Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/34352e3233332e3138382e3132382f32352d3235203d3e20323637333438.roa
File:                     34352e3233332e3138382e3132382f32352d3235203d3e20323637333438.roa (raw, json)
Hash identifier:          /dznwKcEa1PsN9jxxQ4BeBuljtWZWpLpppUQpbDdoas=
Subject key identifier:   FD:4C:31:C2:7F:F9:93:5F:68:56:0A:CB:4F:81:5C:EF:3D:60:5C:4F
Certificate issuer:       /CN=E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377
Certificate serial:       3AE0EFF5439A23304194ACD74A227939CE21466B
Authority key identifier: E5:67:0D:DE:4A:17:4A:43:C6:A5:D5:CC:4A:EE:E3:DD:71:51:23:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/34352e3233332e3138382e3132382f32352d3235203d3e20323637333438.roa
Signing time:             Tue 09 Jan 2024 18:03:55 +0000
ROA not before:           Tue 09 Jan 2024 17:58:55 +0000
ROA not after:            Tue 07 Jan 2025 18:03:55 +0000
asID:                     267348
IP address blocks:        45.233.188.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e0:ef:f5:43:9a:23:30:41:94:ac:d7:4a:22:79:39:ce:21:46:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377
        Validity
            Not Before: Jan  9 17:58:55 2024 GMT
            Not After : Jan  7 18:03:55 2025 GMT
        Subject: CN=FD4C31C27FF9935F68560ACB4F815CEF3D605C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:f1:15:85:a7:cc:d6:a8:d9:82:9b:63:e0:
                    86:f7:a5:1b:5d:0b:a5:37:60:cd:72:85:fd:25:49:
                    6d:e9:7d:a9:e8:78:ed:7e:b1:ac:e5:4e:52:42:39:
                    a4:59:ad:36:89:ae:9e:96:aa:56:ba:03:7c:87:af:
                    53:fc:ef:3e:9e:5b:da:72:8f:6d:9b:c1:88:76:2a:
                    99:6c:cb:ac:73:56:71:e0:be:2e:de:8c:81:95:1c:
                    56:4a:b5:4f:be:8f:95:b8:8a:3f:45:c4:de:48:f6:
                    59:08:e6:61:07:97:40:56:be:51:49:cc:ff:79:fa:
                    02:34:f2:41:a2:21:4f:ff:39:43:1e:e8:86:cb:b5:
                    7f:9d:3a:f2:3b:e5:f3:33:7a:af:16:de:3d:38:f6:
                    4b:01:c6:04:f1:ad:cb:1f:a5:8c:07:2c:77:f6:69:
                    48:8f:a1:e2:9b:d3:cd:60:55:f6:ef:4c:d2:fb:8b:
                    30:cf:12:af:af:8d:04:21:a8:a3:66:ff:4b:d8:64:
                    62:be:b9:c6:d8:2d:ee:b0:07:d1:71:59:8d:b0:51:
                    5e:e9:9d:70:24:4f:5e:a0:99:ba:27:d6:0a:2c:b9:
                    85:8a:45:7e:0b:82:a1:25:15:e4:47:75:01:77:89:
                    34:0e:c3:55:3e:a8:b5:c1:40:76:70:43:a5:e9:c1:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4C:31:C2:7F:F9:93:5F:68:56:0A:CB:4F:81:5C:EF:3D:60:5C:4F
            X509v3 Authority Key Identifier:
                keyid:E5:67:0D:DE:4A:17:4A:43:C6:A5:D5:CC:4A:EE:E3:DD:71:51:23:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/34352e3233332e3138382e3132382f32352d3235203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.188.128/25

    Signature Algorithm: sha256WithRSAEncryption
         ad:e6:b8:fe:54:19:7b:60:c3:ff:e2:8a:8b:09:cb:94:12:d0:
         24:0e:c6:fe:1e:9e:2d:a5:65:da:02:60:60:68:cd:43:47:eb:
         a8:d2:11:7e:c8:de:2e:2b:1b:df:76:96:a4:ca:5f:bc:b3:34:
         7f:27:3b:63:21:84:d2:5f:88:5f:f6:a8:e4:5d:f8:29:23:3e:
         58:ae:e2:4e:4a:5e:c7:61:83:92:95:7f:7c:8c:26:58:8f:e7:
         bb:30:e4:23:e3:59:d3:3d:22:51:87:b8:e6:49:fa:23:9b:e2:
         8a:f0:31:b7:37:6b:40:eb:3d:f5:1d:df:1a:1a:52:96:fc:93:
         9c:84:14:9a:3f:a2:0e:2a:1b:b1:0b:6a:70:06:d3:7d:5e:df:
         02:e4:05:fb:28:29:11:7f:ca:a1:5d:35:e2:d0:32:64:4f:39:
         8e:d0:d3:c9:da:f9:51:da:f7:8a:b0:03:7b:d9:5d:93:ad:a4:
         21:12:f7:ce:89:26:1b:f3:1b:eb:a3:a9:c0:83:98:11:71:a5:
         3d:44:55:f5:eb:c0:1f:55:41:de:60:ff:16:1a:36:0f:90:44:
         b7:26:e4:11:12:e3:c6:4d:c2:22:e0:7e:c1:2f:1b:3c:bb:1f:
         d8:c7:f9:66:60:0a:22:1b:1a:80:60:c4:db:8a:45:3f:c6:71:
         07:70:86:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org