Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3232203d3e20323639343235.roa
File:                     34352e3138362e33322e302f32322d3232203d3e20323639343235.roa (raw, json)
Hash identifier:          LEjw/DNDVB8/GafjTnx0dEe3+wJa99jWtnSY/ZWdLZ0=
Subject key identifier:   DF:73:9E:68:79:F5:C3:9A:1E:83:0F:4D:1A:24:3A:A5:85:C1:04:C6
Certificate issuer:       /CN=A52F416E7DE17981FB7334B51C91FD583746E12E
Certificate serial:       3706C842AB8FF22743FCB7BA9D9EA7E82E624ED1
Authority key identifier: A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3232203d3e20323639343235.roa
Signing time:             Mon 19 Feb 2024 15:48:26 +0000
ROA not before:           Mon 19 Feb 2024 15:43:26 +0000
ROA not after:            Mon 17 Feb 2025 15:48:26 +0000
asID:                     269425
IP address blocks:        45.186.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:06:c8:42:ab:8f:f2:27:43:fc:b7:ba:9d:9e:a7:e8:2e:62:4e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Validity
            Not Before: Feb 19 15:43:26 2024 GMT
            Not After : Feb 17 15:48:26 2025 GMT
        Subject: CN=3082010A0282010100B9A00C4D4AF2A130128736416F80F55100F743D07EABBBEB5666272F2AF494635B0F18F942DA11ED2345F55B3FA29C25201FD4B1468A7E57C6A9435B43F5FDA21E5D206EBFC2339F0C441DA474F19CFD1A3C258BE7EC6959E1CA90AAD262C10A850476BC58373B50EF68D3C504AED05AE925F34C2965927ACFE47501BC8F325BA28A4265C2A8F04FFFFC0F5772AF1D748A2488A7BD421726B5BB277162A1D0CC9E8A9E55C256C225ED536247A3F41771337D0329DE4F43C5059C60C8D27FC905EEBADEC57DC04E3CCC3405C9C1B14FA7A1BC1E59FE960D416CB0D23D00916F5A4299C78426DCE7135F059EB6E1B367F75593DEF5CEE5D916989589063E8A147F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:0c:4d:4a:f2:a1:30:12:87:36:41:6f:80:
                    f5:51:00:f7:43:d0:7e:ab:bb:eb:56:66:27:2f:2a:
                    f4:94:63:5b:0f:18:f9:42:da:11:ed:23:45:f5:5b:
                    3f:a2:9c:25:20:1f:d4:b1:46:8a:7e:57:c6:a9:43:
                    5b:43:f5:fd:a2:1e:5d:20:6e:bf:c2:33:9f:0c:44:
                    1d:a4:74:f1:9c:fd:1a:3c:25:8b:e7:ec:69:59:e1:
                    ca:90:aa:d2:62:c1:0a:85:04:76:bc:58:37:3b:50:
                    ef:68:d3:c5:04:ae:d0:5a:e9:25:f3:4c:29:65:92:
                    7a:cf:e4:75:01:bc:8f:32:5b:a2:8a:42:65:c2:a8:
                    f0:4f:ff:fc:0f:57:72:af:1d:74:8a:24:88:a7:bd:
                    42:17:26:b5:bb:27:71:62:a1:d0:cc:9e:8a:9e:55:
                    c2:56:c2:25:ed:53:62:47:a3:f4:17:71:33:7d:03:
                    29:de:4f:43:c5:05:9c:60:c8:d2:7f:c9:05:ee:ba:
                    de:c5:7d:c0:4e:3c:cc:34:05:c9:c1:b1:4f:a7:a1:
                    bc:1e:59:fe:96:0d:41:6c:b0:d2:3d:00:91:6f:5a:
                    42:99:c7:84:26:dc:e7:13:5f:05:9e:b6:e1:b3:67:
                    f7:55:93:de:f5:ce:e5:d9:16:98:95:89:06:3e:8a:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:73:9E:68:79:F5:C3:9A:1E:83:0F:4D:1A:24:3A:A5:85:C1:04:C6
            X509v3 Authority Key Identifier:
                keyid:A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3232203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e2:f8:b2:27:71:d3:fb:b6:90:91:24:c4:5d:cd:9c:48:42:ff:
         39:10:a0:90:d4:7c:13:61:6b:b5:86:69:cd:14:62:79:91:9d:
         64:2b:22:3d:19:26:3c:24:1d:d9:5a:6f:00:72:62:69:bc:40:
         ee:32:f5:fb:01:cb:fd:5a:97:21:6c:7c:95:6f:75:47:e6:dc:
         de:cc:8a:16:e4:84:3f:79:d2:29:a7:d3:31:d4:d8:bc:bb:a0:
         02:1e:75:8c:61:67:7b:1a:23:aa:d9:12:97:f3:55:fe:b3:a0:
         76:d3:9a:fb:c0:5b:94:ea:98:ed:cd:86:db:67:87:1e:33:fe:
         b2:06:21:4d:8b:fd:a8:38:c5:44:21:9e:8a:67:e0:35:e2:a6:
         37:b9:ea:55:7e:a9:d8:8d:c5:af:74:f0:df:24:5c:3c:f0:43:
         21:5b:f7:69:c1:64:d7:20:11:4a:15:92:ac:84:b7:bc:e8:b9:
         00:70:ad:59:1d:b9:7e:eb:ee:3d:9e:15:11:d7:50:7a:6a:90:
         3e:46:89:db:e4:77:5b:07:7e:df:1c:f5:83:83:30:e9:29:0d:
         a5:a1:e9:0c:a4:fc:5c:d5:cd:82:c6:8f:e2:93:23:bb:42:ec:
         26:6b:e6:7a:b3:81:ec:f1:33:68:ee:62:fc:22:7f:c6:7e:75:
         fc:29:67:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org