Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32332d3234203d3e20323637313234.roa
File:                     34352e3232392e35322e302f32332d3234203d3e20323637313234.roa (raw, json)
Hash identifier:          Q49+Ib817ie0KyGeR4wh39fKnXdMQWV/H4zp2jxzikI=
Subject key identifier:   D2:47:B1:6D:8F:E5:92:34:2E:61:5C:BE:D0:28:0D:80:65:E0:82:81
Certificate issuer:       /CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
Certificate serial:       6410AE954831CCDA4725D7E10F6F94DFD50CFEB7
Authority key identifier: DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32332d3234203d3e20323637313234.roa
Signing time:             Fri 08 Mar 2024 14:15:37 +0000
ROA not before:           Fri 08 Mar 2024 14:10:37 +0000
ROA not after:            Fri 07 Mar 2025 14:15:37 +0000
asID:                     267124
IP address blocks:        45.229.52.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:10:ae:95:48:31:cc:da:47:25:d7:e1:0f:6f:94:df:d5:0c:fe:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
        Validity
            Not Before: Mar  8 14:10:37 2024 GMT
            Not After : Mar  7 14:15:37 2025 GMT
        Subject: CN=D247B16D8FE592342E615CBED0280D8065E08281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:c8:74:3c:5c:dc:85:dc:97:fb:08:fe:6a:
                    fd:be:06:b7:21:42:7a:cf:a1:c1:bd:1f:82:d1:0b:
                    c2:08:42:cf:33:dc:29:3c:58:4a:19:15:7c:29:e2:
                    7d:94:93:d1:ae:81:04:24:c1:36:79:b3:79:b0:97:
                    b9:90:92:e0:5d:d8:25:b0:f4:7b:e6:fa:8f:b4:f4:
                    bc:45:c6:6d:d9:e3:27:17:5c:6a:3b:d8:dc:66:0d:
                    fc:17:66:c7:38:04:a6:bf:b3:ff:d1:21:67:66:b1:
                    01:d8:51:87:4b:a0:6f:2b:00:af:6c:14:73:9d:dc:
                    96:04:90:9b:64:9a:e2:10:82:40:f2:e7:d9:0b:46:
                    a6:7c:55:42:09:72:ad:66:f2:b4:86:71:8b:c3:33:
                    99:d3:7a:ab:c2:01:c5:0a:5c:3d:19:99:11:c7:6e:
                    51:fb:1c:3e:80:61:6e:a2:0d:97:25:af:ec:af:e1:
                    c2:8e:66:ce:12:5d:2e:2d:b4:87:3b:00:cf:3e:cb:
                    2d:18:48:13:4f:f6:b9:e8:09:42:5f:45:49:13:d9:
                    a1:8d:9a:94:2f:76:5f:e4:b7:92:02:b3:52:2e:51:
                    9b:48:f4:8d:7f:9a:29:27:a6:53:db:94:36:11:be:
                    11:6b:a9:f7:e9:e3:14:cb:66:c9:f4:5e:f5:6a:06:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:47:B1:6D:8F:E5:92:34:2E:61:5C:BE:D0:28:0D:80:65:E0:82:81
            X509v3 Authority Key Identifier:
                keyid:DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32332d3234203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:5a:9b:13:bf:25:71:9f:66:27:0a:5b:82:60:34:32:38:de:
         fa:19:f1:db:d2:16:a7:7e:bc:3e:13:8c:56:57:3d:7a:68:64:
         89:a0:38:f8:92:31:f0:7c:20:f2:bd:d0:7c:ea:09:c1:85:23:
         3e:eb:a0:1e:bf:1f:0c:04:09:e1:bc:c9:3c:04:25:53:59:a4:
         d9:8a:9d:60:28:79:f0:5b:dc:26:9a:2a:8c:1e:9a:54:b0:e9:
         ef:e5:5c:6d:9e:ba:7a:95:dc:60:8f:be:ae:0f:53:e8:32:f5:
         1b:8f:e5:1c:3d:c7:61:d1:ef:e0:d1:b8:9b:a8:8f:95:18:78:
         43:89:f7:4b:fa:b7:45:2a:f6:d1:cb:64:d3:31:a1:fc:3e:2c:
         aa:f2:00:13:dd:cf:74:e9:c9:9d:3a:27:cd:3d:00:7d:d7:65:
         20:8b:09:28:26:cc:b3:16:06:06:cf:b0:20:27:55:a1:55:43:
         e6:d9:a3:6f:47:c7:61:e9:a3:9e:42:9a:0b:be:e0:23:91:c8:
         b7:cd:89:b6:da:91:66:c3:f5:2a:c9:3f:c5:62:32:48:36:d1:
         fc:9d:a3:ed:7b:f8:ae:8a:9f:f4:d0:d7:aa:ee:c5:7e:63:6a:
         8e:e0:aa:c2:69:92:24:ad:68:9a:73:01:5d:d4:a1:34:7e:7c:
         01:67:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org