Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32322d3232203d3e20323632343934.roa
File:                     34352e3137392e3131322e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          TTH5nUdiUuOzN3oSgkkY1xp8xseCbBWlYCRU+GElRIk=
Subject key identifier:   05:AC:01:0A:E4:EF:5C:87:19:52:99:59:B3:14:90:C7:58:D2:FC:B0
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       78A17113228D30975E02E30D7593F0D298F15DBF
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 10 Apr 2024 11:25:51 +0000
ROA not before:           Wed 10 Apr 2024 11:20:51 +0000
ROA not after:            Thu 10 Apr 2025 11:25:51 +0000
asID:                     262494
IP address blocks:        45.179.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a1:71:13:22:8d:30:97:5e:02:e3:0d:75:93:f0:d2:98:f1:5d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Apr 10 11:20:51 2024 GMT
            Not After : Apr 10 11:25:51 2025 GMT
        Subject: CN=3082010A0282010100CDD09C9F5224669815D786F4D97B4D7A52D4DA19609B2B144FCA4C6368438A6803B541DB0D938946AFCF85A10EC0E3492D517C10DAFB82AA5B305DAED2D65022324B80E54C709AE31614A8B8B857B09B9B55DA8B80FFDBC8F514AB92A08F51C063956919C5AE7F9AFAEF036F4F52CC71C12140D3AD45E6F63C45221E241FF70E95409F9E30E6823BDE82384469EEA221130D95D04557C382BAA40AE3E03C4139D551A47E7F3DCE62830C8319F0581E5384DBFC2587EAE48300C8476B56AE256D797FB2D2FB25A7C9A5C6880C8C6FCF8A9CD91C50B14CA3AC9F6151F888B5DE5724789FC68E268516795D9E41225757DE285FC361B0B444F4795E587122C5A1C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:9c:9f:52:24:66:98:15:d7:86:f4:d9:7b:
                    4d:7a:52:d4:da:19:60:9b:2b:14:4f:ca:4c:63:68:
                    43:8a:68:03:b5:41:db:0d:93:89:46:af:cf:85:a1:
                    0e:c0:e3:49:2d:51:7c:10:da:fb:82:aa:5b:30:5d:
                    ae:d2:d6:50:22:32:4b:80:e5:4c:70:9a:e3:16:14:
                    a8:b8:b8:57:b0:9b:9b:55:da:8b:80:ff:db:c8:f5:
                    14:ab:92:a0:8f:51:c0:63:95:69:19:c5:ae:7f:9a:
                    fa:ef:03:6f:4f:52:cc:71:c1:21:40:d3:ad:45:e6:
                    f6:3c:45:22:1e:24:1f:f7:0e:95:40:9f:9e:30:e6:
                    82:3b:de:82:38:44:69:ee:a2:21:13:0d:95:d0:45:
                    57:c3:82:ba:a4:0a:e3:e0:3c:41:39:d5:51:a4:7e:
                    7f:3d:ce:62:83:0c:83:19:f0:58:1e:53:84:db:fc:
                    25:87:ea:e4:83:00:c8:47:6b:56:ae:25:6d:79:7f:
                    b2:d2:fb:25:a7:c9:a5:c6:88:0c:8c:6f:cf:8a:9c:
                    d9:1c:50:b1:4c:a3:ac:9f:61:51:f8:88:b5:de:57:
                    24:78:9f:c6:8e:26:85:16:79:5d:9e:41:22:57:57:
                    de:28:5f:c3:61:b0:b4:44:f4:79:5e:58:71:22:c5:
                    a1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AC:01:0A:E4:EF:5C:87:19:52:99:59:B3:14:90:C7:58:D2:FC:B0
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:ea:dc:ae:61:59:e7:64:d3:e4:e1:b7:22:bd:00:a7:0e:
         8d:c2:cd:3b:27:8a:e8:e5:8a:a4:d4:56:75:7b:83:14:18:d2:
         7f:49:93:78:89:ec:6a:b3:ec:0e:0c:1a:64:8c:53:c8:89:16:
         57:7a:84:7b:7c:c3:1a:75:b4:ed:63:61:32:95:70:4b:4d:ff:
         80:be:c9:44:18:1c:8b:15:44:d8:8d:94:e5:26:68:db:24:f7:
         85:d3:3e:c3:c3:ef:c3:93:05:9e:5c:d1:d4:63:9b:b0:9c:82:
         59:12:61:66:bc:12:9c:a5:79:f4:0f:d0:c5:c3:cf:6d:77:d0:
         9a:ef:ef:47:b5:78:ca:f3:27:b2:95:de:68:2d:91:c0:e2:1f:
         55:f2:a2:8c:ec:38:ec:b0:35:47:d9:1b:9b:b4:fd:a2:a6:9b:
         bb:99:68:05:3c:3d:28:55:06:ae:d6:99:47:2e:8a:e3:73:69:
         0e:ce:21:7e:cf:18:35:0f:c3:97:47:55:e7:1f:a8:ca:8b:b6:
         8d:8c:4f:2c:05:05:65:7c:90:b9:e7:31:49:ba:6c:c6:b3:7a:
         03:b7:c3:f2:6c:13:3d:e8:a3:0d:bb:63:c9:c7:4a:98:d3:8c:
         74:b5:6e:06:36:fa:54:9e:64:64:e4:b2:b1:64:85:42:62:d2:
         e2:76:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org