Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38382e302f32322d3232203d3e20323632343934.roa
File:                     34352e3232362e38382e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          Qjggyb1kmpjcMGxCFSaVNbv27CKAICTY+QjiSS7WInY=
Subject key identifier:   D5:58:7A:0B:B2:EB:7F:21:5A:8A:57:EF:50:EA:25:AA:33:B7:2E:42
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       5AA9B189E8D689CBAA4D7F42392C43CA4C49C161
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38382e302f32322d3232203d3e20323632343934.roa
Signing time:             Fri 18 Aug 2023 11:49:57 +0000
ROA not before:           Fri 18 Aug 2023 11:44:57 +0000
ROA not after:            Sun 18 Aug 2024 11:49:57 +0000
asID:                     262494
IP address blocks:        45.226.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a9:b1:89:e8:d6:89:cb:aa:4d:7f:42:39:2c:43:ca:4c:49:c1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug 18 11:44:57 2023 GMT
            Not After : Aug 18 11:49:57 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:c1:df:bd:f8:a9:14:d0:a6:b2:8a:54:39:
                    02:2b:49:76:f9:80:8d:1f:49:d1:ef:e2:c6:7f:fa:
                    55:63:f7:45:59:d1:de:50:39:c6:a6:31:bc:15:ef:
                    b0:05:08:55:16:a4:a4:00:0e:c2:81:c6:77:80:67:
                    06:8e:f8:b8:12:73:50:d4:9b:30:c8:75:a9:55:3a:
                    fe:6d:11:0f:60:56:a1:45:c8:3b:3c:95:4e:f0:2f:
                    c0:4b:b4:65:84:a8:24:de:37:17:d4:3d:62:aa:1f:
                    a8:0f:31:12:01:e7:45:74:c5:82:77:41:be:8e:c6:
                    7b:05:6a:0d:d3:0c:7f:2b:32:9a:52:8e:b1:02:93:
                    8f:86:93:96:7c:33:4b:ac:10:94:b9:d0:d6:95:30:
                    53:82:be:d0:c2:a9:00:eb:27:bc:ca:bc:40:4b:f3:
                    b4:32:82:a0:47:c9:27:f4:25:c0:dc:33:fc:58:4a:
                    86:f9:9d:ab:21:f5:20:8d:de:5a:d5:f5:31:59:6d:
                    7f:62:43:46:19:70:7d:b9:cb:8b:4e:59:17:a8:fe:
                    e7:93:7f:22:2a:32:01:41:49:af:61:d6:ad:54:fa:
                    92:5a:fa:2f:99:c4:35:49:28:e5:20:5b:b6:d4:a1:
                    73:1f:4d:db:d9:82:0b:d1:a5:08:3f:e0:15:c1:0b:
                    b7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:7A:0B:B2:EB:7F:21:5A:8A:57:EF:50:EA:25:AA:33:B7:2E:42
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38382e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:05:c7:f5:c6:c2:d2:2a:08:82:8f:29:4d:ec:82:ac:16:
         f9:ba:75:ef:3a:dc:05:d6:15:e6:6a:58:35:f3:3d:8e:a4:4f:
         86:53:2b:33:54:fe:6d:1a:94:ca:d3:9c:0d:5f:0a:24:15:cb:
         ff:19:ea:82:73:97:1b:2e:11:3a:b1:e8:2b:81:a5:9d:79:49:
         51:0d:bc:7f:16:5a:8d:6b:e3:b8:2c:04:6c:69:d9:fa:43:ba:
         73:a2:01:02:97:44:b0:e5:d5:32:9c:a6:eb:1a:40:e9:a7:a5:
         b8:be:e2:10:b5:92:39:52:26:96:f7:ad:b4:39:37:10:26:f0:
         46:fc:30:c5:00:dd:49:3c:05:1a:4c:14:41:bd:8c:1a:8b:e2:
         46:21:5e:40:e0:b5:36:d4:d3:68:48:4f:ad:c5:28:2b:57:b2:
         c5:18:f3:33:ec:f2:73:a0:4a:29:29:3d:44:1f:02:65:5a:87:
         9e:18:0e:f4:b3:c1:33:eb:25:82:aa:7b:b4:75:88:c0:ac:90:
         d0:06:2a:71:33:4d:ce:0e:24:3b:07:5c:88:36:fc:53:1d:96:
         85:e5:4a:98:10:05:f5:6c:e1:72:e6:c2:23:24:ef:c0:5d:72:
         37:bd:dc:9c:b6:30:42:6e:1c:d4:e2:bb:24:52:45:49:55:7a:
         2d:7e:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org