Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/34352e3137392e352e302f32342d3234203d3e20323639313230.roa
File:                     34352e3137392e352e302f32342d3234203d3e20323639313230.roa (raw, json)
Hash identifier:          l7WwUk5H7HEp5VRrv8MYgYVCl6AqMAcrDHOJMvsL+74=
Subject key identifier:   A4:7C:F8:97:97:F8:21:F4:ED:30:48:CE:89:10:52:E8:31:53:9C:E8
Certificate issuer:       /CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
Certificate serial:       3DD317166CE0DEC304982B955204F356B2C6A09B
Authority key identifier: 6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/34352e3137392e352e302f32342d3234203d3e20323639313230.roa
Signing time:             Wed 08 Nov 2023 17:39:58 +0000
ROA not before:           Wed 08 Nov 2023 17:34:58 +0000
ROA not after:            Wed 06 Nov 2024 17:39:58 +0000
asID:                     269120
IP address blocks:        45.179.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d3:17:16:6c:e0:de:c3:04:98:2b:95:52:04:f3:56:b2:c6:a0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
        Validity
            Not Before: Nov  8 17:34:58 2023 GMT
            Not After : Nov  6 17:39:58 2024 GMT
        Subject: CN=A47CF89797F821F4ED3048CE891052E831539CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:af:90:db:6a:b9:4b:08:c9:80:6e:52:f0:
                    2e:ab:f7:8f:af:d0:ea:df:bc:7a:34:7f:47:12:1a:
                    e9:d7:80:19:19:cb:61:7e:81:76:15:61:75:00:87:
                    34:b2:93:f3:71:35:39:fa:e1:a2:67:5f:59:ed:f0:
                    bd:c1:1d:d6:fd:61:b4:44:99:5c:b9:57:49:4f:19:
                    dc:f6:e0:e2:d7:79:12:1c:51:65:41:16:f8:38:eb:
                    9d:c8:5a:ca:39:ee:79:bf:3c:6d:a3:6a:15:22:c3:
                    37:e8:6c:2d:d4:30:29:e5:de:67:0b:e6:fe:29:7e:
                    8a:65:f5:fc:21:6a:f9:1a:0a:9d:a9:fd:18:87:32:
                    87:cb:19:30:d0:80:cd:69:50:38:6c:cf:78:90:2c:
                    95:be:4e:0a:65:5c:d6:56:bf:9f:c9:2b:f2:47:6f:
                    a4:76:00:e5:a3:87:6f:13:eb:59:4e:c7:9a:18:ec:
                    60:57:ce:79:a5:53:e6:7c:e2:db:a6:56:45:c4:98:
                    ac:0a:fb:d0:89:79:66:12:5e:67:ad:1d:f0:c8:39:
                    12:ea:c0:7d:da:ed:3e:65:81:9f:b9:6a:e6:51:ef:
                    42:60:59:c7:9e:f1:f0:55:fd:45:8e:60:41:de:f6:
                    be:87:e3:f5:bd:25:3e:26:c7:3f:72:f9:6b:a8:a6:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7C:F8:97:97:F8:21:F4:ED:30:48:CE:89:10:52:E8:31:53:9C:E8
            X509v3 Authority Key Identifier:
                keyid:6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/34352e3137392e352e302f32342d3234203d3e20323639313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:98:8f:03:28:dc:30:c9:59:c2:8e:10:df:f6:1f:9d:75:fa:
         bb:31:11:bc:57:e2:16:fe:14:e7:9c:04:5f:45:0f:6f:01:97:
         bc:ea:c6:f2:b2:f9:bf:95:ba:3e:06:33:f8:2f:91:e4:02:c6:
         8f:2c:01:da:71:f3:8c:7b:86:bd:0a:35:aa:cd:3c:1e:08:c2:
         f4:80:1a:89:a2:93:ef:e0:a0:02:2e:4b:0f:04:be:a5:6e:47:
         bd:2c:07:95:3c:82:4d:83:12:44:4e:7e:a9:1a:db:2a:9c:77:
         df:8d:05:78:aa:59:5d:00:62:ba:6a:83:b7:3e:33:ef:d0:92:
         6f:db:ec:06:b5:de:29:6b:d5:51:83:2d:bc:df:e7:02:cc:9d:
         02:0b:09:0b:9b:13:25:88:ad:bc:c5:fc:97:49:30:fd:25:fc:
         ac:a0:9e:f1:e0:19:4b:f3:ff:96:b8:e7:56:15:80:b5:f8:eb:
         08:33:7a:82:74:f0:95:1a:73:fa:21:6c:46:54:02:14:d4:66:
         c7:44:93:c6:9e:ae:18:95:f0:e4:33:d4:d7:8c:13:4f:ac:59:
         b7:41:c0:1d:a2:fb:19:b1:56:c2:ec:ee:d2:21:8a:22:61:85:
         85:25:4a:1b:13:cc:84:8f:98:45:2b:de:b4:a0:6d:76:ef:b6:
         cd:43:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:51 2024 by rpki-client on console-ams.rpki-client.org