Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/1/34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa
File:                     34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa (raw, json)
Hash identifier:          Esf5QenXD9VjbArSWWlpvdopZDrzyra9qgXKKngcn54=
Subject key identifier:   45:D5:85:C3:E2:30:38:4F:EF:40:59:4F:82:1C:26:3A:BD:33:F0:CC
Certificate issuer:       /CN=FD74C6A539FA2537A4A0C190E6A06E78157F5BA6
Certificate serial:       4E4BA31016000D4F30C7049F3C2E3D336EE4ACCB
Authority key identifier: FD:74:C6:A5:39:FA:25:37:A4:A0:C1:90:E6:A0:6E:78:15:7F:5B:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/1/34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa
Signing time:             Wed 03 Apr 2024 20:31:10 +0000
ROA not before:           Wed 03 Apr 2024 20:26:10 +0000
ROA not after:            Wed 02 Apr 2025 20:31:10 +0000
asID:                     269681
IP address blocks:        45.191.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4b:a3:10:16:00:0d:4f:30:c7:04:9f:3c:2e:3d:33:6e:e4:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD74C6A539FA2537A4A0C190E6A06E78157F5BA6
        Validity
            Not Before: Apr  3 20:26:10 2024 GMT
            Not After : Apr  2 20:31:10 2025 GMT
        Subject: CN=45D585C3E230384FEF40594F821C263ABD33F0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:e4:27:7b:cb:8d:77:78:11:a2:de:d0:50:
                    d1:3c:b2:f2:75:4f:88:63:3a:ca:3f:3d:08:e6:ea:
                    50:3a:2e:20:25:fb:a1:c3:6c:f3:f4:ef:62:f4:0e:
                    24:d7:18:a3:fe:a5:62:8f:39:4a:b7:1c:2b:4e:88:
                    39:d9:63:71:60:98:87:5e:21:04:ce:ed:57:ab:c1:
                    52:42:8c:73:54:96:15:cc:48:c8:29:58:65:6f:3e:
                    7a:2c:a3:e8:3b:c1:b7:24:ac:34:fc:7e:a0:95:c5:
                    b8:0c:12:0d:60:d0:e9:58:2c:89:b6:40:05:95:77:
                    bc:a1:b1:dc:3d:7f:fd:60:64:18:76:6c:f1:17:b7:
                    30:2b:24:41:b7:ee:fd:6c:5b:b1:d1:9f:8d:6b:e1:
                    c2:cb:61:47:45:a6:4a:f6:a9:f8:59:2e:55:7d:e5:
                    51:47:de:c7:a0:ba:92:a9:1d:23:f8:ba:43:3d:6f:
                    42:dd:e8:1d:40:29:ac:e9:59:32:f4:ec:a8:be:b5:
                    1d:3a:69:0c:65:ce:c5:ee:20:d3:4b:d6:71:ba:73:
                    2e:3d:3d:dc:97:67:a0:2c:eb:81:1e:94:ee:af:a6:
                    ec:b2:28:f2:b4:ba:4d:1d:9e:28:e9:ee:91:70:68:
                    a4:48:3b:c8:98:16:d9:4b:19:3c:89:80:98:87:98:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:85:C3:E2:30:38:4F:EF:40:59:4F:82:1C:26:3A:BD:33:F0:CC
            X509v3 Authority Key Identifier:
                keyid:FD:74:C6:A5:39:FA:25:37:A4:A0:C1:90:E6:A0:6E:78:15:7F:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/1/FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/1/34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:7f:de:8b:b3:19:59:56:db:f2:5a:aa:ef:38:1d:9b:21:31:
         3f:d1:0d:91:50:d1:82:37:45:a0:b9:52:24:62:7e:0d:38:eb:
         af:18:55:cb:1f:13:1a:7d:2d:eb:4b:c9:44:3f:ba:73:ff:41:
         11:fd:d6:c4:25:91:eb:cd:69:ad:d7:1a:90:f9:84:18:be:a0:
         56:f0:5b:b7:c9:16:e5:02:6b:16:d3:43:d5:84:69:61:5f:4d:
         ba:eb:5f:2f:75:e7:c1:d9:f3:42:6c:27:7c:21:2f:93:8a:a3:
         91:40:6b:32:4b:b1:27:43:f8:3e:43:f5:59:85:82:5c:45:a6:
         49:4b:43:40:a9:1c:73:b5:1d:4d:33:ba:17:f1:22:b0:7f:b2:
         d1:17:24:7f:ba:68:21:2f:a3:bc:15:cc:ff:58:7d:17:7b:55:
         cd:46:30:07:84:6d:03:ad:12:45:9b:4a:d2:fd:78:a7:e3:36:
         9c:6f:7d:f6:7f:a9:3a:b3:15:1a:a6:79:6d:4b:46:4a:6e:92:
         9c:1a:47:f4:b8:ea:dd:36:35:a1:73:77:d2:cb:27:8d:6f:20:
         3d:96:64:1e:27:ef:fa:48:36:86:69:48:6c:05:b2:95:8f:ee:
         f0:58:31:9f:b9:7e:2b:30:eb:02:99:96:e2:3f:cf:8d:b5:d8:
         d9:d0:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org