Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133382e302f32342d3234203d3e20323639353930.roa
File:                     34352e3138392e3133382e302f32342d3234203d3e20323639353930.roa (raw, json)
Hash identifier:          qUIdDvCOmtSMZMOvzx4vkE/CQV8dHbhOM4nPWnVFI1M=
Subject key identifier:   63:07:37:56:25:08:28:D8:A1:9D:8C:35:F2:61:F2:E3:48:86:9D:40
Certificate issuer:       /CN=49B64BAD592AFF93811E833FB944B7DA58E67068
Certificate serial:       0624A3AA9DE9E6484D74D8884726712A6FB59328
Authority key identifier: 49:B6:4B:AD:59:2A:FF:93:81:1E:83:3F:B9:44:B7:DA:58:E6:70:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B64BAD592AFF93811E833FB944B7DA58E67068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133382e302f32342d3234203d3e20323639353930.roa
Signing time:             Mon 09 Oct 2023 23:51:50 +0000
ROA not before:           Mon 09 Oct 2023 23:46:50 +0000
ROA not after:            Mon 07 Oct 2024 23:51:50 +0000
asID:                     269590
IP address blocks:        45.189.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:24:a3:aa:9d:e9:e6:48:4d:74:d8:88:47:26:71:2a:6f:b5:93:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49B64BAD592AFF93811E833FB944B7DA58E67068
        Validity
            Not Before: Oct  9 23:46:50 2023 GMT
            Not After : Oct  7 23:51:50 2024 GMT
        Subject: CN=63073756250828D8A19D8C35F261F2E348869D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:20:16:8e:df:aa:1e:93:ef:eb:b9:d4:07:
                    16:fa:4d:4c:a3:c2:c8:08:f2:97:6a:d2:10:b7:66:
                    a7:ef:ab:72:70:05:e1:c0:47:da:0b:05:11:a0:40:
                    ea:e6:d4:b9:5c:37:9d:17:1d:ce:e9:66:1f:73:14:
                    f2:8e:4b:07:eb:59:fe:05:59:88:03:fe:25:79:97:
                    df:88:3e:5f:ca:57:72:88:ad:00:c9:5a:e8:8c:99:
                    19:b3:85:1a:a5:1c:fe:ab:21:ae:25:1b:5b:e7:a8:
                    d4:0b:1e:77:c8:b6:54:94:47:de:ce:1e:55:e3:e5:
                    ac:82:01:23:55:bd:dc:d9:77:43:96:ab:fd:25:8f:
                    72:45:c3:ae:c4:fb:3b:c3:b9:b7:49:a8:70:f3:54:
                    fa:53:b2:a5:e7:97:00:9b:14:75:44:31:bb:8c:87:
                    85:f0:e9:f7:4c:cd:80:30:74:7e:f2:b1:8a:99:b4:
                    a2:d2:37:78:56:58:37:b1:87:19:ce:db:1a:a3:15:
                    af:6a:7a:6c:4b:e7:b6:1d:f0:e3:be:61:79:54:32:
                    a3:75:6e:67:fb:60:80:2f:ee:1b:8c:72:8e:cd:29:
                    79:af:7b:bc:df:b7:b3:29:c4:c2:69:cc:2d:68:4e:
                    4a:03:11:0f:ed:2d:30:54:4d:35:fa:30:42:a3:7d:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:37:56:25:08:28:D8:A1:9D:8C:35:F2:61:F2:E3:48:86:9D:40
            X509v3 Authority Key Identifier:
                keyid:49:B6:4B:AD:59:2A:FF:93:81:1E:83:3F:B9:44:B7:DA:58:E6:70:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/49B64BAD592AFF93811E833FB944B7DA58E67068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B64BAD592AFF93811E833FB944B7DA58E67068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133382e302f32342d3234203d3e20323639353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:18:1c:5f:53:69:e3:41:da:51:98:47:2a:b7:be:31:25:
         25:ed:ca:f9:25:22:e9:4f:c7:e7:6b:83:4f:5b:32:d5:14:4b:
         18:7d:ea:01:eb:a9:01:e8:2c:56:13:80:05:b5:e9:eb:4a:b2:
         74:cb:01:83:49:95:bd:15:5c:7b:82:6d:11:14:46:f5:dd:b4:
         49:7c:e0:8b:a2:e0:01:ad:e6:e8:ee:ad:9f:11:00:a9:bf:12:
         92:65:ef:18:15:1f:80:c1:93:be:ad:07:87:08:33:58:68:ef:
         c8:bd:9f:47:72:c3:fe:c2:db:94:2e:62:a1:f9:4e:38:45:18:
         b4:4e:ba:a1:3b:8d:f9:e5:04:25:28:88:e1:a1:67:e9:cb:4d:
         1e:e3:81:b6:90:a9:6f:85:48:63:87:76:b2:35:fa:60:39:a7:
         ff:de:b4:90:7b:fa:b4:40:6e:02:11:13:38:3b:78:84:35:3f:
         e0:2c:a3:54:1c:a0:6a:3e:d2:c5:3b:3f:05:c3:75:83:c9:5d:
         f9:cb:12:1d:ae:c3:db:0e:62:6e:f2:6a:cf:cf:2c:31:4e:d2:
         79:0c:ff:a2:3a:79:ad:8e:ae:bf:44:c0:bb:72:df:47:ad:85:
         36:45:39:36:30:5d:16:3d:72:7f:c3:7f:9d:f1:a6:f5:25:b0:
         14:f2:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org