Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37392e302f32342d3234203d3e20323639373030.roa
File:                     34352e3139312e37392e302f32342d3234203d3e20323639373030.roa (raw, json)
Hash identifier:          b+IY+ePtA+qfAB6toFdzQM476ngLGWQ0ofYnKRx+t6g=
Subject key identifier:   6E:2B:6A:C3:93:56:84:36:CB:60:14:93:D8:50:F4:BA:81:C1:3E:B7
Certificate issuer:       /CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
Certificate serial:       5D6FDD3F90254EE841E1FD41EE4E1A131878FBA9
Authority key identifier: F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37392e302f32342d3234203d3e20323639373030.roa
Signing time:             Fri 03 Nov 2023 20:22:02 +0000
ROA not before:           Fri 03 Nov 2023 20:17:02 +0000
ROA not after:            Fri 01 Nov 2024 20:22:02 +0000
asID:                     269700
IP address blocks:        45.191.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6f:dd:3f:90:25:4e:e8:41:e1:fd:41:ee:4e:1a:13:18:78:fb:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
        Validity
            Not Before: Nov  3 20:17:02 2023 GMT
            Not After : Nov  1 20:22:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:14:fa:2d:d1:07:06:73:f0:30:01:c7:82:
                    a9:9a:9a:a4:04:55:7d:a1:9e:5b:9b:07:84:dc:a3:
                    84:8e:5b:d4:52:28:52:0d:96:27:3f:8d:bf:13:96:
                    3c:7a:3f:b3:a8:9a:3f:a0:8e:82:37:46:5a:71:7f:
                    ad:87:58:34:46:9c:82:c3:3d:80:14:de:49:64:04:
                    7d:32:dc:5c:21:cb:47:62:12:9f:f4:2b:2c:5e:32:
                    a5:66:60:e9:93:f1:0c:28:0e:b0:bb:c4:2d:33:48:
                    86:05:d9:4d:0a:8d:3c:6e:2e:7e:f2:22:51:5a:80:
                    08:35:15:6f:61:dd:b8:e9:de:2f:06:1f:64:69:c7:
                    03:a8:70:96:ea:64:ca:20:f4:19:0f:7e:da:96:95:
                    ff:39:fc:00:bc:c4:ed:f0:2e:73:fa:3b:54:22:10:
                    7a:7d:75:f4:c4:7e:cb:b3:bf:fc:17:d5:2f:b2:45:
                    1c:98:25:18:a5:f8:88:21:ee:5c:82:b4:47:65:31:
                    e9:a9:7a:6d:ae:a4:80:16:86:66:85:ce:46:2d:7f:
                    bd:19:d6:0a:a7:a2:44:75:cf:65:ff:78:8a:63:c3:
                    0a:7c:a9:39:c4:61:1e:28:49:d0:ed:1f:80:65:2f:
                    bb:d4:46:c1:5d:ae:d7:bb:fa:6b:84:0b:b2:00:0e:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2B:6A:C3:93:56:84:36:CB:60:14:93:D8:50:F4:BA:81:C1:3E:B7
            X509v3 Authority Key Identifier:
                keyid:F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37392e302f32342d3234203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:26:d0:4b:a2:56:3c:e4:05:71:93:85:9b:85:dd:1a:0a:6b:
         b1:a5:2e:34:cd:a2:fc:92:5f:6c:7d:53:30:75:59:0d:b3:2d:
         26:16:7a:e5:12:ce:5c:e7:bd:62:fb:94:06:91:4d:19:ae:ab:
         98:21:c0:0e:f5:75:1b:5e:4a:36:15:2a:7a:88:52:ca:67:b4:
         74:74:6e:b1:ac:13:8e:a6:4b:e3:77:3a:c4:03:dc:ac:16:0d:
         40:3a:8b:f0:69:65:01:d0:29:ad:6c:54:9d:ed:36:76:62:d3:
         04:5c:96:7d:7d:71:8a:69:be:27:5c:00:f9:c6:8f:48:a4:d2:
         6d:3e:1f:4d:9e:ef:c8:eb:b9:ca:ba:e6:51:6d:c3:90:ba:34:
         f8:de:d8:d2:89:63:5e:9d:f4:8a:8c:aa:d7:0e:0f:a4:e1:4e:
         cc:a3:23:d3:40:29:1a:62:a9:6b:36:d7:26:53:91:02:d0:88:
         78:3b:09:5d:40:bb:82:b6:95:ea:c5:b9:5f:f9:2f:5b:e6:e5:
         9b:53:0e:99:5b:73:dc:43:bc:3b:63:3e:1a:ff:90:5b:91:98:
         d9:a1:96:92:a8:ec:9d:83:b9:ff:3f:c1:b6:6e:a7:81:30:b3:
         eb:63:b5:74:11:b8:80:87:3f:a3:c8:76:21:f5:34:75:22:21:
         57:34:ce:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org