Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139362e302f32342d3234203d3e20323637323138.roa
File:                     34352e3233312e3139362e302f32342d3234203d3e20323637323138.roa (raw, json)
Hash identifier:          x/fksyAknfKZxC567lfPZ5cg8jI1P75UvkScEY81IQg=
Subject key identifier:   F7:9F:4F:98:BB:4B:4D:C0:4B:E4:F7:BF:73:74:13:87:A3:12:87:C3
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       782296DE9001B21A2E3696C3588108D06ADD900B
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139362e302f32342d3234203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:49 +0000
ROA not before:           Sun 18 Feb 2024 03:12:49 +0000
ROA not after:            Sun 16 Feb 2025 03:17:49 +0000
asID:                     267218
IP address blocks:        45.231.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:22:96:de:90:01:b2:1a:2e:36:96:c3:58:81:08:d0:6a:dd:90:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:49 2024 GMT
            Not After : Feb 16 03:17:49 2025 GMT
        Subject: CN=F79F4F98BB4B4DC04BE4F7BF73741387A31287C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:66:0b:fd:1f:fe:fd:57:e7:c9:d8:8f:43:
                    9a:03:06:e9:0e:99:83:5a:cb:9f:0e:5b:02:71:c6:
                    ac:f0:94:60:d2:be:46:c3:f4:bf:43:3f:54:25:e4:
                    15:7c:9d:3a:bc:10:7e:f4:07:d9:e0:b2:fd:da:a9:
                    a4:8a:3d:1d:62:65:ce:f4:33:3c:62:43:9c:28:f6:
                    10:8d:15:47:89:a0:50:8d:a1:ce:27:6a:05:64:ee:
                    2d:a0:68:42:21:0d:06:e6:65:22:54:45:3d:e4:58:
                    51:02:5a:e7:81:cc:bc:df:d2:68:46:19:ab:14:86:
                    c1:6a:e9:a6:e5:b4:75:69:90:30:ff:a4:56:80:13:
                    9b:64:40:7a:e2:f8:7b:b8:4c:af:c2:95:ec:c3:6f:
                    e0:25:a4:a8:3f:db:89:24:c0:11:a1:d5:0f:e1:46:
                    18:10:5a:21:79:15:76:a2:c8:1b:36:e3:b4:b4:ea:
                    5e:ee:97:90:3b:e0:c3:c2:4f:ec:3e:2b:30:66:00:
                    51:45:92:be:86:5e:f2:df:70:0a:51:9f:24:f8:50:
                    6e:05:50:1a:87:14:55:32:d2:5f:08:54:34:e4:9e:
                    21:fc:38:4e:7f:c6:27:98:de:4c:82:2d:8a:c3:82:
                    96:dc:84:dd:fd:26:44:4f:e9:3e:22:0c:99:08:45:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:4F:98:BB:4B:4D:C0:4B:E4:F7:BF:73:74:13:87:A3:12:87:C3
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139362e302f32342d3234203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:b6:2d:8a:81:76:df:cc:d1:86:c4:69:62:16:47:00:2c:38:
         6d:a7:4c:d1:82:a8:17:03:4c:61:06:6d:46:0a:63:ca:97:6a:
         5e:dd:e5:5f:7e:7a:ef:eb:60:0f:cc:e1:8f:97:ed:13:33:a2:
         45:e8:7a:61:05:b6:73:50:29:72:e0:e6:50:f2:4f:41:9f:3c:
         9c:f7:59:47:1e:ad:63:fa:48:fa:95:75:da:ce:9d:73:f2:e0:
         d0:3e:9c:a2:5e:f4:25:05:66:fe:3d:f5:48:9d:3f:06:80:e4:
         6f:5a:38:38:b1:bc:66:c7:96:b4:90:e1:39:6c:e3:b1:e6:0f:
         a2:16:59:42:6c:28:e4:23:6c:34:ba:e5:23:1f:aa:4a:e7:c8:
         05:94:42:16:67:33:3a:aa:1c:0e:b8:db:4a:65:d2:94:9c:51:
         19:e0:73:d1:c5:ee:b2:c1:f7:59:bb:97:7f:a9:95:3a:97:d9:
         43:4d:14:0d:06:6f:4d:fc:85:2a:e4:e9:ad:53:df:22:c8:c8:
         d3:e3:fa:35:98:14:80:bc:11:dd:19:dc:d6:6f:1f:23:32:16:
         b9:29:a4:f6:22:0c:69:b9:6f:ab:3a:75:e7:2b:43:fe:95:50:
         5e:44:77:bb:f8:4f:b8:d3:77:29:4b:62:fe:34:01:99:ab:e9:
         30:10:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org