Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PskwQAb9frboyZp9KCLhgfZAMZr3FXrSo9DWdHvHFxE/0/34352e3138392e3230342e302f32322d3234203d3e20323639363031.roa
File:                     34352e3138392e3230342e302f32322d3234203d3e20323639363031.roa (raw, json)
Hash identifier:          VGPcQSa+UFePDsCve/vUf1qv8c2LUnLqUPU6/k437YY=
Subject key identifier:   F9:43:CB:D1:7C:AE:8B:B8:3E:7F:DC:FF:BD:5D:BD:D1:AE:2F:3C:E5
Certificate issuer:       /CN=764D77A704BD656F6466CF1BEBD250DF5E55D949
Certificate serial:       02CC2551CF26A677B47353B8DECD34E670304C39
Authority key identifier: 76:4D:77:A7:04:BD:65:6F:64:66:CF:1B:EB:D2:50:DF:5E:55:D9:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/764D77A704BD656F6466CF1BEBD250DF5E55D949.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PskwQAb9frboyZp9KCLhgfZAMZr3FXrSo9DWdHvHFxE/0/34352e3138392e3230342e302f32322d3234203d3e20323639363031.roa
Signing time:             Sun 16 Jul 2023 10:57:57 +0000
ROA not before:           Sun 16 Jul 2023 10:52:57 +0000
ROA not after:            Sun 14 Jul 2024 10:57:57 +0000
asID:                     269601
IP address blocks:        45.189.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cc:25:51:cf:26:a6:77:b4:73:53:b8:de:cd:34:e6:70:30:4c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764D77A704BD656F6466CF1BEBD250DF5E55D949
        Validity
            Not Before: Jul 16 10:52:57 2023 GMT
            Not After : Jul 14 10:57:57 2024 GMT
        Subject: CN=F943CBD17CAE8BB83E7FDCFFBD5DBDD1AE2F3CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:20:88:3f:46:ea:1a:d4:2b:04:e2:ef:77:
                    0a:14:e1:06:04:5f:d4:93:39:cd:f0:57:1c:80:2a:
                    f9:0b:3d:8a:0f:74:b5:1e:61:2c:b3:94:92:28:0e:
                    06:96:cd:dc:02:c5:46:f2:7a:a4:57:87:cb:2c:91:
                    ec:0c:e7:56:db:0f:10:0f:d1:7f:6a:71:5c:47:dc:
                    c3:9c:5c:9b:2f:5e:3f:70:1c:30:82:e4:e0:88:37:
                    3f:64:2f:d4:e2:7f:cc:05:aa:42:e9:53:ca:6e:42:
                    ff:10:34:0f:2d:9e:96:af:ea:6d:39:0a:a8:34:46:
                    0c:82:b6:d2:ee:fc:6d:97:77:01:c5:34:d3:61:67:
                    5b:06:26:9e:a4:59:24:2a:0b:9a:85:58:55:83:1c:
                    a9:36:93:7e:3c:a6:1c:51:0c:f9:04:47:30:8f:f0:
                    19:a9:37:31:12:b3:86:fb:72:62:42:35:48:f7:5d:
                    ea:c3:a5:56:a1:ad:7f:53:88:bd:9d:0d:b6:a9:09:
                    33:76:cd:f7:0a:82:70:4f:ca:f7:de:c0:12:1f:bf:
                    14:99:ec:3f:21:4c:89:4a:15:9b:b0:0c:37:b4:db:
                    02:a6:be:91:30:20:c0:fd:e3:98:22:70:ba:6e:ae:
                    fa:8e:23:c7:8b:d1:d3:dc:85:11:b0:a1:db:49:02:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:43:CB:D1:7C:AE:8B:B8:3E:7F:DC:FF:BD:5D:BD:D1:AE:2F:3C:E5
            X509v3 Authority Key Identifier:
                keyid:76:4D:77:A7:04:BD:65:6F:64:66:CF:1B:EB:D2:50:DF:5E:55:D9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PskwQAb9frboyZp9KCLhgfZAMZr3FXrSo9DWdHvHFxE/0/764D77A704BD656F6466CF1BEBD250DF5E55D949.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/764D77A704BD656F6466CF1BEBD250DF5E55D949.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PskwQAb9frboyZp9KCLhgfZAMZr3FXrSo9DWdHvHFxE/0/34352e3138392e3230342e302f32322d3234203d3e20323639363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:38:ad:c3:c2:de:50:97:2f:8e:8f:c3:f6:ae:f5:89:49:bc:
         3d:7d:b9:f4:c0:23:7f:94:0b:ef:7f:6a:ff:d5:d7:c6:3d:56:
         f3:10:16:98:1b:5e:8a:4d:f9:60:05:7b:8a:40:1d:58:cd:90:
         9a:80:c5:4e:f9:ac:14:00:e3:62:92:f1:ac:68:d0:a7:fa:fd:
         19:75:7c:a9:4c:db:41:b1:f3:1e:82:72:25:b5:09:23:da:be:
         20:8b:df:e2:a1:f4:44:e0:ac:94:ea:11:5e:86:1a:70:42:8b:
         fe:9f:f6:57:fa:e7:7c:db:0a:c6:3c:53:a6:cb:2e:bb:ec:33:
         3f:98:4a:c3:c4:98:a8:57:c4:b1:c7:8c:9c:46:d1:37:c6:19:
         c1:0e:bf:1f:be:73:bc:15:c9:ff:fc:fb:39:12:d7:e0:a8:27:
         b5:49:09:ee:ae:a5:28:b5:87:07:9b:9e:23:43:e6:9c:01:20:
         fe:7e:c4:fb:38:9c:73:04:23:4b:79:a0:d7:c6:8a:64:43:e6:
         2d:9a:2d:3f:85:f5:fe:67:a7:04:64:14:34:d2:4a:aa:5b:a9:
         54:2f:cc:ff:0b:2d:59:47:db:07:9d:b6:9a:ce:b5:3f:ff:e9:
         e5:f4:85:25:6b:b6:aa:a3:7d:40:bd:32:e7:b9:d6:d0:af:18:
         e7:e3:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org