Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32322d3234203d3e20323639333638.roa
File:                     34352e3138352e3130302e302f32322d3234203d3e20323639333638.roa (raw, json)
Hash identifier:          Qqxg8S/GPSBG5XB9RiO+KcGth5h9Qr6JqnPUWIvGD4s=
Subject key identifier:   B1:DE:2E:31:82:4A:DF:58:1C:4E:E9:2F:5B:1D:A4:54:BD:0E:AF:E0
Certificate issuer:       /CN=19E98883E3A673317F3AC927DE191C45EBB4241D
Certificate serial:       14CD021E52BF120806E0184786934CAEE822E8DD
Authority key identifier: 19:E9:88:83:E3:A6:73:31:7F:3A:C9:27:DE:19:1C:45:EB:B4:24:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19E98883E3A673317F3AC927DE191C45EBB4241D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32322d3234203d3e20323639333638.roa
Signing time:             Sat 28 Oct 2023 15:25:19 +0000
ROA not before:           Sat 28 Oct 2023 15:20:19 +0000
ROA not after:            Sat 26 Oct 2024 15:25:19 +0000
asID:                     269368
IP address blocks:        45.185.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cd:02:1e:52:bf:12:08:06:e0:18:47:86:93:4c:ae:e8:22:e8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19E98883E3A673317F3AC927DE191C45EBB4241D
        Validity
            Not Before: Oct 28 15:20:19 2023 GMT
            Not After : Oct 26 15:25:19 2024 GMT
        Subject: CN=B1DE2E31824ADF581C4EE92F5B1DA454BD0EAFE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:e3:cf:44:e4:ed:55:b5:e5:3e:6f:37:48:
                    0d:d7:dd:42:01:aa:c1:d0:c6:3f:da:48:3a:0d:31:
                    22:3d:ac:77:13:63:1f:f2:fd:14:3b:5a:a6:4b:61:
                    4b:66:57:c6:2c:8b:4b:50:36:a2:c6:e0:61:ff:33:
                    a1:f8:d9:ae:f3:94:c0:16:b1:3a:11:f3:ca:b0:c6:
                    2e:dd:e3:f3:1e:1b:5e:28:9f:07:0c:74:f7:0b:30:
                    6d:02:99:51:a2:0a:c3:e5:8e:e7:f1:47:e8:1c:13:
                    8f:22:2a:06:ed:51:59:c4:b5:5c:8e:e3:d9:03:49:
                    4d:62:66:ac:d8:c3:49:d6:d2:09:57:d3:60:4b:1e:
                    73:93:82:18:ca:8d:ea:53:a8:00:1d:15:d9:73:a6:
                    18:62:36:ba:ab:59:9f:03:3f:28:20:01:19:0b:b5:
                    a0:69:89:43:08:ca:fe:5c:82:d3:82:63:fa:17:a1:
                    67:c6:e2:b3:c8:2c:ed:90:e0:5e:4d:6c:0f:5a:38:
                    d7:c1:b6:d1:2d:ce:da:14:55:10:0d:b2:a0:72:01:
                    2a:ab:55:2f:e5:6b:fb:09:bb:88:6f:bb:37:7e:17:
                    fe:80:29:70:dd:15:77:0e:77:41:37:3f:2d:9a:a1:
                    68:fb:91:a9:02:b7:c0:e2:79:17:42:17:ea:fa:15:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DE:2E:31:82:4A:DF:58:1C:4E:E9:2F:5B:1D:A4:54:BD:0E:AF:E0
            X509v3 Authority Key Identifier:
                keyid:19:E9:88:83:E3:A6:73:31:7F:3A:C9:27:DE:19:1C:45:EB:B4:24:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/19E98883E3A673317F3AC927DE191C45EBB4241D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19E98883E3A673317F3AC927DE191C45EBB4241D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32322d3234203d3e20323639333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:38:3e:75:72:d6:8b:88:50:3e:25:62:fe:4f:74:bb:40:69:
         32:a6:3d:78:5f:24:8f:45:45:eb:5f:c0:41:62:e9:c3:1f:5e:
         fa:60:2e:9e:69:10:79:06:2d:dd:86:cc:ee:f8:36:be:f8:9d:
         ea:e9:8e:93:a4:ec:96:c4:44:eb:4a:59:41:50:c9:db:7a:fb:
         d3:f0:1b:e5:4c:9f:5a:f2:70:48:81:6b:c1:e1:c4:9d:49:4e:
         09:f5:c6:73:58:6c:00:d2:c3:f6:7e:36:05:16:1c:d9:d5:8f:
         c1:48:2a:cd:c1:b4:85:7e:92:be:7c:48:10:e0:2c:b6:84:81:
         cb:60:75:11:65:32:c2:35:7e:c3:7f:2e:32:c8:c9:a3:8b:b6:
         6d:ad:fd:10:bc:15:4e:87:0c:c5:e4:41:0b:6a:7e:ff:ff:e0:
         f7:b6:cf:c8:7a:6f:4f:55:47:22:7f:ca:3a:31:d2:70:61:e5:
         09:5e:67:90:11:43:59:a8:9d:73:0c:4c:bd:ff:b4:f4:74:5b:
         0e:55:b9:36:9d:2e:08:97:cd:fc:0f:e8:d8:62:93:5a:28:27:
         29:c9:c9:83:29:d3:68:8a:23:5b:85:cc:5a:a7:ca:c6:d4:6e:
         91:48:93:74:4e:3d:14:2b:00:3b:b6:8f:9c:78:de:c5:5a:90:
         04:3d:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org