Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/0/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
File:                     34352e362e3136342e302f32322d3332203d3e20323636313430.roa (raw, json)
Hash identifier:          wSDexOfhSebwODFY4/eMQCwO62flsSLwOZ8CSlmw9Fo=
Subject key identifier:   94:6C:5C:47:DD:50:01:B8:F5:E6:4C:32:62:3E:18:DF:7C:1D:FF:DA
Certificate issuer:       /CN=7413D9E11B833BF9E8A6706DC1FE55CB927C674F
Certificate serial:       05839D6D2A395F9BCFA0DF367C42CD69958FFEF0
Authority key identifier: 74:13:D9:E1:1B:83:3B:F9:E8:A6:70:6D:C1:FE:55:CB:92:7C:67:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7413D9E11B833BF9E8A6706DC1FE55CB927C674F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/0/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
Signing time:             Fri 15 Mar 2024 18:53:41 +0000
ROA not before:           Fri 15 Mar 2024 18:48:41 +0000
ROA not after:            Fri 14 Mar 2025 18:53:41 +0000
asID:                     266140
IP address blocks:        45.6.164.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:83:9d:6d:2a:39:5f:9b:cf:a0:df:36:7c:42:cd:69:95:8f:fe:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7413D9E11B833BF9E8A6706DC1FE55CB927C674F
        Validity
            Not Before: Mar 15 18:48:41 2024 GMT
            Not After : Mar 14 18:53:41 2025 GMT
        Subject: CN=946C5C47DD5001B8F5E64C32623E18DF7C1DFFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:07:83:31:0e:bd:e1:0b:77:6d:e6:05:40:
                    e2:c1:c3:47:f0:95:42:f1:d2:62:e4:12:33:30:66:
                    34:51:0f:e5:bb:fc:df:55:12:9c:31:a9:75:fb:7d:
                    60:4d:20:96:ee:53:fd:04:c7:0c:2d:9b:1d:41:10:
                    2b:69:c5:1d:c3:20:99:8c:61:c6:9d:b9:2a:f0:a7:
                    f7:5d:1d:42:3d:9e:e5:50:fd:cd:2f:3f:61:a5:6c:
                    04:42:8b:9e:53:45:37:3f:7c:8d:2d:d1:59:29:50:
                    9b:2d:45:55:d5:04:2c:ab:26:28:94:91:3f:40:5c:
                    9c:d9:e1:54:33:98:58:5e:42:a2:02:e5:65:20:a5:
                    5b:55:a7:c7:50:71:72:4f:33:d0:2f:ad:1c:73:f0:
                    27:d1:26:f1:e8:f0:4b:3d:c3:a9:9d:3c:95:6c:9e:
                    5a:dd:b6:d9:19:56:f7:03:7b:fd:30:ad:15:ec:81:
                    35:99:df:20:99:ff:c2:50:f3:39:52:f8:99:6f:a1:
                    0e:93:8b:88:8c:20:29:b5:39:09:e6:35:a2:ac:db:
                    8a:ae:08:3f:39:ce:e1:78:76:b6:64:bc:ad:f3:4a:
                    42:68:ae:86:db:17:a1:66:64:50:39:a1:b1:33:11:
                    fc:6a:e5:a7:69:b0:7b:cf:0b:12:05:0e:1c:08:fc:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:5C:47:DD:50:01:B8:F5:E6:4C:32:62:3E:18:DF:7C:1D:FF:DA
            X509v3 Authority Key Identifier:
                keyid:74:13:D9:E1:1B:83:3B:F9:E8:A6:70:6D:C1:FE:55:CB:92:7C:67:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/0/7413D9E11B833BF9E8A6706DC1FE55CB927C674F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7413D9E11B833BF9E8A6706DC1FE55CB927C674F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/0/34352e362e3136342e302f32322d3332203d3e20323636313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:19:21:46:dc:30:57:33:b2:1b:89:24:39:77:97:cc:b3:04:
         66:0f:b6:5e:60:c1:24:1f:97:02:7c:e1:82:11:30:2c:0b:ce:
         99:80:5a:af:63:98:96:62:5d:9e:33:39:12:a5:4d:f2:81:43:
         4d:a9:86:5b:67:8d:38:ac:4d:61:e6:70:0c:06:ab:75:32:41:
         fa:76:84:eb:72:ff:57:10:bf:0f:52:37:98:97:f4:99:d7:6a:
         25:7d:eb:da:8f:61:70:97:07:b0:7e:3e:03:cb:ae:51:52:23:
         26:d6:a2:fc:01:6d:f1:c0:c2:d4:60:b5:47:46:39:bc:b3:33:
         7d:dd:d6:34:fb:1d:61:80:b1:06:e1:23:0a:d9:ab:63:7d:87:
         dc:28:c4:02:0c:36:56:00:92:1e:69:52:1a:ad:b0:dc:ae:b5:
         72:29:b3:16:50:9a:88:33:ce:e9:48:f4:4f:c5:21:44:5d:c4:
         3c:bc:11:9c:b6:2f:4d:20:66:c7:fb:d6:52:58:b9:59:26:1e:
         74:07:e9:d5:eb:54:3d:24:6c:68:1c:6d:af:c9:d3:b5:0d:9a:
         4f:05:a3:f2:6b:1e:0a:99:c4:53:89:ab:0b:5d:c3:4e:a7:ee:
         70:3d:fe:f9:86:a5:da:0b:9f:54:5c:7f:77:6b:83:ff:01:42:
         b5:4f:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org