Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35342e302f32342d3234203d3e20323639353738.roa
File:                     34352e3138392e35342e302f32342d3234203d3e20323639353738.roa (raw, json)
Hash identifier:          +WiUTdBt+eUvOXeKtvsDiBG66HsJp4Td9dNw8Gl/w/s=
Subject key identifier:   B9:3D:CF:8C:75:8E:6A:00:F2:47:84:7D:88:9E:48:BE:E8:CA:4D:78
Certificate issuer:       /CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
Certificate serial:       0C6A64194C603087F3E73F5E56ADA64F893431AF
Authority key identifier: CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35342e302f32342d3234203d3e20323639353738.roa
Signing time:             Mon 30 Oct 2023 20:56:57 +0000
ROA not before:           Mon 30 Oct 2023 20:51:57 +0000
ROA not after:            Mon 28 Oct 2024 20:56:57 +0000
asID:                     269578
IP address blocks:        45.189.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6a:64:19:4c:60:30:87:f3:e7:3f:5e:56:ad:a6:4f:89:34:31:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
        Validity
            Not Before: Oct 30 20:51:57 2023 GMT
            Not After : Oct 28 20:56:57 2024 GMT
        Subject: CN=B93DCF8C758E6A00F247847D889E48BEE8CA4D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:e9:f7:82:e8:c7:f8:e6:e3:7c:78:5a:af:
                    83:90:19:09:fc:44:75:30:2f:07:51:ae:6d:74:ec:
                    4c:d5:e1:1c:dc:13:9d:af:2b:b5:6a:d9:d1:b2:c6:
                    4a:df:7c:0f:68:82:7f:de:c3:84:bf:9e:aa:6c:28:
                    fe:60:73:1e:8a:c2:a5:b8:6a:df:61:53:b5:f7:c4:
                    2f:6f:ed:aa:60:3a:8e:6f:37:2c:a8:ec:e8:57:e2:
                    ab:b7:ce:f1:c7:20:f0:e4:b8:a9:8b:9d:8e:c4:14:
                    1b:d4:0b:b8:fe:9f:5e:4c:63:f3:86:3c:8f:f7:73:
                    a2:75:40:b6:f6:b3:62:0b:ed:48:19:b3:ce:35:04:
                    d1:42:60:a5:7c:3d:d2:0c:82:22:a3:0c:cc:ea:23:
                    3d:4d:71:be:cf:fe:0d:b4:80:15:ea:34:a2:75:0c:
                    31:57:1d:7f:9e:fe:35:bb:1f:ff:d9:9b:46:92:46:
                    93:74:a0:f3:0f:f0:68:1e:3e:24:ee:fc:f3:3a:0c:
                    b2:66:aa:73:ae:74:fa:13:a1:d3:50:8b:11:ca:e6:
                    71:62:86:42:e7:eb:07:11:25:84:94:f3:88:c5:92:
                    c6:85:37:91:ff:07:48:b6:23:25:3a:80:fd:a0:e1:
                    33:78:3d:9d:df:8a:c5:34:0a:e4:6f:14:93:20:b2:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3D:CF:8C:75:8E:6A:00:F2:47:84:7D:88:9E:48:BE:E8:CA:4D:78
            X509v3 Authority Key Identifier:
                keyid:CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35342e302f32342d3234203d3e20323639353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:0c:b9:a2:ca:20:9d:23:cd:9d:72:c7:10:d5:59:89:ff:
         2e:a4:cf:81:77:b8:73:6d:04:c8:44:26:b5:d6:39:68:1e:48:
         7e:03:6d:9f:2e:3b:07:c2:37:5d:a1:d1:64:66:0e:55:50:13:
         80:b7:df:f7:16:19:10:0e:f2:23:63:f8:6e:eb:b2:ec:9c:dc:
         ab:53:17:fd:82:bf:87:2d:f2:89:19:7d:92:66:72:6a:35:17:
         d9:12:e9:1e:76:4b:72:62:93:63:d3:fd:42:9e:44:39:40:66:
         f1:dc:91:01:e1:3b:f0:18:d0:bc:31:d5:45:14:b8:e0:bd:d4:
         90:7a:9e:20:2e:81:a9:e6:71:f0:70:33:d1:7a:a0:4f:2e:78:
         ca:57:2b:23:14:33:ee:d5:ea:7d:01:e1:02:15:ca:9a:c0:22:
         31:0d:05:94:9c:67:dd:e7:ba:72:2d:37:89:51:15:d4:79:ba:
         f9:e5:06:84:c5:71:d2:29:af:7a:fa:eb:b2:66:f4:c5:e0:cd:
         5e:4c:e7:dc:69:2f:c1:8e:20:05:c6:5f:37:e3:ab:c9:0a:b3:
         c6:9d:8d:f4:8f:29:06:2c:a2:d3:8a:84:1d:de:70:05:79:73:
         5c:e4:fc:54:1c:ca:3a:1b:7d:a1:1d:23:ac:17:74:ca:d8:a9:
         46:ea:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org