Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/34352e3137362e31322e302f32322d3234203d3e20323638393238.roa
File:                     34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (raw, json)
Hash identifier:          u+h5G9aYA/q3Jwx35QTDJVa20bc4uDPL+u0bJF7klsw=
Subject key identifier:   98:55:BF:72:07:CC:AA:79:37:A0:AF:B6:48:E3:51:D9:A3:01:F2:C3
Certificate issuer:       /CN=C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6
Certificate serial:       0A44C585C1EF8D8F5997B4D35EFD40F1EDBDFA2F
Authority key identifier: C4:0E:E4:EB:2A:E8:7D:ED:80:AE:96:46:F1:8D:1D:0E:9E:56:CB:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/34352e3137362e31322e302f32322d3234203d3e20323638393238.roa
Signing time:             Tue 05 Dec 2023 19:01:20 +0000
ROA not before:           Tue 05 Dec 2023 18:56:20 +0000
ROA not after:            Tue 03 Dec 2024 19:01:20 +0000
asID:                     268928
IP address blocks:        45.176.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:44:c5:85:c1:ef:8d:8f:59:97:b4:d3:5e:fd:40:f1:ed:bd:fa:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6
        Validity
            Not Before: Dec  5 18:56:20 2023 GMT
            Not After : Dec  3 19:01:20 2024 GMT
        Subject: CN=9855BF7207CCAA7937A0AFB648E351D9A301F2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:ca:b0:3d:93:06:bc:e3:1c:14:09:59:12:
                    b7:2a:b2:86:b6:4b:8b:cc:bb:73:7e:4a:57:98:5b:
                    54:f3:08:d7:8c:69:7b:de:78:71:f8:88:00:b2:ed:
                    e2:75:4a:dc:61:ca:88:dc:3d:97:1d:ae:82:f2:ad:
                    46:1e:7e:a8:3b:b7:15:ad:f9:0e:17:dd:cd:65:7d:
                    26:0d:e3:35:4e:b2:57:7a:09:a0:ff:9f:9c:61:f4:
                    6c:5b:af:7e:13:66:a2:27:98:7a:d7:a7:6a:19:40:
                    7b:84:fa:57:4f:40:f4:3c:c6:ba:59:a5:e7:61:78:
                    a4:5d:0b:3c:12:b5:f2:cf:87:f3:59:1f:eb:1f:b3:
                    14:d5:6b:cd:d1:7f:4c:cc:c0:99:c3:b7:0b:d1:00:
                    24:c5:a8:bc:82:28:38:46:04:84:6f:1d:4f:63:ef:
                    0d:fd:f2:b4:4c:33:46:3d:62:11:e7:aa:18:32:76:
                    7d:fa:4c:e8:b8:d6:f4:7a:8d:98:02:68:83:35:5e:
                    8d:f4:8e:02:53:32:9f:3b:cb:ad:a6:1a:1f:28:20:
                    ae:68:f2:74:c9:9e:7e:ad:12:e6:f5:96:34:54:0e:
                    c7:b4:7d:2a:a8:4c:db:7f:06:7c:fc:17:56:70:1f:
                    d2:02:62:cb:71:20:8d:66:37:ba:cc:0a:fc:d8:6f:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:55:BF:72:07:CC:AA:79:37:A0:AF:B6:48:E3:51:D9:A3:01:F2:C3
            X509v3 Authority Key Identifier:
                keyid:C4:0E:E4:EB:2A:E8:7D:ED:80:AE:96:46:F1:8D:1D:0E:9E:56:CB:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/34352e3137362e31322e302f32322d3234203d3e20323638393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:fb:fb:f7:37:0a:6c:5c:2f:0e:14:5e:a2:1d:5b:4e:1a:57:
         b3:24:1e:68:c1:20:ad:72:07:91:f5:da:32:7b:8f:93:39:14:
         7c:c6:59:4a:2e:3c:72:35:4a:72:d5:2d:a9:0b:27:16:dc:ff:
         83:9a:fe:5d:4d:77:5d:7d:6d:25:0c:10:c1:b8:42:6b:dd:e3:
         76:3c:6e:2a:b5:3e:ef:d2:c4:32:85:84:3f:d3:2f:8b:47:05:
         d5:51:2e:3a:3c:da:8e:c5:02:bb:e6:fa:e3:e8:06:e1:81:d3:
         55:4c:80:03:4c:4e:4a:0c:13:98:b5:53:27:a8:9d:80:f1:2c:
         2d:7d:43:b0:c6:ed:e2:df:99:ce:9d:4f:58:48:b4:af:1d:5c:
         33:39:ae:1e:06:45:ec:42:21:37:fa:48:23:a4:84:54:c0:07:
         60:2f:1e:70:2f:fb:85:21:2a:4d:ea:ce:ee:fb:48:9d:52:d9:
         1c:c3:50:c1:2d:c7:8b:56:17:6a:91:a5:87:98:d0:7c:2d:1d:
         70:76:31:dd:cb:3e:f1:cd:7c:bf:03:aa:de:9d:9a:43:32:27:
         a7:3a:8b:20:5b:86:87:44:69:3a:1a:fb:6e:2f:fd:53:11:e0:
         a2:c0:3c:5b:ce:e4:e5:98:93:38:85:6d:24:9e:c6:dd:d9:54:
         42:68:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org