Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139362e302f32342d3238203d3e20323639313937.roa
File:                     34352e3138312e3139362e302f32342d3238203d3e20323639313937.roa (raw, json)
Hash identifier:          kEL9u8tYgW2LuvOCMgOzwcA62EASnLwVsQecmBSf+xg=
Subject key identifier:   12:49:ED:04:BE:51:9C:5E:90:43:09:A1:33:8F:A2:74:9B:32:D1:EB
Certificate issuer:       /CN=06AB476C0D831228F3F27817D9D72D20D21DB145
Certificate serial:       733CA8B55AF36D3DA15EDD4E8AA31746472F1520
Authority key identifier: 06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139362e302f32342d3238203d3e20323639313937.roa
Signing time:             Tue 01 Aug 2023 13:01:19 +0000
ROA not before:           Tue 01 Aug 2023 12:56:19 +0000
ROA not after:            Tue 30 Jul 2024 13:01:19 +0000
asID:                     269197
IP address blocks:        45.181.196.0/24 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3c:a8:b5:5a:f3:6d:3d:a1:5e:dd:4e:8a:a3:17:46:47:2f:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AB476C0D831228F3F27817D9D72D20D21DB145
        Validity
            Not Before: Aug  1 12:56:19 2023 GMT
            Not After : Jul 30 13:01:19 2024 GMT
        Subject: CN=1249ED04BE519C5E904309A1338FA2749B32D1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:fc:8d:4d:67:a8:ba:90:ad:84:82:b8:03:
                    c9:7f:bd:30:f1:9f:6e:a8:21:b9:f7:95:ac:c3:f9:
                    ab:b1:32:43:30:cf:a3:62:4d:b8:bc:b5:e0:f7:85:
                    63:c5:0e:40:a0:3f:2b:23:ed:1b:c9:89:c8:aa:df:
                    d3:6f:8e:45:1b:7c:8e:47:57:37:46:e3:31:92:1d:
                    39:78:90:a9:2a:6d:0a:f0:ae:99:a9:c3:4c:89:09:
                    1f:14:43:7f:a9:1b:4c:85:95:c7:79:e7:56:ab:4b:
                    71:07:f6:98:b0:0a:5c:40:36:ea:66:da:29:e2:7f:
                    7b:07:fb:41:7e:48:9f:29:76:56:41:6f:92:6e:3b:
                    41:3e:4d:9e:03:4d:c7:52:85:b8:bd:33:3b:0c:31:
                    94:61:c3:7b:aa:f6:de:5e:32:61:07:d0:f9:9e:e1:
                    63:f7:f0:94:8f:14:13:2b:b5:41:20:f8:38:1d:f8:
                    ad:46:8c:90:e4:61:72:9f:1d:40:79:e3:9a:4d:87:
                    cb:ac:6d:1f:5f:7c:11:90:83:d7:e9:c2:9c:6d:57:
                    ba:d3:43:37:41:5a:9e:1b:e5:f5:aa:2e:f8:38:ab:
                    1a:23:e7:5d:75:9c:99:d4:86:8e:f3:82:de:2d:1b:
                    88:d8:51:b7:71:16:52:de:06:7a:bc:f8:ba:99:85:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:49:ED:04:BE:51:9C:5E:90:43:09:A1:33:8F:A2:74:9B:32:D1:EB
            X509v3 Authority Key Identifier:
                keyid:06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/06AB476C0D831228F3F27817D9D72D20D21DB145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139362e302f32342d3238203d3e20323639313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:09:0b:8e:0c:08:c4:90:5f:1c:3a:c0:a6:3b:23:08:94:fb:
         69:e0:f0:27:c1:af:a8:a0:b4:08:8d:61:18:b6:12:25:90:6b:
         35:b7:e5:67:d6:9d:bb:53:46:6b:6f:87:c7:14:ca:bc:fe:eb:
         f0:d9:7c:c3:b6:2a:1a:8e:d3:4c:db:ed:c6:df:31:5b:66:13:
         54:b9:a9:0d:58:7a:18:6c:76:bd:62:ac:28:b3:85:e1:e7:ee:
         f3:fb:ec:d7:90:2c:e9:0f:76:45:0f:c9:f8:e8:db:71:8c:d1:
         91:5d:fc:85:25:9b:4e:db:76:8a:d7:ee:23:05:4f:20:25:6a:
         6b:ed:6c:6c:5a:f5:86:04:6e:ea:fa:16:a4:07:d9:f0:b0:e0:
         a5:bc:dc:c8:a3:6a:aa:e9:27:6d:23:9d:ef:6a:7e:e6:6a:c9:
         db:b3:45:2c:8c:84:89:2b:aa:74:7e:6e:a3:21:49:3e:ec:50:
         2f:64:9b:67:a5:e5:d5:99:ad:4e:cb:b7:ff:b3:d2:37:70:1a:
         fe:11:98:3b:e3:24:55:cb:52:7b:1b:d2:bb:b9:0c:b0:2d:19:
         ac:e6:10:67:de:a1:33:59:a8:40:c0:5e:6a:fd:26:f9:15:7c:
         8c:37:1e:41:ba:fc:5c:15:d4:1c:d4:1a:ee:92:1d:10:82:29:
         c5:b8:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org