Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa
File:                     34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa (raw, json)
Hash identifier:          F4cX0eg+XDsrq7gbi2z4ZfIfSIGyenCAZIozzBvpSmo=
Subject key identifier:   F2:A5:12:C6:50:EA:C7:6C:7D:84:A6:65:75:DB:31:3C:7D:29:3C:6E
Certificate issuer:       /CN=27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104
Certificate serial:       79E50AB95C473A22545CA602C4414CEC36674BAF
Authority key identifier: 27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa
Signing time:             Fri 05 Jan 2024 11:41:15 +0000
ROA not before:           Fri 05 Jan 2024 11:36:15 +0000
ROA not after:            Fri 03 Jan 2025 11:41:15 +0000
asID:                     267657
IP address blocks:        45.224.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e5:0a:b9:5c:47:3a:22:54:5c:a6:02:c4:41:4c:ec:36:67:4b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104
        Validity
            Not Before: Jan  5 11:36:15 2024 GMT
            Not After : Jan  3 11:41:15 2025 GMT
        Subject: CN=F2A512C650EAC76C7D84A66575DB313C7D293C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:ef:b8:93:1d:94:5f:fe:05:50:5b:87:a1:
                    1e:00:5c:a9:55:49:cf:ff:5c:5e:c3:45:57:64:39:
                    8c:95:ec:fa:b9:f5:31:e9:51:4b:8a:60:4b:b0:c9:
                    3d:5b:05:60:5a:08:ff:0e:3c:72:f7:28:c8:f6:18:
                    50:18:f5:02:28:98:a9:ac:d4:b8:7e:82:7e:3d:fa:
                    41:db:37:4d:fc:0f:85:db:7c:87:4e:d5:f1:b2:d0:
                    58:75:07:76:de:1b:52:aa:ab:64:82:4b:d2:95:0a:
                    5b:63:5f:68:37:1a:bf:eb:07:7e:38:69:6d:ac:ca:
                    a8:0a:7e:f7:00:ab:81:5f:cf:76:c7:87:fc:4f:0d:
                    27:74:6c:77:7d:ba:73:9a:ad:11:70:40:ee:bc:1e:
                    5d:85:db:67:2d:5e:32:24:c1:dd:27:6d:c1:41:ce:
                    40:b8:31:2c:4a:e0:ba:5e:1f:0b:c3:3b:d5:ae:d8:
                    e0:a9:b5:4e:de:c2:d9:45:5f:30:a1:14:d1:93:57:
                    60:ef:6b:4e:6a:aa:d0:1f:78:5b:4a:9e:df:64:43:
                    87:fb:a4:a0:18:2b:00:5f:f4:98:34:f8:09:7e:30:
                    31:71:14:1c:39:0a:d9:a7:8f:b2:19:9e:d3:ae:13:
                    cd:58:30:a2:70:ac:3c:d3:52:1d:0e:80:41:5d:47:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A5:12:C6:50:EA:C7:6C:7D:84:A6:65:75:DB:31:3C:7D:29:3C:6E
            X509v3 Authority Key Identifier:
                keyid:27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:50:07:d1:d3:64:d3:4d:f7:5b:5a:dc:d5:59:f3:13:9c:17:
         da:0a:80:05:8d:a5:80:b4:b8:21:af:f3:e9:c3:50:bd:a3:7c:
         e4:3a:a4:dc:ba:2d:8d:ec:e8:8e:a9:a1:47:c3:2c:e5:c5:da:
         14:ff:6d:c6:2b:8e:28:fe:d1:38:b8:f5:82:b6:99:9e:87:15:
         77:ee:e9:7d:83:cc:81:dc:0d:56:c4:1c:5a:41:50:e9:e0:b5:
         7a:92:dc:45:83:07:58:e5:5e:e4:b7:a2:8b:39:7a:22:c9:1d:
         d3:ab:4b:82:12:7b:8f:a3:8e:f1:cf:75:26:78:06:e7:4c:86:
         a1:ed:32:44:13:5e:8c:77:49:cd:ac:00:31:e2:22:ef:0d:27:
         d4:bc:38:2c:d4:a5:39:00:d6:35:3b:10:b6:ef:23:43:cc:eb:
         6d:fe:ae:20:f7:a1:54:25:2c:be:48:62:26:4c:ad:2a:e2:f6:
         47:41:4e:29:f0:e7:93:c5:d2:6e:c1:23:cb:fc:c9:eb:a9:1f:
         30:af:41:49:38:5a:64:b0:9a:c2:a3:e6:14:26:f3:8b:2b:41:
         08:00:d0:d4:3d:73:31:67:e6:5c:24:a8:80:87:ae:87:36:e9:
         e9:d0:6b:57:3e:1f:32:49:54:02:f6:40:5e:0c:74:9e:00:6b:
         01:8f:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org