Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32322d3232203d3e20323639313932.roa
File:                     34352e3138312e3134382e302f32322d3232203d3e20323639313932.roa (raw, json)
Hash identifier:          0y+J+Z7HXjw63TOSo80dc3IG1ag/UP0aRbW9QetOcVU=
Subject key identifier:   5A:3A:72:72:2F:4C:A2:4A:8D:31:45:5B:08:22:09:A7:A2:68:8B:94
Certificate issuer:       /CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Certificate serial:       71FD36DB1B0D5F44CDFC59364372828A0AB0E9FA
Authority key identifier: A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32322d3232203d3e20323639313932.roa
Signing time:             Mon 29 Jan 2024 20:00:00 +0000
ROA not before:           Mon 29 Jan 2024 19:55:00 +0000
ROA not after:            Mon 27 Jan 2025 20:00:00 +0000
asID:                     269192
IP address blocks:        45.181.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fd:36:db:1b:0d:5f:44:cd:fc:59:36:43:72:82:8a:0a:b0:e9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
        Validity
            Not Before: Jan 29 19:55:00 2024 GMT
            Not After : Jan 27 20:00:00 2025 GMT
        Subject: CN=5A3A72722F4CA24A8D31455B082209A7A2688B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:5a:fb:dd:46:08:d3:3a:17:64:1d:33:b9:
                    d7:cd:ed:07:e6:76:78:68:12:c4:75:2a:a5:b6:9a:
                    f1:c4:ea:5d:a3:66:81:eb:7e:b4:99:29:f3:d9:72:
                    12:62:5a:01:b3:e3:7b:69:14:16:1d:ff:7b:b4:5b:
                    2e:c9:0f:3d:fd:7a:31:65:97:42:26:34:6d:4a:23:
                    b6:ef:fb:08:ee:4c:53:66:4f:a8:a5:46:8a:ac:5e:
                    09:56:db:d9:a0:71:df:fe:e2:a9:b9:2a:07:54:99:
                    17:27:54:f3:6d:cb:bf:c3:79:4a:03:2b:8e:5e:e7:
                    63:18:e3:13:0c:b7:b4:8b:65:a5:3c:63:c5:95:8a:
                    25:47:93:fa:22:b5:a1:93:e4:13:79:63:10:0d:58:
                    38:cc:e3:d0:f8:72:8c:ed:38:15:50:6f:99:dd:8a:
                    7a:74:1b:35:c4:4b:a1:66:e2:49:89:d3:a5:b9:b6:
                    42:db:93:89:ef:be:a6:91:b1:d0:51:fa:05:51:d2:
                    7f:66:ea:08:78:67:fd:a9:62:36:29:45:c8:5a:9d:
                    cf:f0:75:4a:f6:58:b5:fd:f7:7e:6e:63:d6:c1:2d:
                    cc:da:ff:4f:87:c6:0e:9e:43:ff:27:0d:71:ff:78:
                    42:b3:5b:dc:ec:e4:4d:e5:16:4d:36:a2:ac:97:40:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3A:72:72:2F:4C:A2:4A:8D:31:45:5B:08:22:09:A7:A2:68:8B:94
            X509v3 Authority Key Identifier:
                keyid:A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32322d3232203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:81:03:ba:8c:49:f6:f8:b0:a8:eb:e8:b6:01:bd:bc:9c:05:
         de:04:a4:51:2c:46:c5:c6:c5:05:22:73:05:67:69:7a:85:e7:
         bc:c8:39:19:86:0d:c2:77:c4:26:88:91:90:db:65:83:d2:97:
         ca:65:8a:66:34:33:c1:01:54:7d:93:e1:cc:92:24:5f:47:13:
         a6:ee:15:77:f7:e1:15:2e:f0:b1:fc:a0:88:ec:fd:5c:8a:36:
         58:25:c5:12:9d:87:1f:42:74:11:f4:fd:be:a4:73:ff:e0:e1:
         11:2b:86:8c:83:26:97:6d:38:8f:09:9b:ee:ab:a1:31:9c:1c:
         10:3c:8f:47:2a:31:d0:a1:77:4b:da:9d:99:ef:2f:14:c1:b1:
         b5:73:52:12:94:05:5a:92:f3:50:e9:b1:76:24:84:b2:e7:c1:
         a4:ca:d2:99:2b:60:4a:66:38:df:08:0a:f1:63:94:9a:74:e0:
         af:5b:79:90:ce:bc:ac:4a:ba:9b:80:4f:58:81:05:51:df:d7:
         c1:32:5e:71:c6:29:7d:b9:69:71:b8:5d:20:f3:60:63:64:6f:
         a4:63:02:0e:dd:87:9c:e9:c1:9e:46:74:83:57:ad:7e:5f:9f:
         8f:b3:2c:6a:3b:45:ec:c6:97:0c:44:4f:fa:54:28:fa:e9:0b:
         0c:26:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org