Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/34352e342e32322e302f32342d3234203d3e20323632343539.roa
File:                     34352e342e32322e302f32342d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          TmrHGvGjoGl4L0WqNyXFGszw4Pfcaf2B884lkd6tpY0=
Subject key identifier:   D6:56:2C:E4:DD:AD:96:CA:E5:50:EA:ED:CF:1E:04:60:3F:F5:08:4C
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       20BFECAE18055125FCD5C090504D669BEBE108D0
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/34352e342e32322e302f32342d3234203d3e20323632343539.roa
Signing time:             Fri 12 Jan 2024 16:44:40 +0000
ROA not before:           Fri 12 Jan 2024 16:39:40 +0000
ROA not after:            Fri 10 Jan 2025 16:44:40 +0000
asID:                     262459
IP address blocks:        45.4.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bf:ec:ae:18:05:51:25:fc:d5:c0:90:50:4d:66:9b:eb:e1:08:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jan 12 16:39:40 2024 GMT
            Not After : Jan 10 16:44:40 2025 GMT
        Subject: CN=D6562CE4DDAD96CAE550EAEDCF1E04603FF5084C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:52:ae:41:1b:43:bd:40:c8:90:54:62:b0:
                    5c:df:ac:30:5d:88:d0:b9:77:9a:79:92:43:eb:b5:
                    4b:72:87:dd:76:40:57:bd:fe:51:0f:bb:7a:85:ba:
                    bc:4c:3b:68:0b:4e:6b:08:98:30:76:31:99:a0:46:
                    c3:a1:21:00:22:e2:44:3a:7e:07:d9:14:f5:81:81:
                    d5:f2:9f:2d:e5:b8:fe:ce:45:a4:3f:7e:7b:23:ed:
                    d7:63:9d:cd:68:b5:17:1b:48:df:60:ce:80:b0:82:
                    38:06:87:7e:1a:f4:e5:e4:2c:07:e0:5d:a1:04:58:
                    34:ba:49:9c:d3:a7:62:f4:40:a7:2c:e6:4e:3e:88:
                    8b:b6:d8:00:9b:48:a5:9d:40:c5:4a:40:1c:6c:bb:
                    19:28:6f:58:d7:d0:ba:44:03:43:16:b4:cd:7e:e3:
                    39:6f:a5:cf:97:3f:ef:fc:32:20:b3:d8:59:94:b9:
                    9b:e1:23:7f:89:b7:62:ff:b4:e9:91:7d:4d:90:f6:
                    35:f5:18:dd:2a:8e:c3:48:01:c7:6f:9a:09:79:9c:
                    81:49:89:c5:7e:14:46:5e:20:9d:40:ee:24:c2:ca:
                    8d:a6:49:6b:cc:13:56:e3:1f:83:c0:34:d9:4d:84:
                    48:ce:f5:c0:d0:71:03:5e:57:55:b6:22:aa:66:83:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:56:2C:E4:DD:AD:96:CA:E5:50:EA:ED:CF:1E:04:60:3F:F5:08:4C
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/34352e342e32322e302f32342d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:17:7e:9a:e3:fb:72:57:9f:f8:a4:f5:14:f0:a2:dc:58:
         9b:86:ee:a8:d1:b1:54:37:fe:30:36:ab:ea:26:97:ef:7d:8f:
         04:25:c5:53:3c:74:35:fc:84:1b:da:ff:f0:98:e2:75:98:da:
         66:59:a5:1e:99:fe:1d:83:99:3a:fc:0b:53:f0:88:e6:e7:f0:
         00:d6:44:ba:b5:3b:89:04:a0:ed:34:d4:0e:7d:6b:4b:e2:2e:
         9e:9e:3b:46:47:c4:a1:b3:d3:e0:14:48:9c:a2:56:cb:eb:34:
         65:c0:46:6d:c4:b4:43:dd:8f:bb:2d:3a:94:d2:4f:ee:5c:6c:
         65:04:fc:3b:6d:9b:75:3c:7b:4c:89:01:89:65:d4:24:8a:8d:
         a7:bd:4e:93:3e:02:c9:d4:80:7b:46:cc:43:78:01:68:23:3c:
         4b:c6:84:03:ae:0d:67:64:59:79:1b:77:10:e6:54:79:32:02:
         db:7a:29:b3:13:fa:c1:0d:d9:8d:b6:71:1a:79:1f:e5:ee:90:
         a9:e8:db:2a:05:54:2a:76:94:ec:a8:62:b5:da:dd:b7:22:a2:
         b6:1c:a8:fc:2c:c5:dd:5e:74:63:93:63:33:0d:5e:30:f2:11:
         6e:a0:51:9d:7b:29:85:60:af:dc:ef:d6:73:52:53:ec:69:15:
         be:d3:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org