Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/34352e3233382e3132382e302f32322d3234203d3e203533323330.roa
File:                     34352e3233382e3132382e302f32322d3234203d3e203533323330.roa (raw, json)
Hash identifier:          qW8LTMJwKJ4rTrmSPsfOTMZds7rDQ9y9kIIV0PSrsok=
Subject key identifier:   B1:BC:FE:69:0D:7B:40:BA:88:A3:42:FB:8B:C6:77:DF:ED:75:42:43
Certificate issuer:       /CN=C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963
Certificate serial:       653ECFC96B863D490ADC5BC17A1621167BC81815
Authority key identifier: C5:BA:C0:57:CD:6E:7D:6B:44:75:B5:D2:75:E1:DB:63:F3:B8:B9:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/34352e3233382e3132382e302f32322d3234203d3e203533323330.roa
Signing time:             Tue 19 Mar 2024 18:20:23 +0000
ROA not before:           Tue 19 Mar 2024 18:15:23 +0000
ROA not after:            Tue 18 Mar 2025 18:20:23 +0000
asID:                     53230
IP address blocks:        45.238.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3e:cf:c9:6b:86:3d:49:0a:dc:5b:c1:7a:16:21:16:7b:c8:18:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963
        Validity
            Not Before: Mar 19 18:15:23 2024 GMT
            Not After : Mar 18 18:20:23 2025 GMT
        Subject: CN=B1BCFE690D7B40BA88A342FB8BC677DFED754243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:71:b8:d6:4f:97:e6:65:6c:5d:67:cf:49:1c:
                    e3:ea:be:6f:b3:be:96:a9:b6:11:26:7f:09:7a:cb:
                    09:38:21:9d:2a:b6:cf:12:3f:76:03:e7:ef:75:bd:
                    32:a2:e4:0e:78:0c:f0:54:87:44:06:fd:17:6c:26:
                    bb:94:c7:61:9a:09:0d:ac:d8:79:8c:e4:bd:36:6e:
                    47:13:fe:1a:0f:72:ee:dc:7f:6c:dc:36:58:05:72:
                    c6:60:9f:09:6d:cc:11:7f:d0:bd:b1:34:9b:7a:29:
                    d5:9a:10:8c:4a:89:92:48:2f:40:8f:36:68:ff:b4:
                    48:2c:a5:7c:d5:8e:ee:77:9b:70:83:31:83:29:10:
                    27:08:ea:03:a9:04:b7:b5:be:dd:70:c9:67:08:d5:
                    58:28:f4:9a:d1:22:c8:05:75:3a:f8:48:f5:b0:a4:
                    c8:18:1e:95:e1:3a:da:47:cd:12:da:3a:5b:a5:97:
                    f3:3d:4a:bb:49:5c:86:9a:1b:7d:8a:ad:6a:41:37:
                    57:c2:e2:a3:6b:e3:ab:8a:81:9f:0f:f9:53:85:5b:
                    56:10:61:57:e5:25:c7:fd:16:2d:2e:52:74:7d:6e:
                    db:ee:00:77:23:68:7f:ec:55:21:25:e6:38:c2:5d:
                    32:5f:ce:51:d7:7e:40:73:35:bb:a9:72:b3:0c:b8:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:FE:69:0D:7B:40:BA:88:A3:42:FB:8B:C6:77:DF:ED:75:42:43
            X509v3 Authority Key Identifier:
                keyid:C5:BA:C0:57:CD:6E:7D:6B:44:75:B5:D2:75:E1:DB:63:F3:B8:B9:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/34352e3233382e3132382e302f32322d3234203d3e203533323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c1:03:b1:88:4a:6d:6e:90:de:5c:59:b6:70:74:9b:58:57:
         81:10:45:d4:9a:0e:2c:fa:ce:58:9f:a4:5c:11:40:b4:78:7f:
         74:d2:65:76:5b:b0:a8:a5:32:bb:1e:4b:79:74:6e:22:a7:32:
         44:8a:99:1d:5e:33:3a:c8:60:33:b1:97:e5:da:3f:fb:9d:88:
         e7:a9:75:72:bc:f4:05:9c:8f:f4:ee:0e:e7:3f:16:97:6c:2d:
         40:66:fb:a6:8d:83:3a:00:9d:86:77:e6:a4:c2:41:29:9a:6a:
         79:d0:23:17:fe:59:bf:97:62:2c:f0:d6:78:5d:54:38:06:0b:
         ce:c3:6f:c5:1f:ea:8b:f5:76:cc:4b:51:6d:bd:9c:f6:1f:bc:
         ae:16:3f:d8:ad:fa:4f:e8:ef:44:95:0d:5e:98:df:1e:5b:93:
         21:7b:6d:eb:15:3a:eb:e6:5d:cd:13:94:a1:e2:cc:96:41:2e:
         c1:0e:aa:b2:0c:2e:67:a1:37:a0:f5:64:a2:62:84:fa:58:68:
         7b:58:a9:65:16:6e:1e:71:a0:dd:f9:9d:fb:4e:ba:3e:f7:c5:
         5b:d5:c4:d5:ef:95:c1:45:72:b3:20:a2:a9:93:ca:3a:05:64:
         93:d3:05:8b:0e:ce:80:f5:56:92:b0:f6:1b:6f:fa:ee:7a:4f:
         78:9b:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org