Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
File:                     34352e3138342e36382e302f32322d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          dMp98V8tkQ/FHXuioDjCWyVQNmEFIv7L9eisQDqgKZc=
Subject key identifier:   D3:59:A5:69:A3:54:E7:95:43:75:96:9B:A9:94:EA:E7:E0:51:68:9F
Certificate issuer:       /CN=FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99
Certificate serial:       3FE4398A20E1EF9650AF270A3061A8D76A669173
Authority key identifier: FD:DB:AF:0C:3C:92:B9:78:7A:52:03:F8:C7:C9:2C:5C:DD:72:CF:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
Signing time:             Mon 04 Mar 2024 16:38:23 +0000
ROA not before:           Mon 04 Mar 2024 16:33:23 +0000
ROA not after:            Mon 03 Mar 2025 16:38:23 +0000
asID:                     269359
IP address blocks:        45.184.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e4:39:8a:20:e1:ef:96:50:af:27:0a:30:61:a8:d7:6a:66:91:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99
        Validity
            Not Before: Mar  4 16:33:23 2024 GMT
            Not After : Mar  3 16:38:23 2025 GMT
        Subject: CN=D359A569A354E7954375969BA994EAE7E051689F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:e5:24:bc:18:e4:0a:5e:df:92:4b:ed:2b:
                    23:09:2b:25:e9:91:21:59:bc:a0:94:13:52:f4:ac:
                    f2:80:ef:9d:e1:ba:83:03:cf:ed:c2:54:4f:ea:15:
                    9f:a4:bf:51:0c:4c:96:2c:5f:9e:6d:6e:be:fc:d9:
                    29:5f:9b:fa:c7:f7:13:81:c7:c1:df:03:92:14:bf:
                    fd:9b:77:c7:02:ea:b2:ac:2c:e3:63:0d:70:b9:94:
                    99:db:1e:43:06:93:69:82:c3:6f:a1:cd:1a:a4:85:
                    82:1e:c9:40:d9:3a:fc:16:11:66:e7:bf:d8:6e:41:
                    bf:5b:43:d9:5d:ff:1b:de:ac:b4:15:96:55:d8:2c:
                    8e:fc:ee:81:41:0b:b1:7f:37:a0:c1:88:98:02:e1:
                    a6:bf:42:00:99:26:97:38:3f:a8:15:44:56:9c:de:
                    80:15:37:c1:6e:1a:ab:4a:68:43:78:03:30:9b:ef:
                    05:b8:11:15:7a:ed:99:c5:42:27:7b:7d:08:85:18:
                    3a:e7:9c:14:d7:3a:41:1d:c3:cb:ad:41:e5:9a:6d:
                    35:ea:e3:a9:81:d8:e9:82:8b:b8:5f:e7:ae:2e:3b:
                    90:cf:2d:68:44:13:90:a1:fc:19:85:c3:b7:c5:35:
                    f9:a3:2b:88:af:5b:47:60:73:f4:2b:65:5c:cb:36:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:59:A5:69:A3:54:E7:95:43:75:96:9B:A9:94:EA:E7:E0:51:68:9F
            X509v3 Authority Key Identifier:
                keyid:FD:DB:AF:0C:3C:92:B9:78:7A:52:03:F8:C7:C9:2C:5C:DD:72:CF:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:ea:d8:84:56:23:0d:88:59:04:27:d3:01:76:89:e9:15:2c:
         70:6e:82:7f:72:54:ea:26:f3:0c:2c:35:bc:bb:54:d3:65:aa:
         08:b7:c1:cc:88:ee:4e:b2:6e:05:65:d5:a6:cf:21:9f:08:cf:
         d3:0f:27:3d:41:2c:38:3f:0c:7e:bd:cb:e3:cd:e1:0c:bb:ba:
         bf:5f:13:4c:a2:b6:73:00:72:e6:f4:a4:51:87:04:99:1d:8e:
         37:1b:7a:ef:e0:cb:3e:80:f6:bb:d9:19:90:70:d4:5d:88:cb:
         80:bf:59:48:df:10:8c:8e:94:94:fc:80:8c:f4:c0:b1:1d:2c:
         ad:6a:26:e5:29:c9:08:ab:da:e4:2e:65:19:e2:13:0d:b4:26:
         bb:61:4c:17:97:e9:d9:10:81:32:b1:a4:5e:dd:a6:f5:3d:53:
         3b:72:b2:6c:88:ef:f2:e1:db:ad:1d:07:79:2b:53:18:dd:32:
         b5:f5:cc:5e:69:2a:9c:67:7e:f3:4f:0b:f0:1a:78:e5:a4:7e:
         a5:4b:a9:5e:2e:5a:7f:26:dc:be:32:ed:ce:e5:20:6d:7e:18:
         88:4b:d2:c8:e0:70:8a:e9:c3:8e:9d:44:1b:91:94:b8:9c:6d:
         9b:08:d1:12:66:d8:20:fd:c3:66:ed:83:11:30:2a:31:2a:0e:
         7a:fe:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org