Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa
File:                     34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (raw, json)
Hash identifier:          MCE6clYZa/T/M5WXTuow/f1rkM4k/TiRrjIe/1LEbX8=
Subject key identifier:   22:BF:9D:47:3E:D1:33:66:86:89:6A:56:81:3D:3C:C5:F3:10:15:81
Certificate issuer:       /CN=1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83
Certificate serial:       26498C426421346F765F2F84CC1D8051CB52534A
Authority key identifier: 19:58:E2:EE:1D:E5:BD:7B:EC:25:BD:3D:D0:4A:8E:B0:2F:CB:0E:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa
Signing time:             Sun 17 Mar 2024 02:05:13 +0000
ROA not before:           Sun 17 Mar 2024 02:00:13 +0000
ROA not after:            Sun 16 Mar 2025 02:05:13 +0000
asID:                     267142
IP address blocks:        45.229.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:49:8c:42:64:21:34:6f:76:5f:2f:84:cc:1d:80:51:cb:52:53:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83
        Validity
            Not Before: Mar 17 02:00:13 2024 GMT
            Not After : Mar 16 02:05:13 2025 GMT
        Subject: CN=22BF9D473ED1336686896A56813D3CC5F3101581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:50:aa:02:22:93:55:c0:0d:3d:be:c3:39:a2:
                    0d:5a:01:69:e8:08:63:23:93:f6:97:fb:96:f1:74:
                    fe:c9:06:3b:ab:14:c6:f6:91:c8:96:2f:30:ea:3a:
                    00:62:9d:42:f9:f9:e9:75:72:3f:56:b9:59:5b:43:
                    aa:ed:1e:87:a5:86:7e:e1:f3:78:8f:cf:ff:d6:d4:
                    9f:a5:a7:e5:91:2d:43:2d:96:16:a8:0c:42:05:a2:
                    0b:55:f8:11:0b:e2:48:56:5d:f3:b9:db:de:80:41:
                    c8:e1:17:1c:ad:97:8c:6e:87:40:72:c9:8a:7d:d3:
                    f7:84:9f:b6:98:1d:49:68:91:89:e6:d0:10:73:f5:
                    1f:57:4d:f0:8c:a3:f6:40:6c:5c:cf:8d:49:d5:50:
                    c4:7b:e5:45:c4:d4:28:4d:4f:14:66:3e:ef:e2:62:
                    1b:b9:7f:25:1c:6e:8b:a1:f6:f1:e4:4d:da:bb:ed:
                    5f:12:32:91:e8:a4:29:0f:a7:14:b0:31:f4:b8:26:
                    8a:56:39:ea:e0:e3:de:95:fb:16:4d:11:f6:39:e5:
                    c1:37:b0:2e:2d:2e:4d:27:4a:37:aa:0a:ee:8e:8d:
                    b1:33:14:b9:b8:61:75:20:6e:15:13:26:36:1c:45:
                    0f:7b:05:b4:9d:ce:fa:08:1f:f5:5c:84:ae:e6:64:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BF:9D:47:3E:D1:33:66:86:89:6A:56:81:3D:3C:C5:F3:10:15:81
            X509v3 Authority Key Identifier:
                keyid:19:58:E2:EE:1D:E5:BD:7B:EC:25:BD:3D:D0:4A:8E:B0:2F:CB:0E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:ed:e8:9f:64:f5:f2:68:59:be:3a:1d:00:66:d1:5b:31:5d:
         72:8d:91:bc:51:fb:41:dd:fb:56:db:b8:66:5b:e7:e4:95:36:
         da:1e:7c:03:12:e7:57:40:c6:09:3a:93:4e:b6:a4:5c:21:2f:
         e8:61:a8:d9:34:a0:8a:d1:eb:4e:fb:c8:4f:aa:89:95:96:99:
         6c:fa:21:07:db:23:93:f4:69:c6:33:d2:4a:ba:e8:e9:25:05:
         ed:2d:57:8c:b8:f1:28:a5:0a:57:71:09:79:e8:4a:84:0d:b6:
         70:62:ec:d6:5e:1e:52:a1:91:02:ec:df:87:d3:f8:25:f0:67:
         42:6d:57:f0:8f:92:6e:5e:b7:8e:18:da:f8:e8:f4:39:15:65:
         8b:0a:1e:fe:e6:7b:18:a8:09:73:5c:f8:56:06:eb:05:13:74:
         40:d3:b4:85:66:73:a2:ee:a0:44:29:f9:77:2d:3d:4d:72:88:
         74:18:00:3b:27:4a:7a:c3:26:0c:5b:dd:c8:03:02:1a:4c:79:
         ce:33:98:e2:6f:e5:5e:59:c0:a4:79:83:02:73:4c:a2:70:56:
         73:4e:ec:76:d1:14:d4:90:85:bc:d1:e3:70:60:43:ee:83:bf:
         19:aa:e4:b9:82:c3:e1:be:17:11:af:39:46:14:fe:44:18:02:
         96:bc:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org