Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/34352e3136372e382e302f32322d3232203d3e20323638303230.roa
File:                     34352e3136372e382e302f32322d3232203d3e20323638303230.roa (raw, json)
Hash identifier:          yj1y3j0autIZ9to/fLBj/jsu/AO/qXiRGi3cYkov6Zs=
Subject key identifier:   96:10:98:5D:9C:AF:28:50:7F:1A:A7:2B:49:FD:3E:76:EA:36:99:D9
Certificate issuer:       /CN=6580BDD93E3899BECA2788EB019377F40796F1AB
Certificate serial:       3BEBB9D33F3E1B02A939E14902CA6F4E3B02FDC5
Authority key identifier: 65:80:BD:D9:3E:38:99:BE:CA:27:88:EB:01:93:77:F4:07:96:F1:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6580BDD93E3899BECA2788EB019377F40796F1AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/34352e3136372e382e302f32322d3232203d3e20323638303230.roa
Signing time:             Wed 20 Sep 2023 19:26:11 +0000
ROA not before:           Wed 20 Sep 2023 19:21:11 +0000
ROA not after:            Wed 18 Sep 2024 19:26:11 +0000
asID:                     268020
IP address blocks:        45.167.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:eb:b9:d3:3f:3e:1b:02:a9:39:e1:49:02:ca:6f:4e:3b:02:fd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6580BDD93E3899BECA2788EB019377F40796F1AB
        Validity
            Not Before: Sep 20 19:21:11 2023 GMT
            Not After : Sep 18 19:26:11 2024 GMT
        Subject: CN=9610985D9CAF28507F1AA72B49FD3E76EA3699D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:03:29:14:76:6d:e3:7c:f7:1a:3a:43:6e:
                    8e:8c:bd:24:3a:bc:ab:7f:4b:63:ac:de:76:ee:ad:
                    cf:2c:d0:6d:e2:75:e9:f4:bd:71:07:9a:5f:85:98:
                    73:f5:d4:57:a6:98:33:99:16:b4:3a:a0:ec:ff:24:
                    40:d4:a0:6e:ab:57:0d:47:14:3c:dd:31:de:0c:ba:
                    58:77:10:0e:12:da:c6:05:0f:7b:6c:5b:73:f7:8c:
                    d0:dd:a5:71:85:a2:05:05:6a:32:73:84:3f:7f:dd:
                    4f:73:4a:49:03:50:85:55:6b:94:8c:e7:ba:d2:f2:
                    e9:03:57:32:20:65:d7:da:47:4b:21:35:96:41:06:
                    0a:42:31:68:c4:bf:bf:b7:42:ad:9c:d9:36:e7:00:
                    cd:b6:52:e4:39:1c:88:0f:b3:e7:d0:0e:ad:6d:10:
                    5e:06:e1:f3:fe:6e:26:df:cd:0a:0b:96:41:0e:3a:
                    e6:84:7f:0a:ef:ac:18:bb:1d:54:15:0a:1a:f4:cd:
                    30:fd:0a:e8:47:f4:49:70:1b:23:be:ea:40:c3:28:
                    68:3c:65:17:51:6d:5b:7c:a0:44:f8:f2:09:ad:32:
                    09:2c:55:be:70:4c:5f:af:54:5a:46:38:bf:c4:01:
                    12:b4:38:9a:52:13:78:f4:b5:4e:e7:18:fd:5c:f0:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:10:98:5D:9C:AF:28:50:7F:1A:A7:2B:49:FD:3E:76:EA:36:99:D9
            X509v3 Authority Key Identifier:
                keyid:65:80:BD:D9:3E:38:99:BE:CA:27:88:EB:01:93:77:F4:07:96:F1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/6580BDD93E3899BECA2788EB019377F40796F1AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6580BDD93E3899BECA2788EB019377F40796F1AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/34352e3136372e382e302f32322d3232203d3e20323638303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:03:36:7f:f7:e7:19:75:dc:1b:f7:22:32:59:12:b0:5b:
         60:98:5f:2f:bf:d3:6d:42:66:73:a0:60:8c:20:56:9c:83:41:
         e8:d2:1f:ec:da:13:19:1f:28:e0:63:70:fb:ea:80:d9:eb:4d:
         1b:a4:78:49:6a:1a:2a:ad:6b:cc:96:a7:be:99:c9:26:db:aa:
         78:80:28:7a:54:f3:4e:fd:00:e1:dc:21:c3:c4:d1:a4:00:74:
         a3:59:ed:42:00:e3:64:42:1a:f4:d3:2c:50:fe:06:37:f7:c2:
         30:a9:bd:a5:d4:e1:13:e8:c9:aa:78:80:13:da:2a:c9:9b:eb:
         6b:32:cb:84:fc:0b:29:c1:78:81:df:1d:b6:83:dc:f4:43:54:
         a5:f4:a7:c3:af:f0:da:ad:56:de:9e:2b:9d:60:bf:be:66:89:
         45:ed:d5:93:07:ed:ea:6d:1f:5f:17:56:f1:1b:b6:94:7f:41:
         cf:a6:e7:a9:4e:b4:f6:cf:30:b0:0e:5b:1b:7e:94:0a:56:de:
         1b:12:8f:79:a1:91:e6:f9:4e:d0:ae:c2:1c:f2:f1:14:84:6e:
         4c:55:d5:34:3b:6a:53:59:fb:e0:67:a8:39:f0:90:e9:5e:bd:
         94:4c:68:76:ba:87:38:ab:c4:d7:a5:8b:f6:8a:be:a2:2c:57:
         d7:49:d3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org