Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e39302e302f32342d3234203d3e20323636393931.roa
File:                     34352e3232362e39302e302f32342d3234203d3e20323636393931.roa (raw, json)
Hash identifier:          QYSDfdYK/nrTf+XGEfmRmsnAilKn9f5pGi91xujEmvg=
Subject key identifier:   AD:50:76:B6:05:DD:00:5B:AD:A9:FD:65:D5:D7:DA:1D:05:5C:13:DB
Certificate issuer:       /CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
Certificate serial:       273E328B46BBD60013B11D366F6BD6E624CD42AB
Authority key identifier: D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e39302e302f32342d3234203d3e20323636393931.roa
Signing time:             Wed 19 Apr 2023 22:00:00 +0000
ROA not before:           Wed 19 Apr 2023 21:55:00 +0000
ROA not after:            Fri 19 Apr 2024 22:00:00 +0000
asID:                     266991
IP address blocks:        45.226.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3e:32:8b:46:bb:d6:00:13:b1:1d:36:6f:6b:d6:e6:24:cd:42:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
        Validity
            Not Before: Apr 19 21:55:00 2023 GMT
            Not After : Apr 19 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:18:45:68:8c:2c:5e:da:c7:ce:15:ec:c4:bf:
                    42:02:72:bf:1a:9d:9d:eb:22:41:94:bd:48:ec:3c:
                    f9:62:51:ba:a9:a0:7a:72:0e:c4:fc:aa:2d:cc:01:
                    bf:6d:60:a4:0e:d5:ad:22:77:10:75:cd:df:bf:23:
                    de:12:da:06:1f:30:8f:bd:d5:97:8b:66:4f:ad:94:
                    6f:6c:43:12:7d:f6:ed:d5:33:db:d8:91:0d:50:d0:
                    64:d3:a4:69:97:73:be:ce:4a:63:f9:f4:2f:00:55:
                    ef:9a:e1:8b:5c:50:cb:45:c0:40:06:cd:2f:c4:e4:
                    24:66:19:c7:7c:fa:cd:9c:3c:f9:72:12:c3:b5:5b:
                    d7:5d:40:ae:b7:1c:c1:54:02:81:43:c9:98:3b:e2:
                    da:c9:00:d1:6f:2d:14:ed:2e:69:13:eb:4e:44:65:
                    93:5a:c4:4c:31:cf:a3:ae:c3:b5:ca:f1:1b:b3:f5:
                    71:8e:5a:a0:7d:c9:f1:e4:81:b5:05:0e:49:e4:63:
                    c2:dc:4f:12:43:a9:71:c7:80:6c:2c:8d:3b:9f:3f:
                    f3:1c:42:d9:a4:1f:da:d6:54:14:7e:6c:81:cd:3c:
                    c0:08:28:9a:de:da:7b:8b:33:11:fe:80:25:f5:4e:
                    0f:bb:5f:8f:26:fd:81:df:dc:a0:88:5d:97:61:82:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:50:76:B6:05:DD:00:5B:AD:A9:FD:65:D5:D7:DA:1D:05:5C:13:DB
            X509v3 Authority Key Identifier:
                keyid:D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e39302e302f32342d3234203d3e20323636393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:dc:19:54:76:de:92:19:4a:77:36:76:84:59:24:10:d5:43:
         50:b2:68:c1:17:7d:9a:c5:c0:39:b0:72:c2:34:fd:06:af:45:
         76:2f:ea:43:fa:e4:8e:e0:60:17:23:19:eb:fa:e4:68:e3:9c:
         0b:d1:9e:1d:f6:2c:bb:73:1c:c8:24:c9:0a:14:31:e4:54:4c:
         c5:27:ed:8c:0c:0b:33:9c:9b:a9:28:e1:09:b2:57:fa:97:db:
         77:94:69:00:98:3b:4c:bc:58:17:78:13:da:78:78:5d:6f:39:
         1d:2d:ab:d8:f0:ed:68:ef:7d:c8:1f:b7:f1:f9:fd:a2:00:9f:
         4a:e7:b2:17:4e:cc:d5:dd:29:d4:11:71:2a:ab:bc:90:7f:75:
         c6:a5:97:fc:92:2e:cd:66:d2:af:b3:7f:f9:1c:ed:bd:ca:38:
         53:6f:c4:84:c3:43:76:a8:02:14:9a:77:10:8f:7b:7e:5e:ad:
         5a:5a:70:00:f3:3c:0a:ca:d1:8c:05:54:0e:4d:16:50:3f:b2:
         e6:61:3f:93:42:c5:56:99:94:bf:02:4e:a4:54:7d:06:90:ba:
         ff:dd:89:a1:a0:8a:1c:06:91:6c:b9:40:12:bd:82:3f:e6:2d:
         77:0d:e1:ed:1c:5d:d1:82:c4:41:4d:37:5f:af:0e:72:87:df:
         54:7c:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org