Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/34352e3138362e39302e302f32342d3234203d3e20323639343137.roa
File:                     34352e3138362e39302e302f32342d3234203d3e20323639343137.roa (raw, json)
Hash identifier:          hkEXUSHtSW64EKr99N1Luk1fnDrhLYRKJQCmc6h9kYs=
Subject key identifier:   43:86:7C:E6:45:84:82:D1:F9:2F:99:86:E9:70:40:59:6F:29:C1:36
Certificate issuer:       /CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
Certificate serial:       3168A9246D00ADB633CB5301F0EBE1A58AB29585
Authority key identifier: 47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/34352e3138362e39302e302f32342d3234203d3e20323639343137.roa
Signing time:             Tue 02 May 2023 13:48:11 +0000
ROA not before:           Tue 02 May 2023 13:43:11 +0000
ROA not after:            Tue 30 Apr 2024 13:48:11 +0000
asID:                     269417
IP address blocks:        45.186.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:68:a9:24:6d:00:ad:b6:33:cb:53:01:f0:eb:e1:a5:8a:b2:95:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
        Validity
            Not Before: May  2 13:43:11 2023 GMT
            Not After : Apr 30 13:48:11 2024 GMT
        Subject: CN=43867CE6458482D1F92F9986E97040596F29C136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:40:a5:82:1a:a3:bf:7b:a5:b9:50:ed:62:
                    b5:94:4b:91:1f:08:63:60:a2:28:d0:fd:c5:2c:13:
                    ee:25:0b:1d:ec:4f:06:42:d7:13:c3:c5:9c:e3:69:
                    9a:60:63:8b:92:dd:d9:da:4a:39:ce:46:da:6d:53:
                    cf:b1:fe:39:ed:b2:bf:b8:c7:9e:cc:8f:23:f4:3f:
                    f0:4f:8a:b6:2a:6b:53:5b:1d:8d:20:7d:05:4c:27:
                    33:c4:fc:61:bc:94:9c:a5:f3:13:44:0f:3e:a6:38:
                    e5:4c:b3:78:f2:0e:52:0d:60:23:e8:22:11:ca:62:
                    ce:f4:59:c5:59:76:1c:f3:4e:eb:d2:10:95:97:aa:
                    c0:08:e5:62:fa:6c:99:43:75:7a:43:b3:5c:10:42:
                    e6:dd:fa:44:2f:b2:ef:9c:45:ed:84:a1:e7:37:0b:
                    31:d2:88:fb:0a:9c:2b:ba:73:93:f7:39:8b:2f:70:
                    b2:3d:28:96:7d:94:cd:ab:60:ec:08:49:c9:cc:02:
                    a6:94:5b:0d:9f:33:40:00:5e:b6:d0:c3:f2:9c:55:
                    c7:71:91:c7:48:65:ce:6e:aa:3a:e1:07:88:d3:77:
                    34:a0:d0:ec:a8:f7:75:f1:0c:fd:1d:53:3a:1d:c7:
                    51:75:58:5c:c4:da:ab:15:7d:bc:93:1a:34:c6:be:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:86:7C:E6:45:84:82:D1:F9:2F:99:86:E9:70:40:59:6F:29:C1:36
            X509v3 Authority Key Identifier:
                keyid:47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/34352e3138362e39302e302f32342d3234203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ca:d6:b8:ce:ee:bc:a0:cb:bb:d5:a4:b9:45:a5:e7:f8:c4:
         05:40:76:27:c8:96:4d:66:25:3e:21:df:b9:c0:cc:3c:f4:2a:
         79:e1:1c:c5:3b:98:65:11:81:06:95:40:bc:49:b0:f3:d5:e1:
         ae:12:f7:e6:b6:1a:26:fd:b6:2d:63:65:71:66:0f:b4:54:aa:
         53:70:07:25:5f:4d:ee:d2:48:95:57:a6:54:09:9e:91:b7:b0:
         24:24:ce:eb:7a:6c:67:a7:24:68:e1:79:40:9c:0b:83:ec:e6:
         c0:7b:97:8a:76:3e:85:dd:30:37:23:60:f5:a5:85:58:dc:e5:
         67:3d:5f:e7:ad:cd:c3:2c:fe:50:67:24:13:84:15:04:9f:24:
         41:49:62:ce:6b:b7:0c:b7:29:7f:49:b4:82:27:98:c8:00:78:
         5e:ac:ed:cf:b5:a1:fc:71:cb:79:c4:78:94:09:a9:a7:c9:b0:
         5f:50:e0:a1:b9:83:25:66:cc:e8:ed:29:a3:39:36:50:11:01:
         af:e3:0a:4b:0b:ea:a2:59:c2:f8:26:5c:11:a3:7f:ec:4b:fd:
         cc:8a:da:bc:75:64:0b:16:d4:ae:ae:b6:4c:ba:aa:87:18:a7:
         a5:4a:9a:95:64:e5:a5:a6:60:d3:7a:b1:68:5b:62:a5:4c:e7:
         97:76:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org