Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/34352e3139302e35322e302f32322d3234203d3e20323639363237.roa
File:                     34352e3139302e35322e302f32322d3234203d3e20323639363237.roa (raw, json)
Hash identifier:          UBMmEf92t8plb6B2YAPcZXNCAglEzhJJm5th8gal0Jk=
Subject key identifier:   5E:09:30:0B:4F:DA:79:DD:FF:FC:19:81:6C:B9:71:1A:9B:9E:8B:22
Certificate issuer:       /CN=C16B2DF662105F4A086EEC8619FD4906DC645428
Certificate serial:       10C11E90883F41724E7F618A0710D99FF8DF2331
Authority key identifier: C1:6B:2D:F6:62:10:5F:4A:08:6E:EC:86:19:FD:49:06:DC:64:54:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/34352e3139302e35322e302f32322d3234203d3e20323639363237.roa
Signing time:             Wed 27 Sep 2023 14:54:58 +0000
ROA not before:           Wed 27 Sep 2023 14:49:58 +0000
ROA not after:            Wed 25 Sep 2024 14:54:58 +0000
asID:                     269627
IP address blocks:        45.190.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c1:1e:90:88:3f:41:72:4e:7f:61:8a:07:10:d9:9f:f8:df:23:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16B2DF662105F4A086EEC8619FD4906DC645428
        Validity
            Not Before: Sep 27 14:49:58 2023 GMT
            Not After : Sep 25 14:54:58 2024 GMT
        Subject: CN=5E09300B4FDA79DDFFFC19816CB9711A9B9E8B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:6e:66:be:ab:0d:c9:c9:9a:b8:2a:e3:82:
                    98:0e:a1:b2:02:25:ec:32:a5:a3:2d:11:a9:68:0a:
                    5a:e9:c2:44:4f:4c:ed:fe:a7:fe:0d:f1:e6:4e:98:
                    76:0b:ce:27:bf:4c:2f:55:a9:17:3b:ed:25:81:10:
                    cb:8d:14:fa:f4:b5:be:65:c9:5e:72:ae:91:1b:40:
                    f0:00:8d:84:73:1d:30:01:fe:2b:3b:3e:8b:2e:be:
                    38:85:bf:7e:b1:dd:27:ce:26:6c:b4:04:e5:2d:5a:
                    f7:ad:39:4d:93:cb:ba:20:2e:4d:15:6a:d7:5c:c2:
                    40:fa:ac:40:0b:96:77:fe:99:18:db:2a:22:a5:18:
                    91:e9:1e:92:c8:3f:de:a5:dc:ed:ed:e0:af:f8:4c:
                    bf:0f:a0:c9:e6:15:a1:77:3f:5f:2c:30:67:e3:4f:
                    66:5b:32:b2:9f:95:d0:d9:9b:5f:31:0e:60:5e:60:
                    1d:7b:61:7e:4d:b5:98:73:f0:81:68:63:ce:a8:fc:
                    3c:49:21:f9:13:ff:7c:27:c9:3f:72:3c:69:f0:de:
                    52:f4:d9:e8:fc:dd:b3:34:48:98:3d:06:a4:4f:f8:
                    9b:e9:bd:31:92:45:b0:10:b5:21:1a:0f:19:b1:0a:
                    ae:68:b1:50:cb:b9:9a:ae:c9:bf:c2:a3:9a:0b:92:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:09:30:0B:4F:DA:79:DD:FF:FC:19:81:6C:B9:71:1A:9B:9E:8B:22
            X509v3 Authority Key Identifier:
                keyid:C1:6B:2D:F6:62:10:5F:4A:08:6E:EC:86:19:FD:49:06:DC:64:54:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/34352e3139302e35322e302f32322d3234203d3e20323639363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:2c:a6:58:6a:ac:40:93:85:00:d5:ac:22:3f:b7:35:52:fe:
         ec:01:b5:d7:c9:10:5b:45:ea:49:19:92:51:18:7e:75:99:d6:
         63:e1:b2:7d:36:3d:a7:84:62:22:55:a4:db:e6:49:a1:2c:f8:
         2e:d2:24:4f:2e:d9:37:a9:99:60:1a:0d:ff:33:70:d5:23:a2:
         47:fa:21:95:44:e6:18:48:64:2b:19:cd:77:8b:24:6c:24:e6:
         b2:6a:cb:b1:b7:11:33:e0:19:32:ce:62:b6:1c:e4:2d:60:c0:
         46:bf:e3:8c:52:4d:97:74:45:50:02:98:08:95:6d:0b:f4:df:
         c5:cc:7a:3c:0d:d2:ae:f8:c2:7d:dc:e8:9f:61:95:f2:22:3a:
         7a:57:bf:b0:f1:99:f7:e5:77:b4:5b:d5:f1:3c:ad:9a:de:c0:
         2a:b1:fd:1e:c2:cc:9d:74:e3:d1:73:b1:88:8e:ea:f4:33:f4:
         99:6c:95:5d:bf:0e:ba:54:00:41:dd:80:9f:2e:d6:9d:48:84:
         34:c9:8a:af:06:45:fb:66:0a:a8:1b:d0:89:cc:41:e7:45:cf:
         09:f7:bf:e1:2b:3d:7a:3b:a0:c1:08:82:cd:ba:33:82:6d:a2:
         f4:80:75:6d:4c:93:ec:ff:34:17:88:f7:d9:ba:2f:a4:f8:57:
         63:e8:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org