Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138392e34352e31362e302f32312d3231203d3e203238333430.roa
File:                     3138392e34352e31362e302f32312d3231203d3e203238333430.roa (raw, json)
Hash identifier:          k9PgltgIfg4CAsVgARuABkWINQwOuovWlJtHaoPUOoY=
Subject key identifier:   33:77:B7:2E:90:77:8D:8D:07:EC:C4:84:D0:EF:A3:3F:42:2A:F7:3E
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       02F7076C905EF594B19F38304986D03DEF43A516
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138392e34352e31362e302f32312d3231203d3e203238333430.roa
Signing time:             Thu 22 Sep 2022 19:45:07 +0000
ROA not before:           Thu 22 Sep 2022 19:40:07 +0000
ROA not after:            Thu 21 Sep 2023 19:45:07 +0000
asID:                     28340
IP address blocks:        189.45.16.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f7:07:6c:90:5e:f5:94:b1:9f:38:30:49:86:d0:3d:ef:43:a5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 22 19:40:07 2022 GMT
            Not After : Sep 21 19:45:07 2023 GMT
        Subject: CN=3377B72E90778D8D07ECC484D0EFA33F422AF73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:64:fe:06:59:fe:98:64:a2:8b:34:73:23:2c:
                    55:ab:89:01:d1:12:f7:41:81:d0:72:16:1b:09:b2:
                    d5:f7:ba:9b:7e:b7:65:e5:d4:13:9b:7d:12:73:0b:
                    c9:9d:19:01:1f:f4:5f:9e:5a:69:93:21:fb:d4:90:
                    70:44:81:c2:74:38:80:13:ee:3b:35:52:79:14:8c:
                    19:4f:c5:89:79:8c:b0:69:81:31:fb:22:0c:7a:4a:
                    4d:bf:3c:b5:54:49:16:8b:b1:0c:37:73:58:eb:92:
                    3a:d3:8e:60:79:b5:ed:30:36:cb:b9:75:32:c9:fd:
                    af:58:2d:e2:e6:2e:27:8c:e5:57:19:eb:18:b1:40:
                    ea:4e:6c:a3:cc:66:c6:fa:38:1c:13:c5:ad:19:97:
                    c2:fb:dd:f1:72:a1:93:35:ec:b3:2b:4d:2a:99:b8:
                    56:b8:7e:4a:4a:84:8f:f5:07:52:af:75:4b:b6:42:
                    45:d4:14:f8:41:9a:ce:e1:db:4a:a3:1f:6b:25:08:
                    d1:bb:8c:9d:3c:77:07:90:84:de:10:33:21:b4:a5:
                    f7:8f:72:cc:42:76:73:6a:84:5e:23:eb:9f:df:90:
                    18:bd:4e:36:a6:08:0d:d0:46:c3:d4:24:a1:f2:93:
                    bb:e6:10:20:f9:70:d4:3a:bf:59:b5:ea:06:df:ac:
                    2e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:B7:2E:90:77:8D:8D:07:EC:C4:84:D0:EF:A3:3F:42:2A:F7:3E
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138392e34352e31362e302f32312d3231203d3e203238333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:11:eb:b9:44:fb:1f:c5:56:c4:64:33:64:f2:b5:40:5a:23:
         16:0a:20:de:5c:ad:da:71:65:07:05:cf:45:71:4b:d7:5b:7c:
         24:d0:37:00:bf:27:5e:63:60:ff:84:ca:06:5d:4c:b6:55:06:
         d1:d4:f5:8d:27:0f:b1:27:a0:ed:c6:26:49:e0:19:42:ff:13:
         25:aa:b1:74:e1:17:20:bd:d9:8e:68:48:28:d3:26:84:3f:ed:
         64:40:3d:e4:6f:bf:26:43:4a:c2:5f:a1:36:b7:54:ab:46:d4:
         d6:03:3a:8c:7d:55:19:44:01:94:8a:f1:60:fc:47:09:2a:34:
         a4:cd:ae:6b:48:ad:42:39:07:c8:6a:8f:bf:23:44:a2:6a:17:
         54:c4:e0:9c:79:ac:2c:e4:e4:d6:44:0a:46:8c:85:4b:98:5a:
         2a:f3:7f:f3:2e:41:04:58:4e:55:b8:50:f5:45:56:c9:32:15:
         f4:9d:d6:27:9a:55:b2:84:5d:d8:6b:2d:2b:e9:65:e9:10:30:
         1c:73:ed:f3:ad:ae:b4:29:9d:5b:38:eb:c2:47:d3:9b:4a:f9:
         1f:44:96:eb:10:e4:c0:b8:5f:d2:a0:4c:25:25:2c:51:71:59:
         59:9e:08:12:cd:e4:5f:44:12:7a:94:60:25:1b:84:c2:57:9c:
         f7:0e:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org