Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/34352e3136312e31382e302f32332d3233203d3e20323638343436.roa
File:                     34352e3136312e31382e302f32332d3233203d3e20323638343436.roa (raw, json)
Hash identifier:          KY2L/5mFrbb7Afe8Cwjr2UhnfFMRVelf4MtrAUEa5PQ=
Subject key identifier:   8D:58:13:D4:8F:9E:00:A6:C6:23:BE:26:7A:21:88:32:38:3C:5F:FA
Certificate issuer:       /CN=1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB
Certificate serial:       5AFFDF33E2FB6F1E5BA260EF91751942FEB68102
Authority key identifier: 15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/34352e3136312e31382e302f32332d3233203d3e20323638343436.roa
Signing time:             Tue 15 Aug 2023 16:41:26 +0000
ROA not before:           Tue 15 Aug 2023 16:36:26 +0000
ROA not after:            Tue 13 Aug 2024 16:41:26 +0000
asID:                     268446
IP address blocks:        45.161.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ff:df:33:e2:fb:6f:1e:5b:a2:60:ef:91:75:19:42:fe:b6:81:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB
        Validity
            Not Before: Aug 15 16:36:26 2023 GMT
            Not After : Aug 13 16:41:26 2024 GMT
        Subject: CN=8D5813D48F9E00A6C623BE267A218832383C5FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:ec:38:d4:87:89:c5:d0:9a:78:bb:e9:70:
                    33:1c:7c:1e:51:b7:b7:37:06:27:05:8a:fb:26:5f:
                    58:2f:93:eb:d2:a0:03:a8:87:0c:65:22:fa:c4:e4:
                    83:da:17:ef:1b:cb:01:1c:1e:10:81:df:d2:0a:3e:
                    33:f2:3c:88:24:96:d6:22:21:0d:fd:e7:59:aa:d7:
                    6e:0f:da:a1:25:47:46:6e:ae:21:43:58:86:8e:96:
                    b9:40:72:0f:dc:8d:b5:bf:aa:68:6a:c0:cb:35:55:
                    f9:30:62:c4:a3:1f:83:de:2f:dc:11:30:37:81:49:
                    e7:d3:a0:c5:fe:9a:1a:70:79:36:2b:88:22:99:2c:
                    56:e6:28:0f:72:38:48:60:00:e6:16:98:3a:bf:55:
                    49:a8:8b:ae:7c:2c:70:d8:7f:4e:24:98:90:1a:93:
                    57:80:5e:23:09:db:09:3b:71:60:f2:ae:d7:90:26:
                    ef:ca:a2:7d:3f:a8:12:ce:62:b1:2a:02:f6:dc:19:
                    54:46:48:45:3d:ef:e2:a6:73:81:19:b0:33:c2:65:
                    39:dd:96:ce:a7:33:97:64:66:41:f2:ad:52:7c:9e:
                    62:3f:00:3a:d4:15:f0:0d:2a:d2:8c:1a:3f:31:0e:
                    fa:f6:70:13:4e:1f:b8:2c:c6:d2:ad:db:a3:de:8c:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:58:13:D4:8F:9E:00:A6:C6:23:BE:26:7A:21:88:32:38:3C:5F:FA
            X509v3 Authority Key Identifier:
                keyid:15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/34352e3136312e31382e302f32332d3233203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:c0:1f:e4:52:b9:2a:1a:a1:77:b2:92:c8:2e:2c:05:14:
         97:8b:cc:49:39:e8:b1:1f:83:71:e7:2d:e8:da:0d:de:c5:ca:
         5a:f2:60:2d:e4:89:94:c0:f8:36:78:ef:0d:0a:65:a8:43:36:
         56:c8:8d:4e:7f:ff:f6:06:2f:c4:02:a4:55:c9:81:1b:62:27:
         4c:e2:73:e5:52:db:ca:25:44:e4:ab:87:e4:d8:e9:b1:21:25:
         82:c4:fc:e0:14:d5:99:2d:52:93:9f:0f:2a:c1:3d:90:a1:85:
         b0:66:1d:60:59:dc:f5:8e:55:90:f1:98:99:f3:69:34:05:37:
         1a:26:03:5f:50:a5:fa:0c:8e:67:78:7d:ae:bb:c3:7a:26:05:
         36:f5:c0:a8:20:bd:cd:c2:d3:2b:f0:c1:60:46:38:af:ad:07:
         6b:02:c4:db:12:4f:22:8e:94:5f:9b:a1:14:15:c4:5a:fc:fc:
         b0:c0:ac:ce:13:f2:ac:67:16:48:9c:db:11:67:46:98:6f:4b:
         7a:9c:87:28:24:2e:1c:a2:1e:c3:5e:f7:84:2a:ac:1e:c3:47:
         d5:2f:cf:b2:3f:18:76:d0:6f:e3:33:de:d0:77:2e:20:55:16:
         c0:fc:c4:0e:cd:26:f9:d8:56:9e:f0:34:b8:f6:8f:e3:b8:f5:
         fa:2e:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org