Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38302e302f32322d3232203d3e20323637333435.roa
File:                     34352e3233342e38302e302f32322d3232203d3e20323637333435.roa (raw, json)
Hash identifier:          wGD2yrBe8eG/1NuYan48SvGlx+wIENdm4ocaWeAiTK0=
Subject key identifier:   54:9D:50:98:29:1D:10:C4:7C:0D:35:EC:07:05:81:E3:75:6A:39:FB
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       0E00ED944842A73160283B837EEBEB598DF02B3C
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38302e302f32322d3232203d3e20323637333435.roa
Signing time:             Fri 29 Sep 2023 13:00:00 +0000
ROA not before:           Fri 29 Sep 2023 12:55:00 +0000
ROA not after:            Fri 27 Sep 2024 13:00:00 +0000
asID:                     267345
IP address blocks:        45.234.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:00:ed:94:48:42:a7:31:60:28:3b:83:7e:eb:eb:59:8d:f0:2b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Sep 29 12:55:00 2023 GMT
            Not After : Sep 27 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:50:6e:75:a9:cc:fa:d3:c9:ba:0d:3d:6b:
                    84:57:ca:c2:a2:c5:8e:62:ab:a2:53:fb:30:b2:e1:
                    6b:52:de:22:f8:31:33:86:84:5c:be:ca:f7:c4:26:
                    d3:a1:7c:23:cb:0f:10:cf:7f:4a:c5:1b:30:1f:80:
                    2a:d8:1b:73:52:70:ed:30:c4:4a:19:9b:52:73:27:
                    6f:b6:c0:24:5e:bd:f7:64:e9:96:99:4d:cd:9b:9e:
                    46:fc:ab:5e:ff:8a:f4:b4:58:2a:01:89:dc:af:ec:
                    dd:98:49:c2:d0:4d:fc:5d:d0:1e:33:15:94:bd:f6:
                    a9:c3:7e:d8:63:d6:51:aa:5f:93:ad:31:4e:69:52:
                    af:f5:ac:b0:be:44:1a:a1:e7:bc:e2:47:68:9d:35:
                    cb:77:6c:80:22:57:3a:1e:00:c1:42:c2:9f:ba:d3:
                    cd:68:8c:13:81:15:e5:4a:56:b3:c6:39:62:ea:59:
                    85:d4:6f:53:a6:a2:89:3c:e7:a3:48:34:dc:2d:08:
                    bf:e5:ee:ae:ef:09:f6:b2:5e:bb:3a:44:d6:19:70:
                    4c:42:39:c9:62:3d:ad:bd:c4:20:36:ab:1c:6c:8e:
                    de:ac:57:02:da:0f:86:35:3d:c9:74:1d:ef:3f:71:
                    00:1f:89:c6:9d:27:19:9e:15:06:74:c7:29:8d:c3:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9D:50:98:29:1D:10:C4:7C:0D:35:EC:07:05:81:E3:75:6A:39:FB
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38302e302f32322d3232203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:c7:6e:86:b9:19:e4:ff:0a:f7:53:b1:4c:9e:e3:15:1b:6a:
         d8:4b:6b:ad:fa:53:3f:f5:b9:dc:dd:3e:16:b3:28:4b:b1:54:
         03:89:2d:ee:92:10:26:50:93:85:57:77:86:f5:1e:05:aa:ce:
         59:e6:34:23:c2:01:89:69:a1:f7:b9:bc:7d:fc:38:81:aa:f8:
         6e:18:14:9c:e8:3d:c5:0b:30:c6:84:92:c2:95:db:09:06:28:
         ff:ea:ca:e3:d4:a2:7e:e7:c1:7c:ce:ad:d3:01:04:f2:6f:ba:
         64:01:1a:60:60:cf:61:fd:af:e8:2c:07:d2:e1:e3:c1:bd:60:
         3c:33:e3:dc:ad:45:c1:59:09:eb:c4:20:bf:a5:56:66:7d:da:
         41:af:18:a7:86:49:c0:8a:20:3f:80:f5:1e:73:7e:ba:5e:e1:
         08:12:66:f6:2c:eb:01:a7:10:fa:88:29:01:32:63:ca:0b:44:
         68:ae:88:cd:fd:c4:68:ae:97:20:f0:a8:4a:c9:ab:65:f1:05:
         91:48:d9:b4:a2:3a:60:3d:95:be:aa:19:d2:87:7b:a3:fb:02:
         85:af:ac:da:d1:cc:20:1b:e4:bb:86:07:bc:44:cc:c5:d0:9d:
         06:fe:62:91:ba:38:53:aa:85:59:18:4a:52:0b:ee:c1:aa:35:
         cf:08:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org