Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa
File:                     34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa (raw, json)
Hash identifier:          HPYvmFwEW/ZNQEOjUviByM0KncK3S3zCGlJtJAQJUXA=
Subject key identifier:   88:10:40:52:B6:B9:26:A6:0A:52:8B:D4:40:4E:5A:3F:24:83:E4:7C
Certificate issuer:       /CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
Certificate serial:       356F8C72FEB3DAE829DFD9CD393F0AB2AAA9BF05
Authority key identifier: 75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa
Signing time:             Mon 04 Dec 2023 02:08:27 +0000
ROA not before:           Mon 04 Dec 2023 02:03:27 +0000
ROA not after:            Mon 02 Dec 2024 02:08:27 +0000
asID:                     269699
IP address blocks:        45.191.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6f:8c:72:fe:b3:da:e8:29:df:d9:cd:39:3f:0a:b2:aa:a9:bf:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
        Validity
            Not Before: Dec  4 02:03:27 2023 GMT
            Not After : Dec  2 02:08:27 2024 GMT
        Subject: CN=88104052B6B926A60A528BD4404E5A3F2483E47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:67:fc:88:3d:74:4b:18:e2:fb:59:29:30:
                    56:67:86:1f:db:1d:e7:98:e0:8e:b9:7c:a0:a5:41:
                    af:ea:52:a3:f2:29:b5:64:79:15:b5:b0:c6:6c:48:
                    2d:3e:6f:1e:cd:95:cb:03:54:b1:6f:78:ba:33:c3:
                    bb:f8:42:4e:dc:10:39:c3:ee:23:e9:90:c2:97:bd:
                    a5:8d:cb:8f:3e:ea:cf:c1:ea:4c:85:9a:53:07:f5:
                    94:90:ea:a8:b1:22:05:72:e9:86:d3:47:fd:43:04:
                    49:2d:f5:71:45:47:f3:f5:10:d5:40:0f:42:ca:df:
                    09:a0:65:1b:38:c0:85:78:30:9b:79:37:70:a2:ce:
                    52:74:28:8d:03:6a:74:2a:22:72:22:74:a0:ee:0e:
                    27:23:5d:3a:41:d0:bb:65:21:c9:36:e9:6f:58:a7:
                    d5:70:ac:cf:d0:47:d1:4c:78:7f:fb:b7:8c:e8:70:
                    4e:97:1e:d9:4d:69:36:2f:a2:22:df:a5:8f:9a:c2:
                    5b:7b:94:71:ef:c6:d3:b5:82:5e:95:1f:6c:29:00:
                    d7:33:a2:5d:7f:a6:d6:16:0a:75:f5:10:b5:b9:a1:
                    28:08:6b:a2:0d:7c:62:44:08:81:71:ea:6c:38:da:
                    f6:70:e6:d6:b1:8e:a2:d3:3e:c9:05:60:28:ca:5b:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:40:52:B6:B9:26:A6:0A:52:8B:D4:40:4E:5A:3F:24:83:E4:7C
            X509v3 Authority Key Identifier:
                keyid:75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:67:fe:e8:2c:3d:10:ce:a7:10:9d:77:ce:73:d8:bd:c9:
         13:95:e3:16:f8:b1:19:6c:ca:ca:99:71:e1:83:28:e4:ed:21:
         d4:8e:eb:18:ef:81:6c:41:0d:44:5d:c4:e2:fb:a8:21:d1:7f:
         52:af:a6:a0:1e:85:7e:dc:16:5f:65:bb:4b:2b:19:c0:7f:3f:
         7f:b5:97:04:30:53:79:6c:70:df:ca:7e:6a:94:9b:34:35:f2:
         92:23:f5:ad:6f:49:0c:e8:d9:58:5f:b6:93:eb:de:15:53:af:
         4f:4e:23:e1:05:86:c3:fb:04:f7:57:d0:56:96:b5:a6:c7:ba:
         d2:7f:9b:86:41:c2:00:85:fb:c3:48:e8:5d:10:f9:88:74:c3:
         61:be:5d:d5:c3:a2:da:74:e2:eb:3e:91:76:c6:cf:5c:62:d0:
         73:28:ee:56:fc:e6:8d:81:8b:32:4d:8f:e1:12:70:44:b6:1e:
         a8:af:7a:e8:ec:50:12:ba:4d:c1:5e:22:dc:f7:53:bc:60:06:
         f4:35:22:b9:4e:55:77:6a:ab:22:81:41:17:b8:38:62:bc:34:
         14:ca:ef:d3:d8:38:f8:1d:d9:65:f0:98:51:6b:62:c7:1d:14:
         56:c7:f2:70:91:cd:85:55:b8:c1:e7:e3:cc:55:2d:a4:49:e1:
         fe:79:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org