Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/34352e3136302e3138352e302f32342d3234203d3e20323638343231.roa
File:                     34352e3136302e3138352e302f32342d3234203d3e20323638343231.roa (raw, json)
Hash identifier:          KY1Ahfhv0uNxfH3SleZ4TQgyKTTsSe7M7DR/bPBpGrw=
Subject key identifier:   05:16:58:63:B5:88:90:8C:B6:85:54:32:5A:FE:BB:F1:D7:A4:9B:83
Certificate issuer:       /CN=CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E
Certificate serial:       7D82E74F018A7EB817B49FDB7CF4FAD509ED8D0A
Authority key identifier: CF:A5:D2:D3:1F:F7:C5:65:2C:6C:CC:8C:08:D9:F1:1E:F9:DE:CE:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/34352e3136302e3138352e302f32342d3234203d3e20323638343231.roa
Signing time:             Mon 22 May 2023 00:31:54 +0000
ROA not before:           Mon 22 May 2023 00:26:54 +0000
ROA not after:            Mon 20 May 2024 00:31:54 +0000
asID:                     268421
IP address blocks:        45.160.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:82:e7:4f:01:8a:7e:b8:17:b4:9f:db:7c:f4:fa:d5:09:ed:8d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E
        Validity
            Not Before: May 22 00:26:54 2023 GMT
            Not After : May 20 00:31:54 2024 GMT
        Subject: CN=05165863B588908CB68554325AFEBBF1D7A49B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:54:30:05:49:e1:00:79:06:72:7f:6c:37:
                    88:e2:55:f5:80:be:4c:b3:68:c4:eb:19:e7:32:e6:
                    b6:58:c1:1e:6a:2f:76:85:f7:15:99:40:a6:32:dc:
                    1b:b1:83:d4:d0:f1:15:fe:8a:a4:81:f6:e5:39:58:
                    f9:d7:0d:45:0a:4a:84:06:2c:8f:73:bf:dc:53:c0:
                    80:e9:a2:14:ca:21:84:1b:3f:57:1d:e1:7b:54:7f:
                    09:7b:42:38:16:f8:9b:32:0a:e2:c3:d1:f9:36:45:
                    87:3c:dd:cf:a1:f8:d4:ea:cf:9b:76:6f:d6:b6:20:
                    71:5b:45:82:9a:50:0c:76:56:c4:40:af:56:93:2a:
                    14:45:73:4f:c5:5b:45:d1:0e:54:1e:34:c9:0b:f5:
                    3a:44:6f:c1:7c:92:bc:be:d1:78:80:3a:0c:94:ec:
                    ad:89:f3:3e:c4:ad:21:b9:ad:99:ca:e7:77:58:21:
                    38:9a:0f:4e:c9:1c:5c:2e:ba:f3:24:2d:54:97:2b:
                    be:fa:b1:90:4d:f8:08:a8:5e:96:35:2f:ef:6b:58:
                    9c:4d:a7:05:6a:1f:95:70:81:20:e3:c4:c9:e4:31:
                    9e:c5:b8:eb:38:2f:26:fe:d6:a2:88:fe:3a:27:d0:
                    20:69:29:e8:9d:38:96:aa:4e:94:d4:68:be:a3:58:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:16:58:63:B5:88:90:8C:B6:85:54:32:5A:FE:BB:F1:D7:A4:9B:83
            X509v3 Authority Key Identifier:
                keyid:CF:A5:D2:D3:1F:F7:C5:65:2C:6C:CC:8C:08:D9:F1:1E:F9:DE:CE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/34352e3136302e3138352e302f32342d3234203d3e20323638343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:14:e3:7c:aa:e6:89:14:6c:9e:3c:1a:2b:01:33:ea:2f:ad:
         3e:f4:b6:00:a9:4a:7a:68:10:8a:a1:4d:f6:03:ed:eb:cb:e4:
         7b:e6:f5:bb:e0:dd:14:63:f4:99:16:b9:0e:5d:dc:06:9a:c1:
         9b:45:28:da:51:3a:fd:81:d7:7d:2b:68:8d:a3:69:86:75:aa:
         1c:a8:a8:5d:ad:55:22:12:15:ad:68:a0:54:bd:2a:76:db:ef:
         94:9c:0e:5f:de:7e:1f:d6:ab:9f:06:a9:fb:c9:41:36:b3:0c:
         4e:e6:d7:66:2d:a8:73:cf:a0:cf:bb:39:a4:78:2a:82:89:7a:
         c8:33:e4:76:ed:8b:08:3c:cd:70:bc:c4:1c:3c:79:8d:87:e6:
         b3:85:dc:b0:ec:49:16:c9:c3:d1:3c:80:46:c9:7d:7f:8e:07:
         ca:32:d4:9c:90:f8:a8:74:41:41:a0:84:0f:af:bf:fe:7a:6b:
         10:ca:83:ca:41:51:60:9f:1d:a0:b5:af:25:9b:3c:7f:cc:ad:
         6a:7a:48:f2:df:e9:84:36:82:a6:dc:29:fb:7e:bc:9e:49:4c:
         f3:96:51:0f:35:9a:9a:09:a3:89:78:ad:d5:61:c5:6a:59:f0:
         92:42:6e:f7:ff:a6:43:d3:6d:be:08:89:4a:0b:30:f8:b3:97:
         c8:73:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org