Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32332d3233203d3e20323638383431.roa
File:                     34352e3137342e302e302f32332d3233203d3e20323638383431.roa (raw, json)
Hash identifier:          s3zP45vIe206XSFIeAnxZDjmac+Q1N/48QHFvk+TCCE=
Subject key identifier:   CF:BD:6E:44:F5:4E:4D:DF:26:17:04:0A:5F:D7:F1:EC:B3:E8:06:A1
Certificate issuer:       /CN=8942116348CB859ADB895C4FCAF2E70D15442AAE
Certificate serial:       7D6DB279E7BB0EC22F55E8D171877687E23C2EB3
Authority key identifier: 89:42:11:63:48:CB:85:9A:DB:89:5C:4F:CA:F2:E7:0D:15:44:2A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32332d3233203d3e20323638383431.roa
Signing time:             Thu 06 Jul 2023 21:55:26 +0000
ROA not before:           Thu 06 Jul 2023 21:50:26 +0000
ROA not after:            Thu 04 Jul 2024 21:55:26 +0000
asID:                     268841
IP address blocks:        45.174.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6d:b2:79:e7:bb:0e:c2:2f:55:e8:d1:71:87:76:87:e2:3c:2e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8942116348CB859ADB895C4FCAF2E70D15442AAE
        Validity
            Not Before: Jul  6 21:50:26 2023 GMT
            Not After : Jul  4 21:55:26 2024 GMT
        Subject: CN=CFBD6E44F54E4DDF2617040A5FD7F1ECB3E806A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:d9:f6:19:e1:04:01:7b:74:d0:57:0d:53:
                    e2:b2:81:a2:5c:17:5a:02:87:3a:9c:c5:59:06:3b:
                    38:ed:ec:3b:15:b2:73:78:c5:34:25:37:0d:aa:a6:
                    b0:69:81:05:d2:44:3a:65:a9:73:2c:3d:9a:dd:7a:
                    86:fa:fb:2e:64:5a:26:47:fe:bd:57:55:9b:65:9c:
                    50:ed:62:ec:6d:01:39:df:47:f1:8b:20:40:ff:fd:
                    32:88:01:7e:6f:40:e1:a2:b1:98:20:0c:15:de:84:
                    cc:dd:7b:54:f0:41:7c:6a:9d:17:4e:0e:81:e6:d7:
                    99:a7:fc:66:16:83:3f:2c:01:46:b5:56:19:e5:e5:
                    16:25:00:c7:1f:31:e8:30:cd:1b:90:4e:ca:49:87:
                    d9:de:ba:bc:a6:a0:3d:d3:2a:40:af:01:48:7c:84:
                    16:30:c4:51:95:45:ed:41:1e:23:2a:58:99:2f:0d:
                    d2:16:88:6d:0c:73:de:24:48:6b:75:5e:00:f0:3f:
                    3c:f6:d9:ef:fa:51:b8:63:a8:d5:c4:a8:ed:3b:1e:
                    62:3d:23:27:cf:da:0e:08:1d:05:62:3d:9f:47:8c:
                    6f:67:22:66:46:55:9e:f2:60:35:aa:4a:fd:6d:fe:
                    70:f4:94:d8:93:84:87:ce:e5:7c:0d:46:2d:d4:b1:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BD:6E:44:F5:4E:4D:DF:26:17:04:0A:5F:D7:F1:EC:B3:E8:06:A1
            X509v3 Authority Key Identifier:
                keyid:89:42:11:63:48:CB:85:9A:DB:89:5C:4F:CA:F2:E7:0D:15:44:2A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32332d3233203d3e20323638383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:9e:e2:b3:72:05:db:bc:8e:50:b5:bd:f6:31:8a:2a:72:4a:
         3b:2e:dd:bd:d7:81:ba:5e:62:83:d0:c7:9d:91:c1:fb:79:0c:
         77:5f:44:96:41:86:b2:b4:7c:08:bf:43:86:b8:da:87:53:ab:
         a0:49:44:04:e9:94:46:70:af:84:f6:06:c6:c2:bc:22:1b:26:
         1c:ac:27:22:a2:46:4b:aa:ec:53:1f:a8:be:95:64:12:08:77:
         c6:b9:25:b3:a4:26:55:69:53:b0:70:e6:6c:48:08:94:00:5d:
         9e:f4:76:b4:c6:4f:ad:3f:b5:43:0a:d1:43:a1:06:6b:2e:3c:
         53:4b:47:1d:91:28:de:f1:a9:ae:fd:f6:55:14:52:01:64:1d:
         c5:56:00:63:f1:01:2c:7f:1a:0c:74:e3:e8:0c:7a:2e:e5:de:
         79:ef:16:f4:ec:a3:5b:c9:73:11:81:89:69:5a:cc:0c:36:44:
         26:b4:42:5c:01:11:e9:a5:2f:6a:ce:ef:7c:85:dd:e9:e4:8e:
         96:f7:2e:92:2a:70:54:f6:d8:0a:6e:e9:71:4b:1b:1c:0b:d7:
         fd:72:2c:17:31:e8:49:e0:90:31:50:5f:ed:b1:07:a4:42:a9:
         e7:f8:cd:80:15:0d:24:fc:36:51:cd:d6:6e:6f:d7:eb:5d:7e:
         7e:c9:c6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org