Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/34352e3137352e32362e302f32332d3233203d3e20323638383739.roa
File:                     34352e3137352e32362e302f32332d3233203d3e20323638383739.roa (raw, json)
Hash identifier:          xrqYN05hS+WR2TDJ/yG4PwJCZXAVbdwoB8c2KP1o7/A=
Subject key identifier:   FD:5A:BD:AB:64:A6:22:70:17:76:50:5D:2D:6D:59:07:C1:56:E0:A8
Certificate issuer:       /CN=82337F52BCD667E487FB8E99A59915EF7746BFAF
Certificate serial:       2E74809F741188BF954CF08B4CFC59045F01615A
Authority key identifier: 82:33:7F:52:BC:D6:67:E4:87:FB:8E:99:A5:99:15:EF:77:46:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82337F52BCD667E487FB8E99A59915EF7746BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/34352e3137352e32362e302f32332d3233203d3e20323638383739.roa
Signing time:             Tue 16 May 2023 14:12:04 +0000
ROA not before:           Tue 16 May 2023 14:07:04 +0000
ROA not after:            Tue 14 May 2024 14:12:04 +0000
asID:                     268879
IP address blocks:        45.175.26.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:74:80:9f:74:11:88:bf:95:4c:f0:8b:4c:fc:59:04:5f:01:61:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82337F52BCD667E487FB8E99A59915EF7746BFAF
        Validity
            Not Before: May 16 14:07:04 2023 GMT
            Not After : May 14 14:12:04 2024 GMT
        Subject: CN=FD5ABDAB64A622701776505D2D6D5907C156E0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:b6:6b:bb:d1:80:9c:fa:60:09:40:ac:65:
                    dc:fb:2b:0d:1a:90:81:f7:ca:69:23:67:8a:a0:c0:
                    d8:bf:96:01:2c:5f:88:75:d4:f7:7c:dc:3c:a6:df:
                    8f:b1:3b:d7:33:b8:74:9f:24:ba:f8:bb:4d:c2:7f:
                    1e:03:67:a9:18:77:2c:53:c0:73:b3:39:ba:d1:de:
                    24:10:ca:5b:ac:ed:cd:2a:c2:8f:bb:88:2c:6e:c2:
                    5a:94:0e:c1:58:08:12:9f:0a:b7:e8:1f:f6:77:8d:
                    ce:0d:8b:7d:32:ec:ee:8b:50:4d:9d:f4:1d:e3:2a:
                    b2:1a:55:9a:b4:3c:b1:34:3f:cb:09:28:2a:1b:1a:
                    e5:bc:7b:87:cf:a5:e9:21:25:fa:b5:05:49:6e:cd:
                    e3:88:9c:d0:e8:ab:ce:5b:88:fb:7e:37:19:3d:e5:
                    91:49:48:34:b2:ce:df:85:17:4f:fd:c0:15:c5:0b:
                    42:48:57:6a:c6:67:70:5a:6b:3d:92:c3:a4:d0:b0:
                    d1:13:05:7e:c0:39:2d:cd:c8:09:bb:13:e8:1f:33:
                    8f:dd:de:e6:35:2b:4c:c0:3c:13:64:bd:12:ae:f8:
                    d1:a7:42:6a:63:75:b5:7f:09:ae:fc:83:60:75:c1:
                    c6:ec:d0:f9:f9:92:52:8b:b1:8b:c0:b5:78:21:d3:
                    ed:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5A:BD:AB:64:A6:22:70:17:76:50:5D:2D:6D:59:07:C1:56:E0:A8
            X509v3 Authority Key Identifier:
                keyid:82:33:7F:52:BC:D6:67:E4:87:FB:8E:99:A5:99:15:EF:77:46:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/82337F52BCD667E487FB8E99A59915EF7746BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82337F52BCD667E487FB8E99A59915EF7746BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/34352e3137352e32362e302f32332d3233203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:2f:db:49:e6:28:01:a0:7f:2a:cc:66:2e:2f:90:f3:78:dc:
         3d:4a:c0:c5:30:fc:18:50:f7:5e:4d:5d:d8:5a:4d:51:89:2c:
         28:16:b3:7d:06:f8:85:6b:23:19:f1:89:fb:7d:31:df:61:68:
         a7:30:44:86:87:a5:f1:72:63:30:88:d8:b1:17:62:e9:7b:7b:
         d3:7b:5b:ed:7a:89:f5:09:70:8d:f9:04:08:56:6a:be:b7:09:
         fc:9d:03:b5:59:7d:63:d2:b6:6c:9c:24:21:23:39:81:af:09:
         1c:c1:b8:21:ec:18:db:0a:a4:16:8c:65:f3:16:96:79:ed:88:
         ab:7c:88:1c:67:dc:80:9b:ee:7b:2a:af:00:dc:67:7b:a9:de:
         5d:67:1c:cc:42:e9:b5:a6:55:ff:0d:d3:94:7e:d3:7a:27:5c:
         d0:a4:b6:a3:b4:e4:cf:1b:82:c5:16:4e:60:6d:78:46:77:4c:
         3a:1a:93:ee:eb:4d:13:c0:f6:67:9d:02:3a:c0:e2:96:25:ac:
         a6:6f:ab:38:a5:50:ed:b1:15:ab:37:9e:11:a2:d1:94:5b:93:
         6e:20:8c:b5:2f:29:47:97:af:7b:f0:20:c0:33:64:d4:4b:ce:
         8e:53:e0:3e:60:f9:3a:5a:f1:7e:02:35:fb:5a:70:b8:61:8c:
         22:5d:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org