Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e35302e302f32332d3233203d3e20323637393532.roa
File:                     34352e3136362e35302e302f32332d3233203d3e20323637393532.roa (raw, json)
Hash identifier:          bCjmZ5kwWCzruuvUcigkdAAjxGTmnhQsSJoV74SF4hs=
Subject key identifier:   14:EA:76:B9:88:04:02:E4:79:C2:EF:30:C1:AC:31:81:49:FE:78:7C
Certificate issuer:       /CN=A5271CBBF4F29E00937C22B534454F96229BEF3F
Certificate serial:       3793C6931DB19F71C709DF00D0F4837C6933BE8B
Authority key identifier: A5:27:1C:BB:F4:F2:9E:00:93:7C:22:B5:34:45:4F:96:22:9B:EF:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5271CBBF4F29E00937C22B534454F96229BEF3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e35302e302f32332d3233203d3e20323637393532.roa
Signing time:             Wed 11 Oct 2023 13:10:27 +0000
ROA not before:           Wed 11 Oct 2023 13:05:27 +0000
ROA not after:            Wed 09 Oct 2024 13:10:27 +0000
asID:                     267952
IP address blocks:        45.166.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:c6:93:1d:b1:9f:71:c7:09:df:00:d0:f4:83:7c:69:33:be:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5271CBBF4F29E00937C22B534454F96229BEF3F
        Validity
            Not Before: Oct 11 13:05:27 2023 GMT
            Not After : Oct  9 13:10:27 2024 GMT
        Subject: CN=14EA76B9880402E479C2EF30C1AC318149FE787C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:94:eb:fb:93:9f:48:1b:3f:82:33:d2:21:
                    97:b7:fd:f0:a8:3b:4f:5e:b3:e8:7e:95:61:7f:ba:
                    e0:a4:d4:e3:c1:80:a8:ff:b2:05:0d:72:54:bb:2c:
                    9b:d3:a2:4b:f8:c2:24:2c:e1:da:12:2c:e4:51:38:
                    3f:91:0a:16:d9:a8:23:a9:1f:b9:f4:66:3b:b1:2f:
                    80:3c:4d:17:f8:98:5f:1c:28:f6:79:ee:d1:ff:4a:
                    a2:6e:0c:30:c4:d0:9b:a4:5b:9e:af:3b:75:df:73:
                    cc:83:87:5f:d8:61:ee:56:2f:6a:5c:10:85:66:1c:
                    cc:44:34:e8:29:77:9e:6e:11:80:16:2d:5f:7d:4b:
                    24:4f:ce:0d:ee:e3:4f:f6:96:36:7c:86:b4:c2:37:
                    63:01:c0:c6:bc:99:f5:53:44:06:4d:11:dd:2f:2d:
                    b5:63:3f:44:42:2b:a9:49:f5:d3:95:cf:7f:5a:6c:
                    5f:28:07:ea:e8:c8:43:a5:af:b8:ec:f8:42:81:2e:
                    2e:f5:45:be:ff:1c:cb:0d:87:2f:d7:2c:dc:95:15:
                    57:6b:88:a1:4e:fa:96:5d:69:e1:13:3e:28:21:27:
                    1d:c0:33:fd:35:c0:3a:b4:78:81:cf:6d:7e:fa:f0:
                    36:dc:7a:97:72:6b:a6:36:79:35:4a:60:ef:b6:c5:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:76:B9:88:04:02:E4:79:C2:EF:30:C1:AC:31:81:49:FE:78:7C
            X509v3 Authority Key Identifier:
                keyid:A5:27:1C:BB:F4:F2:9E:00:93:7C:22:B5:34:45:4F:96:22:9B:EF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/A5271CBBF4F29E00937C22B534454F96229BEF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5271CBBF4F29E00937C22B534454F96229BEF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e35302e302f32332d3233203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:6e:1e:63:d3:de:59:49:24:23:44:05:db:85:8c:e8:93:83:
         0a:9b:04:c8:db:ff:74:dd:a7:32:c3:0e:87:0e:0c:dd:25:92:
         39:ec:55:a5:58:dc:37:92:b8:55:7c:0b:91:71:c4:37:7b:e6:
         17:2d:ab:a6:60:6e:f0:64:7c:7d:39:cc:d0:33:22:35:5a:06:
         32:e4:75:70:63:9a:c3:e5:a9:d2:1c:20:3c:72:e5:91:95:0b:
         c0:22:34:f5:3e:70:e6:d9:d2:49:62:c8:3d:ba:fa:b7:ce:27:
         d9:a4:85:b7:22:8c:04:53:40:4b:4a:f4:cb:c6:8d:fa:f0:41:
         6b:a6:cf:bb:a7:ae:24:93:39:13:46:71:8c:26:27:35:90:3d:
         f2:27:af:3e:c0:c6:ac:ea:bf:8a:7c:de:60:48:c2:93:23:ef:
         21:16:20:a5:4c:8b:f7:d6:a9:91:ee:73:99:60:2e:bc:5f:95:
         ff:14:d6:76:8d:6a:1e:90:7b:51:2a:c5:b9:83:9a:bc:d1:da:
         b0:b0:d5:6f:ba:c9:94:d6:57:c3:39:cb:79:b0:59:60:38:81:
         c1:be:2e:cf:f4:0f:cd:47:10:79:f9:3e:86:d7:cb:3a:a6:22:
         ad:94:71:4b:b1:ab:64:7c:12:b3:13:dc:37:98:cc:8f:9f:c6:
         e4:fa:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org