Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32322d3332203d3e20323639323538.roa
File:                     34352e3233392e3134302e302f32322d3332203d3e20323639323538.roa (raw, json)
Hash identifier:          RfRVoA/A329UHywnmc0FRu9KTDncheA8rHt+6dL/c2k=
Subject key identifier:   D8:39:F9:FD:71:40:E2:80:1E:5C:37:81:C1:85:AA:93:F1:38:EE:BF
Certificate issuer:       /CN=3C56226A2217A64211E52D9EA9527FAAF1587160
Certificate serial:       01C6FBADB9EC35F2ECB7133B728951B5E914B406
Authority key identifier: 3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32322d3332203d3e20323639323538.roa
Signing time:             Tue 30 May 2023 18:55:59 +0000
ROA not before:           Tue 30 May 2023 18:50:59 +0000
ROA not after:            Tue 28 May 2024 18:55:59 +0000
asID:                     269258
IP address blocks:        45.239.140.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c6:fb:ad:b9:ec:35:f2:ec:b7:13:3b:72:89:51:b5:e9:14:b4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C56226A2217A64211E52D9EA9527FAAF1587160
        Validity
            Not Before: May 30 18:50:59 2023 GMT
            Not After : May 28 18:55:59 2024 GMT
        Subject: CN=D839F9FD7140E2801E5C3781C185AA93F138EEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:73:2e:ca:0d:29:53:a5:63:6b:ac:03:6b:
                    87:5b:4a:c2:de:aa:17:74:73:1f:1b:97:69:a6:e1:
                    36:8c:2c:3c:90:b4:cb:44:ea:19:75:98:42:e7:ef:
                    99:06:c8:c9:7f:e2:7b:82:83:c9:20:57:ca:7e:9f:
                    b3:6f:f4:8d:62:9b:20:3a:b6:88:4c:a5:b0:06:72:
                    f7:9e:42:fc:6a:fd:d5:a9:6a:a6:28:ae:00:9d:a8:
                    77:ad:1f:e8:74:e7:50:8b:55:ca:1b:4a:59:aa:f3:
                    b9:66:84:3c:b8:bd:07:09:5f:d2:36:7b:90:1c:ee:
                    ac:eb:b3:ea:0b:3d:cb:f8:8b:10:78:b1:7a:1b:f5:
                    10:52:75:05:8d:ea:88:02:1d:2c:8f:ec:b1:3f:c5:
                    fe:ac:bd:ce:f6:3d:04:d1:51:e3:f5:ff:c2:db:b6:
                    0d:ae:62:73:dc:40:99:4f:d5:db:5b:40:43:2d:16:
                    d0:1e:5c:aa:5d:b1:10:1b:ad:47:bb:fd:30:e7:01:
                    f0:f4:91:13:12:90:32:83:2e:54:dd:b6:14:f0:e5:
                    0d:ce:7a:da:28:1c:1c:14:f7:3e:5a:f2:ec:ac:61:
                    b7:b8:45:20:75:53:7f:2d:92:4d:86:37:e4:0c:1d:
                    67:25:9c:02:1c:23:9f:41:ca:92:be:14:11:c1:e5:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:39:F9:FD:71:40:E2:80:1E:5C:37:81:C1:85:AA:93:F1:38:EE:BF
            X509v3 Authority Key Identifier:
                keyid:3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/3C56226A2217A64211E52D9EA9527FAAF1587160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32322d3332203d3e20323639323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:c8:f1:28:c1:64:6e:9a:e7:67:26:95:66:e0:6f:a0:b6:8a:
         54:15:50:e8:ff:fc:10:1c:af:1e:73:00:b4:94:24:f9:23:5d:
         d8:33:66:24:f8:80:1c:30:6e:89:3e:68:76:96:1a:50:81:cb:
         a3:dd:d4:76:47:a2:05:23:30:50:77:38:92:b7:f8:67:fb:c3:
         83:e3:78:1f:cc:4a:1e:b4:1e:3f:82:41:63:77:20:f6:80:bf:
         45:98:11:8c:9a:21:0a:d1:2b:b2:87:d3:ee:65:45:9a:42:f4:
         26:be:b3:b2:5f:c7:7d:26:69:db:02:50:b7:f1:be:0c:34:46:
         ca:f1:3f:c0:5f:f5:31:fb:de:68:f7:6d:da:e8:f4:0c:3f:0c:
         da:f6:3a:2b:58:dc:0c:08:c2:45:e6:21:9b:0c:71:72:24:a7:
         33:6a:e9:56:5f:3f:36:1e:29:8b:ae:cf:04:4e:b0:33:9d:76:
         17:7f:e2:25:61:ca:2c:ea:57:c3:2e:d9:fc:d1:4b:b5:1a:d5:
         24:1a:68:a3:fe:8d:53:50:5b:2a:c9:92:25:5a:cf:13:95:d4:
         d9:7d:89:88:f4:b6:a6:89:21:7c:e6:fd:05:d9:2d:57:0f:97:
         1e:4f:6a:a0:5d:00:5a:b9:f9:a1:89:75:f1:c3:78:64:03:44:
         06:33:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org