Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32322d3234203d3e20323639343434.roa
File:                     34352e3138362e3136342e302f32322d3234203d3e20323639343434.roa (raw, json)
Hash identifier:          s+NjuVkQXu4YC6tEsG9ELsbmdYfWs0pu7ekywD3UxBc=
Subject key identifier:   85:CE:D5:6D:DB:59:C0:CC:32:CF:33:73:7F:C3:80:5C:1F:35:06:A8
Certificate issuer:       /CN=23DD08B01CB87C4A59C18D3779D05E4941011A7B
Certificate serial:       2E8F405B22498257755D750F266FBC598E33CD27
Authority key identifier: 23:DD:08:B0:1C:B8:7C:4A:59:C1:8D:37:79:D0:5E:49:41:01:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32322d3234203d3e20323639343434.roa
Signing time:             Wed 20 Dec 2023 17:34:28 +0000
ROA not before:           Wed 20 Dec 2023 17:29:28 +0000
ROA not after:            Wed 18 Dec 2024 17:34:28 +0000
asID:                     269444
IP address blocks:        45.186.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8f:40:5b:22:49:82:57:75:5d:75:0f:26:6f:bc:59:8e:33:cd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23DD08B01CB87C4A59C18D3779D05E4941011A7B
        Validity
            Not Before: Dec 20 17:29:28 2023 GMT
            Not After : Dec 18 17:34:28 2024 GMT
        Subject: CN=85CED56DDB59C0CC32CF33737FC3805C1F3506A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:9c:08:67:67:0f:d1:4e:a3:b7:30:57:bd:
                    68:33:ef:29:e8:8c:fe:65:67:88:e2:08:8c:2d:5f:
                    dc:3c:3b:33:ae:75:66:62:a3:7f:78:4d:f5:c8:e7:
                    a2:86:19:b8:e4:0f:60:79:15:c4:0b:f4:8d:3c:ec:
                    e3:70:06:de:e8:84:2f:a1:69:63:d2:50:83:27:1b:
                    4f:c4:97:f6:b7:15:36:9e:ff:26:bc:c5:38:9f:ac:
                    18:96:11:6c:a3:d2:b6:f6:e4:b2:15:82:c4:cb:10:
                    59:fd:ef:8b:62:14:85:dc:83:c3:fb:66:de:2c:26:
                    5a:d6:cc:44:4f:62:37:bd:04:3f:cf:ac:52:a9:6e:
                    c3:63:02:36:dc:5e:b1:36:e1:0d:52:87:53:2f:9d:
                    10:cc:31:d7:bb:ee:11:7b:59:ad:fa:85:10:5f:26:
                    f9:aa:4a:27:5b:c4:68:38:f3:38:8a:a9:ac:4f:0a:
                    3e:a2:06:92:ae:c9:88:6f:e7:cc:d1:da:36:42:ee:
                    e7:74:6f:67:64:22:c9:2c:45:a5:e1:de:08:a8:99:
                    f3:4b:48:cf:c5:14:09:bb:d3:73:b5:0d:ce:37:e4:
                    cb:cd:a0:90:d1:ea:6d:22:53:24:b9:a3:f0:37:95:
                    a1:9b:94:e6:78:f7:d9:b7:72:68:dd:1a:a2:f7:4f:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CE:D5:6D:DB:59:C0:CC:32:CF:33:73:7F:C3:80:5C:1F:35:06:A8
            X509v3 Authority Key Identifier:
                keyid:23:DD:08:B0:1C:B8:7C:4A:59:C1:8D:37:79:D0:5E:49:41:01:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32322d3234203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:51:85:54:bc:e1:d2:ed:31:96:78:35:69:d1:c5:5b:d4:40:
         ae:6c:c0:da:23:9a:9f:ec:fe:c5:48:1d:1a:b7:a4:e2:a6:72:
         ad:08:be:99:15:63:81:db:9a:7b:71:bd:58:f0:f7:8d:4a:19:
         e4:ab:bc:61:c3:70:dd:c0:bb:c6:36:33:32:92:a6:b4:77:a6:
         cb:55:62:7b:22:c6:1f:d4:73:da:d3:2f:f0:21:b0:b1:c6:1f:
         8e:34:46:f3:25:b5:7d:90:09:27:fd:ee:20:aa:ba:d7:64:9b:
         38:cc:aa:a4:78:2e:3e:81:4a:10:1e:80:a7:a1:57:0e:d4:ba:
         56:fc:46:e1:3f:63:96:86:60:c1:58:9f:c8:e2:20:9e:6c:8b:
         fb:1a:01:4a:dd:09:89:e2:8f:83:15:ed:16:36:fe:ad:c0:71:
         d1:80:bd:af:b5:18:b0:04:23:0b:ea:c9:55:92:9e:5d:d0:65:
         e8:f4:8b:9b:80:1d:6a:1b:78:6c:5c:7d:25:e6:ae:55:82:d3:
         8d:2d:29:1d:1d:07:8e:9e:3b:62:70:ec:1b:80:37:5e:e5:9e:
         0c:99:43:83:22:28:35:76:0f:3d:4c:62:4d:02:0e:71:c0:65:
         bc:9b:a5:54:0f:a0:54:07:6b:0b:9b:e4:03:61:b4:93:2a:d1:
         be:4b:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org