Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/34352e3137392e35362e302f32322d3332203d3e20323639303636.roa
File:                     34352e3137392e35362e302f32322d3332203d3e20323639303636.roa (raw, json)
Hash identifier:          hkG/LRx7/Jx7v2NLDKQ/5jY0Fsu62PZMd9uM5DtpBDE=
Subject key identifier:   1A:37:6F:85:C3:31:86:D7:5C:6C:01:48:50:32:1B:9A:05:A7:C1:35
Certificate issuer:       /CN=F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE
Certificate serial:       7C6D569755601EB12F2B52EE07EB6913F960C775
Authority key identifier: F1:E9:BE:3B:A0:21:C3:AC:DB:02:9B:A7:39:2C:C7:CF:6F:D4:E5:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/34352e3137392e35362e302f32322d3332203d3e20323639303636.roa
Signing time:             Wed 10 Apr 2024 23:13:40 +0000
ROA not before:           Wed 10 Apr 2024 23:08:40 +0000
ROA not after:            Wed 09 Apr 2025 23:13:40 +0000
asID:                     269066
IP address blocks:        45.179.56.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6d:56:97:55:60:1e:b1:2f:2b:52:ee:07:eb:69:13:f9:60:c7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE
        Validity
            Not Before: Apr 10 23:08:40 2024 GMT
            Not After : Apr  9 23:13:40 2025 GMT
        Subject: CN=1A376F85C33186D75C6C014850321B9A05A7C135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:ff:86:68:41:be:e4:c5:70:37:88:37:06:
                    60:ce:46:26:2e:8e:15:86:de:4d:fb:fb:ac:a8:e5:
                    75:6a:da:1b:57:d6:a6:2d:b6:1e:60:25:73:fe:99:
                    39:b1:fc:05:75:f0:a6:ad:e9:a7:6a:33:b0:6c:1e:
                    71:94:38:51:f8:d2:b8:da:13:38:7b:cb:a7:72:ce:
                    8a:d8:c5:0e:fd:1d:11:cf:24:b5:ce:ab:d6:e2:84:
                    45:ad:a9:3e:21:4d:7b:9c:cc:7b:a1:82:21:59:dd:
                    3a:2a:3c:3f:b3:bc:50:0e:ab:bd:74:b0:09:dd:4b:
                    3a:02:de:34:bc:6e:8d:f3:cc:6e:91:00:d7:15:c6:
                    c0:04:16:16:b3:36:57:80:45:94:3c:40:20:33:f3:
                    27:0e:9e:2b:4c:59:f3:df:57:85:b5:b9:b4:73:ec:
                    65:0d:bf:06:c5:d6:f8:9e:3e:ca:20:f4:32:08:5c:
                    ff:9b:fe:e4:05:0a:d0:84:fa:b9:b0:d7:ca:4f:c7:
                    c4:e0:6c:3b:9e:5a:57:10:43:14:d5:99:6a:fe:78:
                    66:de:5d:17:eb:c8:7e:b1:f5:5c:00:38:2e:95:95:
                    1a:16:e4:45:af:33:d7:75:3c:e8:78:1f:4a:07:41:
                    b0:b5:e9:2a:d6:29:84:68:0b:b7:74:5e:2d:0b:79:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:37:6F:85:C3:31:86:D7:5C:6C:01:48:50:32:1B:9A:05:A7:C1:35
            X509v3 Authority Key Identifier:
                keyid:F1:E9:BE:3B:A0:21:C3:AC:DB:02:9B:A7:39:2C:C7:CF:6F:D4:E5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/34352e3137392e35362e302f32322d3332203d3e20323639303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:6f:bb:e9:03:4e:50:5b:0c:3a:5a:c3:12:b9:7d:b2:d0:8d:
         fe:dc:3d:e0:00:32:b2:63:09:7a:cf:6b:43:2f:48:dd:85:31:
         72:17:bd:31:3b:d9:79:22:01:a9:48:9f:97:bc:15:03:6f:e4:
         6c:dc:34:c2:c6:c6:e0:02:9b:d3:00:63:3a:a8:1b:42:45:02:
         20:f6:eb:de:d2:29:a4:b1:51:f3:24:7f:88:49:de:80:49:17:
         d9:e2:2e:87:5b:11:61:b0:8e:b1:ed:84:8e:d3:41:83:3c:c6:
         e2:5d:ad:f5:31:50:3b:a5:19:62:19:bc:8a:42:9a:e4:a4:b5:
         3c:29:28:ac:ae:b0:8c:47:1d:84:96:af:d2:3f:04:d5:78:37:
         52:fa:29:76:39:a4:52:82:27:b3:76:ee:98:fa:6e:11:5f:d1:
         8a:a0:6f:12:6b:40:f2:32:4f:db:71:ba:2a:38:fd:67:a1:d1:
         25:2c:f8:5b:63:dc:e6:70:4d:e1:8c:06:b6:31:b9:3f:e6:c7:
         1f:a1:79:47:53:5c:68:65:bd:b6:12:e4:26:e8:44:e8:50:15:
         1b:a7:11:a9:e6:b9:1a:15:c7:f6:2b:4a:c2:30:08:49:00:5b:
         e1:8a:3a:59:0c:3f:4d:06:de:bf:44:61:0a:97:18:c2:37:6f:
         4e:f7:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org