Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/34352e352e3134302e302f32322d3234203d3e20323639363333.roa
File:                     34352e352e3134302e302f32322d3234203d3e20323639363333.roa (raw, json)
Hash identifier:          2Zz37DXEbJGfAJNhTWk4XDOJkkkAfbxV00pDGOgTu2c=
Subject key identifier:   5C:42:72:28:21:F6:0A:38:AF:0D:95:FD:C2:9F:02:A2:E4:E9:43:5B
Certificate issuer:       /CN=A16031A899116A051747B2AE24495B6B2BDBF616
Certificate serial:       2854DC050EA552DA4EFE996C5A079D3387E22EA8
Authority key identifier: A1:60:31:A8:99:11:6A:05:17:47:B2:AE:24:49:5B:6B:2B:DB:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16031A899116A051747B2AE24495B6B2BDBF616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/34352e352e3134302e302f32322d3234203d3e20323639363333.roa
Signing time:             Wed 27 Dec 2023 05:59:59 +0000
ROA not before:           Wed 27 Dec 2023 05:54:59 +0000
ROA not after:            Wed 25 Dec 2024 05:59:59 +0000
asID:                     269633
IP address blocks:        45.5.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:54:dc:05:0e:a5:52:da:4e:fe:99:6c:5a:07:9d:33:87:e2:2e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16031A899116A051747B2AE24495B6B2BDBF616
        Validity
            Not Before: Dec 27 05:54:59 2023 GMT
            Not After : Dec 25 05:59:59 2024 GMT
        Subject: CN=5C42722821F60A38AF0D95FDC29F02A2E4E9435B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:3d:4a:75:b8:8b:f8:09:03:fc:0d:cd:f4:
                    69:af:a4:d7:13:90:c1:bd:e7:8d:a8:3f:12:ed:fa:
                    e4:62:01:9d:c4:c8:37:ff:f5:ed:72:1d:43:cc:30:
                    ac:a1:b5:cc:55:df:22:f9:a1:c5:f3:2d:bf:6e:b7:
                    88:b9:f0:1a:a5:ca:26:1d:8c:fe:77:b5:50:27:02:
                    2a:36:aa:37:ce:73:19:ad:3f:00:9f:d8:e1:ba:b5:
                    33:a2:db:20:4e:e9:5a:4e:71:e0:48:46:12:3f:06:
                    95:32:1a:7c:a8:65:a9:2c:22:6e:d9:d2:99:68:f9:
                    48:f1:1a:b4:82:5f:6f:e3:d5:74:2a:38:71:ea:2d:
                    f1:93:17:6e:ba:ae:0b:ba:f3:e0:4f:00:e6:e9:a0:
                    61:4e:55:c4:61:5a:cc:61:93:80:50:df:dc:39:69:
                    38:d1:bc:c7:3c:46:0c:4c:1d:96:3f:b3:0c:84:81:
                    48:c2:a5:57:a6:34:37:4f:d7:c9:d3:ac:cb:39:57:
                    ec:0c:8b:ef:e4:7f:b7:e6:62:60:70:68:a8:8e:13:
                    ff:c2:14:84:51:eb:98:93:b7:f3:17:bf:59:ca:d4:
                    c2:1f:30:48:f5:6c:e9:20:13:be:04:9c:23:c4:02:
                    33:cb:bf:f7:95:f3:28:68:c9:08:86:a6:4f:25:d9:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:42:72:28:21:F6:0A:38:AF:0D:95:FD:C2:9F:02:A2:E4:E9:43:5B
            X509v3 Authority Key Identifier:
                keyid:A1:60:31:A8:99:11:6A:05:17:47:B2:AE:24:49:5B:6B:2B:DB:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/A16031A899116A051747B2AE24495B6B2BDBF616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16031A899116A051747B2AE24495B6B2BDBF616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/34352e352e3134302e302f32322d3234203d3e20323639363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:3a:98:d1:85:cf:41:40:e4:05:a0:be:33:61:fe:4b:47:
         5e:f9:f3:1c:eb:a9:01:2e:c2:7d:bd:b7:5e:09:20:91:4d:78:
         5d:46:ae:b6:12:38:84:cf:ce:21:ee:b5:9e:c2:07:22:54:70:
         b1:ce:f7:07:a2:85:5d:06:c4:fa:27:37:31:03:2f:97:1d:48:
         df:32:96:fe:5b:cd:e9:62:ad:a2:97:0b:97:56:c6:51:75:26:
         e3:99:49:5e:24:e0:25:5c:c0:08:2a:d4:a5:83:4e:8a:2c:30:
         4e:23:38:56:c5:1b:ad:3d:13:e8:67:3d:49:af:70:71:8e:c0:
         df:6c:67:61:45:4a:77:f3:fb:ce:78:83:02:ab:fd:dc:72:2d:
         d8:2e:3f:3b:69:f5:2f:b0:f4:4f:fb:3e:b3:74:1e:79:06:35:
         52:64:2d:d3:0f:13:d1:55:f4:e5:29:91:16:e1:9a:89:9d:4f:
         64:52:be:a9:21:aa:7c:be:72:92:88:eb:48:cd:0c:f3:81:d0:
         eb:0e:b9:eb:2e:a3:45:cc:2a:b0:3a:02:b0:66:1b:72:ba:76:
         61:e7:74:c7:57:f3:7c:65:aa:8b:aa:34:ab:35:fc:c9:36:b7:
         f8:b6:d6:e9:df:db:9b:98:8f:e3:36:a5:e5:22:00:02:35:ee:
         61:95:2b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org