Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/34352e3138352e3134302e302f32322d3234203d3e20323639333738.roa
File:                     34352e3138352e3134302e302f32322d3234203d3e20323639333738.roa (raw, json)
Hash identifier:          ERalFipWyKFNAL0+CmYlcQnc2iV+C0l4NzeBAzN56fs=
Subject key identifier:   89:FB:BF:E2:55:7B:38:27:FB:93:1A:2B:82:B9:38:35:36:72:D5:EC
Certificate issuer:       /CN=5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807
Certificate serial:       3BECAEF7D901934575B5801B8F4D8BC4C29AB277
Authority key identifier: 5A:4B:20:3C:F6:C5:A4:FD:2D:00:BE:B3:AE:A7:A3:E9:EE:16:78:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/34352e3138352e3134302e302f32322d3234203d3e20323639333738.roa
Signing time:             Sun 28 Jan 2024 00:00:34 +0000
ROA not before:           Sat 27 Jan 2024 23:55:34 +0000
ROA not after:            Sun 26 Jan 2025 00:00:34 +0000
asID:                     269378
IP address blocks:        45.185.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ec:ae:f7:d9:01:93:45:75:b5:80:1b:8f:4d:8b:c4:c2:9a:b2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807
        Validity
            Not Before: Jan 27 23:55:34 2024 GMT
            Not After : Jan 26 00:00:34 2025 GMT
        Subject: CN=89FBBFE2557B3827FB931A2B82B938353672D5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:57:dd:dc:c7:91:e4:1d:28:74:6e:df:ef:
                    cd:cd:ab:d7:e0:65:21:5c:3c:6f:07:79:5e:94:9f:
                    b7:c1:9b:94:32:f7:1b:c8:e2:23:e3:7a:73:12:c6:
                    f9:f4:4b:d0:34:44:21:1d:25:7c:af:ee:ac:0d:c1:
                    46:23:7d:3e:36:8e:e2:1e:ec:f4:bc:ba:02:68:d9:
                    02:25:bb:aa:00:54:59:80:0c:e1:b6:dc:88:8e:1d:
                    64:1c:9a:97:8d:25:d8:df:af:3e:91:40:12:22:f6:
                    bd:16:32:18:e1:4c:52:8c:bd:b4:0f:86:ae:79:e3:
                    57:c0:59:17:dd:30:20:86:22:70:58:03:56:b6:3e:
                    e1:5f:34:95:1c:0a:4b:c0:d2:cf:26:77:5d:5c:e7:
                    9f:36:17:7f:99:3d:9d:45:62:51:8d:f4:ca:f8:05:
                    70:b6:55:4d:98:31:cc:c5:4c:6e:f2:93:ec:4f:ed:
                    b2:45:d2:15:70:5f:77:42:5e:3c:65:20:bd:f2:29:
                    73:15:84:30:4d:cd:e4:4c:4f:a6:20:18:c1:75:28:
                    86:71:73:22:53:dc:12:46:a9:dc:5b:a3:5a:10:d8:
                    2e:1c:0e:11:42:7f:b3:e0:12:6c:74:31:06:56:70:
                    90:01:84:60:f4:74:be:d1:f0:54:64:0d:98:14:9d:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FB:BF:E2:55:7B:38:27:FB:93:1A:2B:82:B9:38:35:36:72:D5:EC
            X509v3 Authority Key Identifier:
                keyid:5A:4B:20:3C:F6:C5:A4:FD:2D:00:BE:B3:AE:A7:A3:E9:EE:16:78:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/34352e3138352e3134302e302f32322d3234203d3e20323639333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:4b:e2:fb:02:cf:b5:b9:7d:46:3d:4b:6d:13:92:76:8d:d1:
         85:3d:3e:66:ac:dd:5b:b4:45:1b:43:c7:fd:5c:75:5d:ff:a0:
         f0:06:08:e5:54:63:05:df:fe:c2:e1:28:ef:03:80:8f:ca:07:
         1c:f8:66:ba:be:a6:80:da:d4:b8:da:af:94:72:45:7b:e0:8b:
         e3:8b:67:d0:f4:4f:94:2a:1b:57:03:8a:4d:54:ae:64:75:a9:
         b5:da:37:6f:e4:58:15:ac:1b:6c:10:6b:95:83:07:6d:bd:f5:
         a6:dc:1b:b6:12:f4:85:c3:60:64:27:1a:eb:2e:23:8b:ec:47:
         85:cd:95:85:4f:4a:6b:7c:28:52:a5:11:77:b1:0e:f0:65:50:
         13:31:8b:65:26:8b:bb:75:15:9a:ae:2f:3d:e3:c2:49:6f:4e:
         4d:74:4f:ff:f1:94:24:6c:79:46:38:6a:4a:ab:6b:4f:6f:ad:
         07:ce:e8:bb:80:10:50:1a:ef:12:be:b9:e4:b7:ce:29:3f:88:
         77:3c:62:23:e2:18:1e:02:67:30:c6:70:9b:d7:9e:22:fc:1a:
         c9:8a:61:37:b5:28:95:e5:48:a0:ab:8c:f9:15:53:45:91:d9:
         db:8b:21:9c:6b:10:31:dd:86:22:74:fc:b0:39:64:ac:b2:8d:
         60:df:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org