Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37382e302f32342d3234203d3e20323639323334.roa
File:                     34352e3138322e37382e302f32342d3234203d3e20323639323334.roa (raw, json)
Hash identifier:          groXilIhPHD2/TN5B0vcg1zEZGf6ijBQJHCh46J2OoE=
Subject key identifier:   34:20:BA:80:60:43:46:52:D9:F8:0B:79:A3:B7:74:7F:89:AE:76:CB
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       09A69EE8026C992E7DF4D197C133CA4BC6E3E2EF
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37382e302f32342d3234203d3e20323639323334.roa
Signing time:             Fri 10 Jun 2022 17:00:00 +0000
ROA not before:           Fri 10 Jun 2022 16:55:00 +0000
ROA not after:            Fri 09 Jun 2023 17:00:00 +0000
asID:                     269234
IP address blocks:        45.182.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a6:9e:e8:02:6c:99:2e:7d:f4:d1:97:c1:33:ca:4b:c6:e3:e2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jun 10 16:55:00 2022 GMT
            Not After : Jun  9 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:e7:b6:28:ae:f2:19:28:b3:a3:23:29:56:
                    9c:c1:31:a3:49:11:89:ce:07:34:8e:0b:27:65:63:
                    52:6e:32:d0:30:e2:bd:eb:01:f7:e9:fe:6a:41:27:
                    82:0c:ef:59:5f:da:cc:4a:f9:d5:d3:c1:11:4f:1e:
                    a0:e4:66:1d:29:56:76:ff:9d:16:68:bf:e5:7e:1c:
                    30:91:43:87:21:25:bf:07:83:44:0e:73:0b:03:8a:
                    49:00:b6:a2:37:c2:ef:2e:46:d3:bd:80:51:13:6d:
                    56:f6:e8:76:5e:04:f5:e5:d2:a1:8d:7a:53:26:6f:
                    be:d4:ca:3e:74:36:be:97:15:89:f9:f4:e8:15:83:
                    c7:b7:d9:ce:c9:fb:52:a7:ba:b1:1f:ab:4b:66:9f:
                    d0:42:77:77:6d:50:4e:e6:3d:47:92:62:c7:ad:c8:
                    10:de:94:ed:b7:de:f7:85:f8:2f:12:1a:68:36:a1:
                    3f:ad:3d:ce:ed:87:c7:12:0f:64:dc:a4:ad:d0:2e:
                    ee:28:70:58:a6:a6:b6:5c:92:70:48:93:7c:20:17:
                    a8:02:92:e1:82:35:07:b5:e2:f8:31:df:55:a9:a4:
                    53:17:39:73:02:a5:7b:2b:49:0b:fc:07:c3:76:d6:
                    8f:52:43:48:5c:24:0b:6b:89:f4:a1:24:37:e4:33:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:20:BA:80:60:43:46:52:D9:F8:0B:79:A3:B7:74:7F:89:AE:76:CB
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37382e302f32342d3234203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:89:9d:b9:a0:a3:47:62:c0:6e:90:71:1c:bc:67:94:ec:32:
         08:46:4f:e8:6a:0b:7c:22:77:81:22:9c:be:54:66:b2:9d:ad:
         a7:39:e9:70:e5:59:a7:c5:a9:de:63:f7:df:e6:4b:09:5f:1a:
         c8:4e:74:ef:00:c8:12:97:60:e1:57:f4:98:46:3e:b8:c4:fa:
         0e:94:53:ff:b8:cc:8c:6d:a2:e2:03:93:c7:02:f7:b6:94:f3:
         52:94:68:b6:b5:b7:48:31:f8:98:76:17:b4:b7:51:b5:9b:92:
         5f:a4:dd:4b:fa:2e:d8:c8:17:98:aa:b2:fc:35:f9:6a:fa:32:
         55:51:b3:ee:98:85:b3:5b:db:7c:71:f9:d9:e1:4a:6b:c8:91:
         24:ed:b0:a4:6b:5d:86:d2:6c:f2:aa:34:a2:e8:8c:72:4a:f6:
         e1:2a:1f:e9:1b:ee:a2:ec:8a:3d:e7:d5:b6:d4:29:1f:09:29:
         7e:db:03:16:ab:78:c2:40:7c:ac:38:86:21:0a:9b:41:ee:c8:
         72:5f:e0:6f:fb:8f:ca:19:ed:e5:7d:a4:56:28:28:9c:48:8b:
         4b:85:6c:4a:0b:a9:87:90:59:5f:6f:a4:7d:c5:02:54:be:bd:
         07:70:3e:ca:fa:40:9b:c9:22:6c:e2:6c:66:30:71:af:cf:07:
         f0:0c:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org