Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/34352e3232352e3136302e302f32322d3234203d3e20323633353639.roa
File:                     34352e3232352e3136302e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          IKwdKASLGn/58ccKrFLylTzRAsOWhAX5NTF12k824Nc=
Subject key identifier:   48:A0:E4:90:41:12:73:B7:AE:42:36:71:71:AE:AC:B2:2B:BA:DD:65
Certificate issuer:       /CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
Certificate serial:       410AF952C76694AAE7BED01507F87611E782EB8A
Authority key identifier: 47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/34352e3232352e3136302e302f32322d3234203d3e20323633353639.roa
Signing time:             Fri 11 Aug 2023 14:01:13 +0000
ROA not before:           Fri 11 Aug 2023 13:56:13 +0000
ROA not after:            Fri 09 Aug 2024 14:01:13 +0000
asID:                     263569
IP address blocks:        45.225.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0a:f9:52:c7:66:94:aa:e7:be:d0:15:07:f8:76:11:e7:82:eb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
        Validity
            Not Before: Aug 11 13:56:13 2023 GMT
            Not After : Aug  9 14:01:13 2024 GMT
        Subject: CN=48A0E490411273B7AE42367171AEACB22BBADD65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:e4:f8:b6:72:9e:d7:a6:44:1f:56:e9:e0:
                    ae:fb:df:ae:bb:a1:66:fa:f3:b5:5b:f5:ac:3d:9f:
                    0d:fa:4b:81:b9:72:45:d5:e3:c3:25:fb:d3:4e:7d:
                    79:8f:3c:f7:50:22:ca:98:4d:fb:c9:0b:59:e3:5f:
                    ff:a8:a1:71:3e:4c:1a:d2:d3:fc:d7:c5:43:84:a3:
                    fa:d2:71:59:fb:18:d6:5b:7e:21:95:47:5b:15:73:
                    43:16:87:1d:cb:cc:de:e1:17:00:9a:5f:68:35:68:
                    93:31:71:8f:58:d0:b2:90:35:bb:bb:76:f4:e3:18:
                    e5:f8:50:8b:d0:05:01:4b:d6:74:88:5f:0e:6c:05:
                    73:b5:41:4a:d6:44:28:65:f2:2f:3c:29:ed:dc:51:
                    9e:8c:5b:c5:a5:10:3e:77:03:45:ff:db:38:eb:55:
                    e5:e0:b2:68:0e:cb:99:5c:8a:0a:e9:d2:14:21:a4:
                    81:ea:8d:89:59:20:f7:ab:59:15:c2:5d:60:fc:68:
                    05:5d:f8:3a:1b:18:73:4a:07:f6:c5:a8:ee:7f:80:
                    eb:b7:c0:f7:12:3d:bc:93:0d:b5:01:e7:25:b1:bc:
                    f0:77:a3:e1:78:42:63:54:d4:bc:9d:07:c5:b3:c2:
                    44:bb:2d:31:99:39:64:de:2e:8e:fe:e5:ca:47:95:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A0:E4:90:41:12:73:B7:AE:42:36:71:71:AE:AC:B2:2B:BA:DD:65
            X509v3 Authority Key Identifier:
                keyid:47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/47598FC43095FBBAC65DD11244210ED67DD9A40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/34352e3232352e3136302e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:f8:5d:e5:47:c0:ee:48:a9:c9:a5:7c:33:5d:d0:e9:49:1a:
         cb:79:72:a2:cb:6e:b3:87:bd:6a:27:3f:ae:69:71:51:eb:c1:
         f2:57:1c:90:7d:25:1a:dc:28:54:8e:67:35:08:9b:ff:b8:0a:
         e1:5c:f6:ea:95:aa:ea:80:5a:17:4a:ee:8e:2c:f9:fd:a2:3a:
         7e:3a:3b:15:ae:55:a5:9b:b5:c0:f1:b1:ca:a7:9e:07:30:59:
         d3:ac:f9:aa:29:41:17:02:10:6e:99:41:4e:2d:25:d3:28:53:
         6d:9c:13:1c:09:94:3d:ef:6c:4b:8d:6a:83:e6:d1:18:4d:01:
         f0:75:0e:a6:54:b2:e6:a6:a8:62:30:76:62:a1:7d:64:cb:f4:
         5b:bd:3e:1c:18:fe:41:e7:ef:92:66:db:23:b0:c3:d2:90:cb:
         c4:ec:44:ef:d8:51:b3:70:47:e6:8a:9c:2c:1a:e3:03:4b:71:
         ac:96:70:b1:c0:8b:ea:6c:09:4b:1e:eb:70:00:02:dc:c8:cd:
         fa:9e:7f:61:e0:ab:6a:ee:1e:d2:9b:1e:19:a8:f0:f9:72:14:
         b7:91:b8:a8:68:27:14:17:13:4c:72:ee:4f:5b:22:e5:fe:fa:
         72:8d:6a:23:04:15:29:19:e5:e8:11:9b:05:38:e0:ce:45:b6:
         0e:26:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org