Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/1/34352e3136392e342e302f32332d3233203d3e20323638303830.roa
File:                     34352e3136392e342e302f32332d3233203d3e20323638303830.roa (raw, json)
Hash identifier:          kJS777Xpk7K+WhrmkyoWlLoIMqaMmlzdHdm67fv3s2w=
Subject key identifier:   73:3E:23:21:52:94:61:70:48:84:F7:42:34:61:07:ED:26:A0:4D:83
Certificate issuer:       /CN=B89763062F5BAA9E5BD4A7505B3701993C286AAC
Certificate serial:       6C8890CACE77814E628E01C1E8536E055EEA2DE9
Authority key identifier: B8:97:63:06:2F:5B:AA:9E:5B:D4:A7:50:5B:37:01:99:3C:28:6A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B89763062F5BAA9E5BD4A7505B3701993C286AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/1/34352e3136392e342e302f32332d3233203d3e20323638303830.roa
Signing time:             Thu 04 Apr 2024 06:12:39 +0000
ROA not before:           Thu 04 Apr 2024 06:07:39 +0000
ROA not after:            Thu 03 Apr 2025 06:12:39 +0000
asID:                     268080
IP address blocks:        45.169.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:88:90:ca:ce:77:81:4e:62:8e:01:c1:e8:53:6e:05:5e:ea:2d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89763062F5BAA9E5BD4A7505B3701993C286AAC
        Validity
            Not Before: Apr  4 06:07:39 2024 GMT
            Not After : Apr  3 06:12:39 2025 GMT
        Subject: CN=733E2321529461704884F742346107ED26A04D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bb:aa:c7:24:2f:e6:81:12:e1:89:b9:c5:6b:
                    59:bd:fc:27:ba:4d:b0:a4:e1:26:19:5b:84:d0:0d:
                    f8:36:3f:92:e4:20:ce:ad:9d:17:dc:aa:50:d2:d2:
                    44:8d:60:3b:2f:69:54:46:2a:22:be:ea:a7:b6:cb:
                    6a:69:03:07:59:5f:86:cf:a1:ab:c9:a4:16:49:21:
                    e3:f2:eb:db:2e:96:1d:98:3c:14:e5:56:53:5f:bd:
                    33:e7:57:21:ea:59:4f:3c:0f:dc:0f:ac:c1:28:0f:
                    f2:b2:46:22:52:92:70:bd:e0:08:a3:a2:10:9f:69:
                    6b:1b:14:ff:fe:1e:0d:80:d2:e9:c7:16:1b:bf:76:
                    58:0f:cc:ad:0b:f8:92:29:58:35:2c:79:e0:6c:68:
                    7b:43:ce:c9:b3:20:9d:b7:c4:65:68:2a:1e:d0:11:
                    0b:b2:ce:5a:00:8e:5f:86:71:14:14:c4:5f:f6:a9:
                    76:46:db:00:94:8c:50:d5:af:9d:fc:f0:35:0d:5e:
                    2a:77:b0:d5:d0:bf:71:a1:5c:e6:4e:27:bb:75:7e:
                    ad:91:ec:1d:6b:29:2f:87:12:6a:df:c8:7d:1f:85:
                    bb:54:5a:2b:c7:a7:d8:9e:f6:63:eb:e5:13:da:8c:
                    0f:43:00:32:ae:b0:e8:3d:70:44:5c:4c:25:a4:05:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3E:23:21:52:94:61:70:48:84:F7:42:34:61:07:ED:26:A0:4D:83
            X509v3 Authority Key Identifier:
                keyid:B8:97:63:06:2F:5B:AA:9E:5B:D4:A7:50:5B:37:01:99:3C:28:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/1/B89763062F5BAA9E5BD4A7505B3701993C286AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B89763062F5BAA9E5BD4A7505B3701993C286AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/1/34352e3136392e342e302f32332d3233203d3e20323638303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:17:47:2d:b5:f2:c3:9d:22:2c:61:ee:c4:e0:c8:ec:85:ab:
         fc:46:ac:0a:af:7b:ed:5d:94:43:94:e9:10:65:c1:d6:94:3f:
         f3:3f:73:cd:98:e5:7d:b9:be:e5:cc:d5:47:60:05:6d:50:ae:
         91:ec:75:e6:79:ad:5b:bf:21:19:a2:8b:c9:e0:be:2c:7c:91:
         08:9d:c7:b7:60:42:4b:f3:74:d9:ad:b8:ff:36:88:06:0f:f6:
         24:8d:4f:fa:90:b2:61:6d:5a:94:91:7a:e6:2b:a7:6e:8a:a9:
         8f:1c:34:b6:27:be:1f:ce:30:5a:44:3b:f5:3f:9d:5f:e1:f0:
         ac:5f:bd:57:3a:83:7e:57:12:a5:70:ed:4c:de:34:58:ba:8b:
         bf:16:f1:9f:71:89:6a:2a:ae:6f:94:8d:52:2f:d0:09:05:71:
         a2:63:aa:aa:f6:c9:ac:e4:95:83:c8:78:34:08:8d:7e:0f:7c:
         b4:e5:07:25:c0:06:3a:72:5b:5e:81:58:06:db:63:09:7b:8c:
         8a:e9:b6:aa:30:96:ca:a1:e1:5b:9e:b7:0f:a0:d9:f2:c3:59:
         3d:e8:89:ec:2d:47:cf:12:62:b1:02:da:ad:1f:0b:e3:15:0e:
         4b:68:c0:ec:4a:3e:ef:9d:bc:9c:df:b7:43:16:4e:ec:85:b3:
         70:8a:5d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org