Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31372e302f32342d3234203d3e20323639323534.roa
File:                     34352e3138332e31372e302f32342d3234203d3e20323639323534.roa (raw, json)
Hash identifier:          GYgtiNYhqnuiqFOZLFQqIZ71ZwlHVMNDa4pT+PHRnII=
Subject key identifier:   DC:CB:66:EF:02:BA:88:F9:E9:7B:C2:6E:C4:B4:87:05:C1:38:54:58
Certificate issuer:       /CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
Certificate serial:       5F50EFA7AD385770FE71B7F0FD986828AB3D90EB
Authority key identifier: 47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31372e302f32342d3234203d3e20323639323534.roa
Signing time:             Tue 15 Aug 2023 14:31:13 +0000
ROA not before:           Tue 15 Aug 2023 14:26:13 +0000
ROA not after:            Tue 13 Aug 2024 14:31:13 +0000
asID:                     269254
IP address blocks:        45.183.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:50:ef:a7:ad:38:57:70:fe:71:b7:f0:fd:98:68:28:ab:3d:90:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
        Validity
            Not Before: Aug 15 14:26:13 2023 GMT
            Not After : Aug 13 14:31:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:12:6d:04:c5:55:f9:b4:cc:b9:ba:a0:68:
                    8d:7b:b2:ec:0e:78:ff:9c:de:dc:d5:6b:38:86:f0:
                    45:0e:2c:b1:8b:de:8c:bc:f7:f4:00:6d:ec:d0:67:
                    ff:56:a8:21:9f:23:1d:12:e9:2d:01:59:96:6b:a0:
                    c1:82:fb:3e:3d:0b:ef:aa:b9:35:97:d0:7c:96:d2:
                    a5:76:13:51:80:c2:ba:f2:ab:3b:d1:09:45:de:99:
                    67:b7:2f:40:09:38:6c:38:5c:16:0c:06:bf:d2:f7:
                    01:fe:30:3d:2d:21:a2:f0:60:71:f7:df:c4:d3:d8:
                    ed:f8:fc:a2:4b:39:e4:11:ac:06:16:da:e5:d9:94:
                    11:04:6f:21:d5:69:48:bb:c3:63:09:5c:3b:7b:6d:
                    34:df:36:24:c0:bb:51:06:8c:9e:4d:29:58:c7:69:
                    56:7e:6a:a9:d5:9d:9d:fd:a3:fe:8e:5f:83:4e:b7:
                    1f:18:48:6e:05:b5:7b:98:72:82:aa:77:cb:b7:d8:
                    a3:d8:84:14:34:d6:1b:8c:57:6f:88:b1:ae:c3:8f:
                    b3:2f:59:ff:a1:7e:8a:bd:89:23:b1:ad:16:75:eb:
                    cb:b7:18:f6:6a:d0:46:94:e4:87:62:01:2e:1e:ff:
                    9e:bf:15:37:f2:44:52:89:0b:93:f8:2d:85:c7:ca:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CB:66:EF:02:BA:88:F9:E9:7B:C2:6E:C4:B4:87:05:C1:38:54:58
            X509v3 Authority Key Identifier:
                keyid:47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31372e302f32342d3234203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:e8:b4:db:bb:68:f5:4b:e0:74:3b:5e:35:b3:99:20:59:30:
         6a:0d:b6:bb:37:46:63:51:c2:1c:fe:ef:25:b0:34:15:d2:6f:
         32:8e:43:e9:64:2e:91:df:a4:af:a3:a2:1d:a8:c0:6c:83:c1:
         08:73:70:98:0c:ce:cf:d3:02:fa:99:c3:16:3f:46:e0:f7:0b:
         60:78:e4:ec:41:81:5b:e3:9e:ed:fc:01:2c:7c:fc:09:3f:06:
         52:4d:b3:14:41:20:79:e5:27:2f:82:1b:af:0d:46:de:d2:c9:
         70:13:b1:b6:c7:f2:00:93:a8:16:da:31:fd:01:ef:36:e4:56:
         cc:1a:17:0c:06:10:aa:bf:17:52:cd:bd:9c:eb:ab:66:87:c1:
         38:57:62:74:2d:2b:3f:4e:fb:bb:c7:cb:26:a9:8c:b7:5c:ea:
         26:06:f6:ae:d3:5f:9b:c6:15:5a:bc:30:5c:7c:18:08:ff:33:
         cd:73:d0:95:e8:a2:93:99:24:c4:7f:3d:b9:bd:e5:50:5f:46:
         aa:ca:ad:e8:ba:fb:5e:25:e7:d5:cd:55:eb:51:7d:6f:32:df:
         ab:d2:c8:39:77:02:48:fb:86:87:a8:cc:5a:dd:e3:0f:8e:0b:
         92:e6:a5:12:aa:d0:8b:92:c1:be:08:5c:3e:3a:87:28:c3:09:
         ac:7d:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org