83:f4:48:52:b7:c6:7c:8e:a4:67:ba:d8:39:ba:5d:
                    01:fb:31:57:af:85:f1:50:a3:59:7e:f3:a7:33:26:
                    e5:91:88:39:ec:56:22:e0:d9:87:3b:42:35:36:a0:
                    22:9f:5a:4c:28:03:0f:00:0f:3a:eb:58:fc:c6:51:
                    b9:e4:1d:c5:27:60:fc:20:56:72:39:e0:a8:b1:e3:
                    83:25:d6:1b:3e:19:36:35:22:60:af:ba:a6:e4:af:
                    32:ba:5f:4b:89:68:aa:f4:90:09:08:38:56:4e:22:
                    34:8a:58:82:9b:ee:7d:97:1e:22:1b:a2:bf:a3:3d:
                    85:2c:1d:8d:52:0b:a7:1a:78:54:ca:ef:85:16:c5:
                    5e:43:23:16:1e:83:57:4a:20:8f:92:7b:4b:f2:23:
                    6b:a0:c7:c8:57:11:e8:ad:5b:12:58:9a:21:a1:de:
                    aa:fd:6d:ef:f8:90:7c:77:47:52:03:35:8b:91:e0:
                    e0:42:29:02:1f:cb:dd:9f:e4:ae:8b:fe:59:fb:76:
                    5b:1f:26:57:ea:ce:50:cf:31:27:94:31:c1:e7:fd:
                    0a:1a:4b:55:e2:34:3c:c2:e5:e9:35:99:07:3d:1e:
                    80:e5:2b:b9:46:fc:f4:53:b1:45:a6:08:51:8f:b8:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:69:B2:5C:57:19:08:3A:D1:A6:A3:FE:00:14:40:D0:7F:3E:4D:0F
            X509v3 Authority Key Identifier:
                keyid:0B:28:71:DC:54:26:1C:0A:0E:A3:7A:5B:88:79:E2:92:49:2F:15:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/0B2871DC54261C0A0EA37A5B8879E292492F1577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B2871DC54261C0A0EA37A5B8879E292492F1577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233322e302f32322d3234203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:6e:b0:2a:24:10:9a:9f:d6:d5:12:d3:f9:6e:3d:e5:50:40:
         96:bb:24:42:4c:45:76:72:a7:ad:ed:3a:2e:f6:20:75:61:68:
         40:b8:84:56:8e:44:b7:e9:77:3c:1b:eb:13:39:d3:22:de:df:
         1b:b1:65:06:32:dc:df:03:5f:13:1d:75:06:23:fc:0a:1b:45:
         4b:bc:d6:76:21:8f:e7:b2:e6:20:a9:56:b0:fa:c9:59:a5:7c:
         73:bc:9f:5e:30:49:80:76:09:0c:16:97:1e:a0:cc:aa:00:bd:
         2f:2f:9b:67:68:50:ae:38:2e:3f:f0:28:6d:aa:6a:0e:3d:e9:
         66:5f:e7:62:1f:52:36:bb:98:3f:bc:fb:76:92:b8:98:ff:ce:
         75:ff:3f:a2:81:3b:7d:ae:79:84:41:1f:34:ea:dd:e3:b5:c2:
         9b:9b:1b:ee:91:72:1a:ba:7d:c9:66:72:b4:0e:48:b4:24:b8:
         b8:0f:69:d6:51:64:88:86:7c:db:52:47:00:f7:d0:6b:10:a4:
         d1:17:50:c1:fb:c4:48:91:ef:30:72:5a:22:a0:f4:57:f1:72:
         fc:42:07:6c:c0:9c:d6:11:ce:93:fd:d1:44:4a:19:3d:33:c0:
         8d:25:bb:71:88:c0:d4:e0:d2:df:8c:0b:b0:3a:6f:22:e9:dc:
         1d:8b:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org