Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138392e34352e31362e302f32312d3231203d3e203533303539.roa
File:                     3138392e34352e31362e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          D/VQGkZRHPXU1IRVZDhyX4eqczJ8Nzj53rEf09V/9R0=
Subject key identifier:   45:0C:87:7F:4C:3D:F5:B8:FB:EE:E3:1D:A7:0A:BC:AA:E7:1B:9E:59
Certificate issuer:       /CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Certificate serial:       529BB3648F7BC8056E507EB23ADB14C0987D4363
Authority key identifier: 8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138392e34352e31362e302f32312d3231203d3e203533303539.roa
Signing time:             Mon 23 Jan 2023 22:14:35 +0000
ROA not before:           Mon 23 Jan 2023 22:09:35 +0000
ROA not after:            Mon 22 Jan 2024 22:14:35 +0000
asID:                     53059
IP address blocks:        189.45.16.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9b:b3:64:8f:7b:c8:05:6e:50:7e:b2:3a:db:14:c0:98:7d:43:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
        Validity
            Not Before: Jan 23 22:09:35 2023 GMT
            Not After : Jan 22 22:14:35 2024 GMT
        Subject: CN=450C877F4C3DF5B8FBEEE31DA70ABCAAE71B9E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1a:58:36:27:55:7f:0c:5b:d3:48:3f:91:ee:
                    86:3e:af:b8:50:19:96:1f:5c:7c:38:92:78:33:d2:
                    3a:b0:1e:63:c2:27:f1:d0:34:c1:9a:83:27:5a:4e:
                    9c:b6:85:f5:54:f0:8a:27:ac:b0:04:df:bd:7f:a7:
                    fc:c5:ea:8f:ef:fa:14:c9:b8:d3:27:20:fb:11:56:
                    a3:66:8e:2f:40:8d:99:2d:aa:71:60:84:d4:48:0b:
                    97:ee:bb:b9:7b:06:cf:87:92:d3:03:98:1c:a0:7d:
                    0b:51:5d:23:7e:ec:27:ef:c6:46:3b:64:0f:a8:85:
                    1d:f2:ab:b7:dd:ba:ae:f9:42:73:35:72:35:be:42:
                    e2:67:31:c8:7f:1b:8a:81:9d:1d:0e:27:7f:0b:ea:
                    39:83:2b:7a:f0:b8:f5:e8:89:71:66:20:33:01:2f:
                    a5:bd:8f:05:cc:6f:5f:55:28:45:8e:5f:9d:f9:c9:
                    e8:74:29:86:a0:5e:f5:c5:02:56:c5:18:df:79:26:
                    8a:a5:6f:3e:40:24:de:70:27:ab:10:c1:5a:4a:dc:
                    7b:3e:1a:01:43:78:b0:17:cd:2b:cb:1a:79:12:71:
                    ce:4b:b8:65:4a:d6:f8:bd:51:7e:f1:94:55:f3:9f:
                    d6:0b:15:0e:d6:61:db:4f:1b:74:12:09:19:73:ba:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0C:87:7F:4C:3D:F5:B8:FB:EE:E3:1D:A7:0A:BC:AA:E7:1B:9E:59
            X509v3 Authority Key Identifier:
                keyid:8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138392e34352e31362e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:23:05:b5:6d:ce:24:be:35:a7:c8:7b:c3:02:30:43:50:c4:
         6e:e3:76:be:58:f6:0c:79:3a:76:53:93:5f:b3:1e:4a:ff:92:
         54:b5:f4:47:b7:4b:01:3b:d7:e6:8b:b4:34:ab:e3:b3:0c:75:
         ed:ca:38:74:63:df:fe:43:18:1c:54:e6:d6:8c:bf:1b:8f:87:
         05:75:e9:6f:34:99:35:be:4a:bf:e6:dd:b4:41:67:5f:29:e6:
         fa:cd:ad:09:35:6c:b3:f6:4e:c8:7a:ae:eb:cb:a6:4b:48:9a:
         fd:fc:3e:ad:cf:22:5c:59:8d:3d:ba:d0:b9:ac:70:ae:07:fc:
         bb:d8:8e:5a:d2:f9:b7:e3:08:06:da:12:27:46:0d:38:91:18:
         9f:09:36:d5:4f:cf:ba:eb:36:39:62:1c:0d:f1:3c:24:6b:d2:
         45:36:2d:99:fe:2b:06:8c:fc:f8:25:40:9a:84:a0:9d:0a:77:
         fb:c8:87:a5:5d:25:3f:33:ce:aa:b7:53:ba:39:0c:58:76:27:
         f8:3d:d8:ee:1a:a3:75:c9:42:03:fd:76:65:49:8a:9b:bc:36:
         ae:6b:46:e4:4f:9b:ac:ba:e5:f8:12:86:3d:ad:20:e5:48:47:
         72:c2:ab:f2:94:bf:78:9e:16:51:ac:72:13:71:cc:4e:d7:de:
         99:e6:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org