Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/0/34352e3137352e38382e302f32322d3234203d3e20323638383932.roa
File:                     34352e3137352e38382e302f32322d3234203d3e20323638383932.roa (raw, json)
Hash identifier:          vZNgiw7KezWacA4m4bae0ReRm3UEkys5eyp3wmLcRD8=
Subject key identifier:   AF:C8:FE:34:26:B3:20:4C:65:B3:93:93:98:AB:00:97:D0:35:E2:BF
Certificate issuer:       /CN=D07D0E789DEF36602F6DBE5DAADE860BEE92E8E7
Certificate serial:       38FACE5349778E7AC5ACCB58DB809AEBB076F8D1
Authority key identifier: D0:7D:0E:78:9D:EF:36:60:2F:6D:BE:5D:AA:DE:86:0B:EE:92:E8:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D07D0E789DEF36602F6DBE5DAADE860BEE92E8E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/0/34352e3137352e38382e302f32322d3234203d3e20323638383932.roa
Signing time:             Fri 20 Oct 2023 18:39:26 +0000
ROA not before:           Fri 20 Oct 2023 18:34:26 +0000
ROA not after:            Fri 18 Oct 2024 18:39:26 +0000
asID:                     268892
IP address blocks:        45.175.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fa:ce:53:49:77:8e:7a:c5:ac:cb:58:db:80:9a:eb:b0:76:f8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D07D0E789DEF36602F6DBE5DAADE860BEE92E8E7
        Validity
            Not Before: Oct 20 18:34:26 2023 GMT
            Not After : Oct 18 18:39:26 2024 GMT
        Subject: CN=AFC8FE3426B3204C65B3939398AB0097D035E2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:eb:a5:32:bf:36:cb:e8:2a:89:df:f3:61:40:
                    95:97:3e:b4:74:11:1a:8f:23:5e:60:72:45:aa:ca:
                    d1:a4:2f:0e:6c:8a:8f:e2:a7:50:8c:e0:a2:dc:dc:
                    af:50:c0:a7:ba:4e:13:9e:76:80:0a:f5:ea:4b:2a:
                    31:cd:dc:ca:30:20:b4:f6:0c:18:a6:1a:ed:1e:c9:
                    f4:8c:86:e3:d3:ed:ac:d6:59:76:c5:8f:fa:6f:a5:
                    84:56:04:9e:5a:0c:a3:22:0b:2e:2f:d7:e5:a8:9c:
                    f0:56:3f:2f:da:5c:82:6e:3f:77:65:cd:35:29:68:
                    6f:98:c6:a0:d5:6b:d0:58:68:75:fd:5f:b0:ac:58:
                    31:01:5a:aa:f3:34:08:cc:bf:3a:eb:4c:32:92:2a:
                    7b:10:a8:81:f0:91:6c:43:12:04:54:00:39:23:67:
                    0e:03:e7:eb:da:4d:5b:73:7f:c1:73:e5:fc:2b:a9:
                    27:93:11:80:38:23:61:d6:a8:04:85:b4:c0:4d:55:
                    f9:c3:53:10:c1:fa:89:5e:d5:b9:ea:7c:aa:67:9d:
                    b4:6a:d1:f4:b4:97:df:75:a7:79:00:b9:25:01:4b:
                    47:39:df:76:3c:a5:22:6b:3a:22:7f:8e:ac:3c:22:
                    84:ec:7a:67:dc:1e:72:a2:c8:38:42:7e:e1:4d:51:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:FE:34:26:B3:20:4C:65:B3:93:93:98:AB:00:97:D0:35:E2:BF
            X509v3 Authority Key Identifier:
                keyid:D0:7D:0E:78:9D:EF:36:60:2F:6D:BE:5D:AA:DE:86:0B:EE:92:E8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/0/D07D0E789DEF36602F6DBE5DAADE860BEE92E8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D07D0E789DEF36602F6DBE5DAADE860BEE92E8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/0/34352e3137352e38382e302f32322d3234203d3e20323638383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:a8:f6:93:17:07:ed:e6:7f:ea:39:0c:34:f8:58:71:88:b7:
         6c:b8:3b:c8:b2:f5:12:bd:23:0c:5f:c7:ba:d4:fd:19:2d:91:
         8c:b1:cc:5b:97:e8:da:78:2c:eb:50:68:3a:b9:8f:d4:3c:86:
         fa:91:17:a2:6f:c2:fa:ee:37:0b:17:99:75:27:cd:8d:77:29:
         99:52:3a:71:c9:7f:f3:01:24:32:23:2f:aa:38:a7:3c:fa:ed:
         0e:f5:89:d5:0c:89:08:a9:3e:e4:c0:90:d1:1e:0b:6e:ad:17:
         65:35:9f:3b:85:58:0b:54:95:cd:b0:5d:e8:df:2b:9c:00:14:
         0b:08:8a:93:f9:1d:56:25:87:c4:63:ed:5d:b6:c8:fe:5e:4c:
         eb:34:8a:6d:3d:8d:84:73:e4:5e:a3:72:66:18:66:f0:cb:15:
         a3:8b:c0:8c:85:41:41:88:0f:a2:39:80:79:dc:9d:c9:29:4c:
         a6:8c:2a:d3:19:5e:79:ce:9b:3b:e5:c9:89:57:63:8d:52:10:
         96:f8:ca:b6:87:f1:24:d9:a7:2d:89:42:60:06:ea:03:0b:ab:
         d4:61:43:c5:19:30:e5:90:1f:dc:dd:53:bc:6a:a4:e7:33:a6:
         e7:a5:18:a5:b1:7a:11:b7:51:0a:a2:d4:24:0b:65:f7:41:39:
         a6:f4:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org