Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa
File:                     34352e3232382e38362e302f32332d3233203d3e20323637303637.roa (raw, json)
Hash identifier:          VV953xZddArSTfaVtX//YrOkCF4Cwz/2pPqmZ4my/5k=
Subject key identifier:   78:F0:BA:DF:67:1C:B6:39:27:BA:63:F8:58:82:F5:0E:20:63:6D:CA
Certificate issuer:       /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial:       3A6BC46500D00EC4EC91C379C867E3E90B00C2BB
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa
Signing time:             Fri 23 Feb 2024 14:40:53 +0000
ROA not before:           Fri 23 Feb 2024 14:35:53 +0000
ROA not after:            Fri 21 Feb 2025 14:40:53 +0000
asID:                     267067
IP address blocks:        45.228.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6b:c4:65:00:d0:0e:c4:ec:91:c3:79:c8:67:e3:e9:0b:00:c2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
        Validity
            Not Before: Feb 23 14:35:53 2024 GMT
            Not After : Feb 21 14:40:53 2025 GMT
        Subject: CN=78F0BADF671CB63927BA63F85882F50E20636DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:46:a8:94:41:d1:67:6b:7a:9f:d7:60:17:0a:
                    24:2e:24:61:a8:78:dd:c2:0e:f2:a7:9c:f9:0c:11:
                    4e:32:d2:fb:3f:73:36:44:95:98:83:7e:7c:81:be:
                    4a:43:97:e8:24:fd:aa:e9:4d:4b:59:40:fd:1b:0b:
                    29:30:53:5d:e3:58:4b:5f:25:7a:77:7e:44:16:02:
                    55:d9:47:7b:45:bf:46:a2:03:34:62:ad:38:b9:e2:
                    8c:82:f8:a0:a8:b6:82:4e:20:60:1c:71:ff:a2:e8:
                    d6:df:a6:c7:94:87:6c:f5:5f:b6:72:57:07:fc:c7:
                    56:92:ca:76:e6:0b:50:04:b8:ac:c7:61:99:79:77:
                    2e:ad:7d:24:8d:4c:bf:20:0e:cf:c3:be:60:76:66:
                    27:a9:65:3a:6e:ac:b8:18:bc:17:60:86:b1:88:90:
                    e6:2e:0d:f8:e0:2c:f0:b3:61:6a:0d:52:67:36:2f:
                    c7:3c:09:7d:d5:80:c1:bd:e7:17:e2:e2:0b:3a:f4:
                    50:40:08:c6:ca:d9:05:d0:80:69:a1:88:58:eb:56:
                    30:a1:c3:69:72:12:02:3f:12:e1:e4:97:5f:e3:c8:
                    27:05:f6:7a:cf:d7:e1:4f:36:f6:d7:2a:7f:ce:56:
                    1f:e0:21:c9:de:5a:1a:35:3d:de:b7:b8:c2:4a:a4:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:BA:DF:67:1C:B6:39:27:BA:63:F8:58:82:F5:0E:20:63:6D:CA
            X509v3 Authority Key Identifier:
                keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:f0:ef:5a:b6:5f:9b:4f:0f:ae:1d:d4:6e:e5:7e:f2:df:63:
         67:c9:76:0f:31:f8:b5:28:ff:2a:fd:20:c7:15:46:43:d4:46:
         77:3e:85:bd:75:4e:b4:d0:01:25:9a:cc:f3:1c:3e:71:6b:ed:
         87:87:dc:5e:43:7c:78:ad:75:d1:1f:fa:62:df:fd:5a:b1:28:
         d5:ea:84:b4:84:3e:b8:b5:df:be:6f:bd:d0:a1:2d:d5:de:d7:
         36:00:eb:e4:a8:3d:97:9f:d9:9f:e0:dc:ad:e5:6b:d3:38:dd:
         40:e2:2a:1c:61:40:15:9a:28:54:7a:3e:1f:26:57:d4:58:83:
         ce:cc:cc:a0:d5:06:81:2b:2e:ea:31:d1:68:c2:c2:20:9e:b0:
         aa:c7:e0:0f:3e:54:c0:34:56:14:8b:40:54:3b:65:9f:1b:0f:
         9b:81:dd:c6:66:cc:05:e3:f4:04:37:55:91:62:97:99:d8:85:
         57:c7:ca:65:22:c5:3c:9f:3b:89:30:c5:e8:98:b0:2c:e6:9d:
         28:b9:04:58:57:07:bf:9e:f2:9b:24:f2:d9:a2:1c:21:d0:0e:
         4f:98:55:b1:8a:84:d2:76:f5:52:a4:cf:19:dd:a0:64:87:9f:
         54:88:44:cc:85:14:18:b1:43:f4:0e:95:fe:33:f8:2e:c5:81:
         51:d5:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org