Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/34352e3232362e3134382e302f32322d3234203d3e20323636393638.roa
File:                     34352e3232362e3134382e302f32322d3234203d3e20323636393638.roa (raw, json)
Hash identifier:          pSK5s+uUDhLM2geGdmCf20XUtK9hYyZhSJW3H7cylmI=
Subject key identifier:   46:1A:C6:7C:D0:47:AB:DA:FE:09:3A:33:A1:BB:F5:34:52:06:81:80
Certificate issuer:       /CN=74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1
Certificate serial:       352AF57CA5C9BFE359A62918A47251F946FEDB54
Authority key identifier: 74:FA:7B:EC:0A:12:DC:39:CA:28:9C:E4:10:D3:0F:E4:7A:56:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/34352e3232362e3134382e302f32322d3234203d3e20323636393638.roa
Signing time:             Mon 11 Mar 2024 19:02:16 +0000
ROA not before:           Mon 11 Mar 2024 18:57:16 +0000
ROA not after:            Mon 10 Mar 2025 19:02:16 +0000
asID:                     266968
IP address blocks:        45.226.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2a:f5:7c:a5:c9:bf:e3:59:a6:29:18:a4:72:51:f9:46:fe:db:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1
        Validity
            Not Before: Mar 11 18:57:16 2024 GMT
            Not After : Mar 10 19:02:16 2025 GMT
        Subject: CN=461AC67CD047ABDAFE093A33A1BBF53452068180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:68:82:c6:14:f7:9e:e3:c6:ad:42:6d:3b:
                    65:46:be:72:a6:45:32:ae:74:a5:d8:d4:38:9e:1c:
                    b1:a6:dc:75:6b:46:e3:0a:1d:f6:ae:9b:0a:48:df:
                    a9:d1:93:68:ec:6f:4a:08:d2:ca:e7:a4:fe:c9:06:
                    65:1d:af:ec:6e:b6:58:d0:5f:44:2d:a4:c0:17:eb:
                    70:8e:41:e9:62:e7:3d:a6:0a:c5:00:39:0b:84:9c:
                    d5:0b:5f:ec:53:68:26:e0:57:1e:b6:b7:64:1e:45:
                    f4:35:cd:65:a6:16:71:ce:6d:f4:70:6e:90:bc:56:
                    23:9a:f9:45:8b:f5:5a:10:d4:bd:71:2f:9b:62:b6:
                    fe:3a:97:27:04:a6:c7:e0:07:04:13:da:79:0f:52:
                    3e:51:6e:23:6b:d9:03:47:df:cf:5e:78:ed:ef:2f:
                    c5:44:35:0c:75:f8:c5:f6:8f:93:44:cf:26:49:50:
                    34:10:9f:83:9a:64:7d:74:f1:5c:9f:ec:1b:93:c7:
                    85:ed:a2:a3:9a:2d:95:17:54:60:ac:ec:96:8e:99:
                    c2:73:41:85:45:86:ff:78:0c:ea:49:61:d7:73:73:
                    58:71:12:ea:16:5e:de:ad:fd:c3:9f:a9:a3:0b:84:
                    a8:7c:73:7c:dd:b9:d6:2a:c9:c2:03:01:3d:52:33:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1A:C6:7C:D0:47:AB:DA:FE:09:3A:33:A1:BB:F5:34:52:06:81:80
            X509v3 Authority Key Identifier:
                keyid:74:FA:7B:EC:0A:12:DC:39:CA:28:9C:E4:10:D3:0F:E4:7A:56:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/34352e3232362e3134382e302f32322d3234203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:93:9b:09:a0:4b:6c:05:6b:f3:74:82:c3:cc:fb:25:18:47:
         11:e9:25:4b:a2:1c:83:9d:bb:e9:cb:8c:d0:60:fb:d6:27:26:
         9f:15:4f:b7:46:bd:f6:77:0f:b1:12:5b:88:5a:ad:05:b1:44:
         2d:98:57:57:0e:24:6a:5a:6a:2d:8c:94:a7:9a:11:69:2d:d1:
         61:6a:20:75:89:fa:7f:55:70:2f:67:b5:fa:11:23:5e:3c:8f:
         70:69:ad:2e:f2:70:29:b7:82:5b:f5:de:d2:96:bf:36:f5:4d:
         cb:51:7e:c5:19:aa:af:8f:a2:e5:a0:33:6d:b7:21:91:15:5d:
         3f:22:94:ca:72:95:19:02:97:14:19:aa:2d:73:21:89:fb:bc:
         dc:de:46:fa:0b:83:7c:8e:cc:7a:e9:bb:f8:53:10:fa:fd:e7:
         00:44:f6:61:b5:04:71:9c:26:94:b5:10:a4:87:f8:7f:01:64:
         a7:96:34:1d:9d:8e:19:55:2f:a1:03:e5:97:e5:56:1d:48:23:
         37:1d:8c:39:5d:a9:1b:e3:b5:2d:aa:0c:fe:3b:cc:fb:40:9d:
         c1:83:85:a9:5b:01:98:90:bf:d3:a0:2d:46:68:c4:ce:ab:c0:
         c8:be:bc:16:d0:32:f7:ee:c0:a0:15:0f:e1:85:f8:2d:96:8a:
         88:02:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org