Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3232203d3e20323639313934.roa
File:                     34352e3138302e3231362e302f32322d3232203d3e20323639313934.roa (raw, json)
Hash identifier:          TNVJpLvZxImfRM8IbUgHOJvyL+ghPG+qFFR+2H/k4P4=
Subject key identifier:   AF:6B:18:03:F6:85:7F:C6:2A:58:F2:D9:27:A9:83:E4:55:B4:9D:3A
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       6D022F2AD3E9DBE52BC9E64287ECB1FA04450A18
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3232203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:42 +0000
ROA not before:           Sat 29 Jul 2023 16:21:42 +0000
ROA not after:            Sat 27 Jul 2024 16:26:42 +0000
asID:                     269194
IP address blocks:        45.180.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:02:2f:2a:d3:e9:db:e5:2b:c9:e6:42:87:ec:b1:fa:04:45:0a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:42 2023 GMT
            Not After : Jul 27 16:26:42 2024 GMT
        Subject: CN=AF6B1803F6857FC62A58F2D927A983E455B49D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:0c:5a:80:58:37:17:2f:46:ed:c9:12:8f:
                    12:34:4b:3c:70:db:3d:90:f3:80:85:57:98:7c:c9:
                    7a:f8:a0:c2:a9:06:b7:31:ba:13:46:dd:66:30:c4:
                    1c:8b:a3:21:34:65:bf:10:b0:c2:78:a8:6f:1c:5c:
                    5c:f2:6e:27:0c:f8:36:ae:17:82:9a:a4:54:34:f6:
                    a2:c2:7d:5e:5b:7a:d6:96:c9:8b:cc:a4:9e:4b:37:
                    ae:ce:cb:04:b2:18:e8:85:82:64:36:e2:f0:02:00:
                    66:32:70:86:c4:06:0d:bb:0a:0c:af:87:71:c7:a4:
                    ed:05:9f:a2:ef:33:62:4e:01:22:e6:b9:52:4b:41:
                    04:f4:23:2c:5a:e2:79:06:30:4b:74:ae:f8:52:0e:
                    85:37:17:8b:b9:30:05:08:90:d3:4e:5d:de:4a:f5:
                    99:24:22:89:6e:19:fd:0a:e1:60:ea:35:ae:78:0b:
                    51:34:28:c2:66:ca:20:a5:ce:31:12:49:f9:52:0c:
                    df:78:8c:62:35:cc:2d:1d:d4:af:0e:3d:1b:8c:4d:
                    cb:c3:51:0e:e6:d5:ec:90:00:2c:4d:78:4c:5c:04:
                    5d:cd:7c:d5:34:32:6a:68:be:05:8b:63:c1:78:ee:
                    7c:93:55:3c:eb:43:ab:cd:fd:36:e0:1a:b0:56:f1:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6B:18:03:F6:85:7F:C6:2A:58:F2:D9:27:A9:83:E4:55:B4:9D:3A
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3232203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:3d:a3:4e:54:e5:e0:1c:b6:0c:61:e4:15:c2:12:16:c4:5d:
         7a:c8:b1:94:78:81:0d:6e:b9:76:1c:e5:90:08:6d:65:8d:ea:
         81:b8:31:19:5d:c0:96:82:fd:bf:98:c7:8c:1f:45:a8:73:78:
         0b:9e:d7:1e:d9:c5:c8:ad:9a:09:70:e0:55:d6:1b:64:6d:e9:
         2c:e8:49:50:a9:4c:e6:33:4b:2b:ea:00:ef:03:92:4b:6e:0a:
         34:0a:8b:e5:85:21:1c:1d:ca:96:56:4c:e2:a0:03:bc:d7:32:
         99:ae:43:f1:36:ed:83:10:a6:f4:90:16:ba:49:ec:c5:d2:30:
         9b:22:86:a0:35:80:a7:c4:ab:39:7f:e4:2e:5c:70:33:88:ac:
         30:a0:93:27:e4:3c:3c:cd:76:ba:55:91:c9:7c:04:85:cb:03:
         09:30:de:c7:e7:04:17:a1:85:e3:ec:30:94:cf:8b:76:32:00:
         29:00:be:42:b1:d7:0f:15:d5:04:2a:49:13:ec:4a:9c:99:88:
         f6:71:0a:b2:44:cc:5d:c3:09:00:16:24:d4:be:76:74:2e:7c:
         19:1f:5e:5e:8b:41:c3:97:69:d6:8c:f8:d0:57:10:2c:6d:e4:
         a2:d3:74:db:7d:71:2e:7a:23:88:0e:72:ed:23:98:bb:d6:ee:
         4b:a7:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org