Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/34352e3136342e3138362e302f32342d3234203d3e20323638363333.roa
File:                     34352e3136342e3138362e302f32342d3234203d3e20323638363333.roa (raw, json)
Hash identifier:          hxWMZWEA3fNH28wVYiaL0K+IAcMxdyuo16oqFdFT6I0=
Subject key identifier:   01:0B:69:AF:50:51:CD:69:43:A2:F3:0B:F7:E6:08:CF:EE:7C:8D:2C
Certificate issuer:       /CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
Certificate serial:       43CEF2BD7A43531CE889E9B2C2508A08D8267104
Authority key identifier: 5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/34352e3136342e3138362e302f32342d3234203d3e20323638363333.roa
Signing time:             Mon 20 Nov 2023 18:16:44 +0000
ROA not before:           Mon 20 Nov 2023 18:11:44 +0000
ROA not after:            Mon 18 Nov 2024 18:16:44 +0000
asID:                     268633
IP address blocks:        45.164.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ce:f2:bd:7a:43:53:1c:e8:89:e9:b2:c2:50:8a:08:d8:26:71:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
        Validity
            Not Before: Nov 20 18:11:44 2023 GMT
            Not After : Nov 18 18:16:44 2024 GMT
        Subject: CN=010B69AF5051CD6943A2F30BF7E608CFEE7C8D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:3e:00:cf:fb:44:8b:6c:31:be:f1:de:08:
                    f2:42:a9:a4:fc:3d:89:47:7c:a6:a8:44:ed:14:28:
                    6c:65:f8:8d:d2:73:54:b7:cb:1c:3f:8a:a7:98:7b:
                    f3:39:60:eb:59:85:f8:9b:bb:60:16:fe:23:76:d0:
                    20:0a:a8:65:1a:a8:9f:76:ed:aa:af:4c:2e:0b:cc:
                    a3:38:c3:17:aa:f3:1d:2d:e2:f3:7f:17:20:d2:a2:
                    5b:d9:40:ba:73:ef:c1:e6:b5:a6:dc:3e:ad:17:01:
                    b6:a9:d5:eb:9d:fb:66:f2:80:4f:46:07:10:22:1d:
                    5d:98:2b:7d:66:40:04:d2:e6:94:98:a5:85:96:d2:
                    28:f1:ae:60:b9:9c:f5:e4:4d:36:0b:88:6a:d7:31:
                    8b:8b:7f:7d:90:76:ae:a8:d6:7b:54:26:12:f8:7c:
                    4f:50:65:74:68:08:58:9e:60:d5:9f:9c:0f:a5:cd:
                    80:13:1f:76:1f:d3:0f:32:00:39:4f:f3:c2:e6:dd:
                    a0:3d:2c:b5:a0:c9:a1:cb:c2:92:ed:30:6c:28:a2:
                    6e:b2:b7:f1:36:4b:c1:4e:fa:21:eb:c2:27:6a:ad:
                    10:70:3c:22:58:f6:cc:51:70:28:07:c6:85:6c:b8:
                    9a:ee:d4:e7:48:3c:cc:02:04:ab:ad:53:8d:26:f8:
                    dd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0B:69:AF:50:51:CD:69:43:A2:F3:0B:F7:E6:08:CF:EE:7C:8D:2C
            X509v3 Authority Key Identifier:
                keyid:5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/34352e3136342e3138362e302f32342d3234203d3e20323638363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:47:bf:bb:65:af:17:d0:5f:af:07:57:88:9e:82:cc:40:12:
         1b:ac:73:98:b3:64:39:2d:b2:b5:df:44:66:af:1d:3f:dc:e7:
         9c:f0:46:f2:ee:ca:fa:96:44:e3:c9:57:fd:3c:7c:8e:3b:f8:
         6f:41:67:39:0e:8e:3b:a9:5f:6b:29:6d:f9:3c:b3:1f:7f:70:
         f4:ff:0d:89:f2:91:76:17:1d:1e:91:96:8b:5c:51:d4:93:a8:
         4e:62:5d:68:f8:46:04:c2:79:4c:69:85:12:b1:2a:ba:b8:34:
         70:e7:72:4b:60:5d:14:2d:5a:b0:39:d5:19:63:93:b9:c0:b8:
         f5:f7:79:1c:47:6c:af:7a:5c:87:ad:f7:9e:fc:53:e3:0b:b1:
         73:65:ac:c0:be:22:d5:9d:6d:e1:9b:2a:74:45:4f:4e:d6:0a:
         27:dd:86:d8:73:3e:1f:aa:aa:76:7e:0f:c6:fc:ec:9a:5a:86:
         08:4f:9d:b8:08:3a:51:0c:25:90:c6:d7:b6:a4:10:01:c0:3a:
         a2:f8:4e:aa:41:3c:45:6e:b9:08:1c:e6:0b:9d:53:c7:d4:0d:
         bb:58:32:d4:c2:b7:05:be:0a:a2:3e:1c:3f:77:93:6a:d8:38:
         da:cd:cc:d5:53:15:42:53:b8:04:e6:ec:02:af:46:5b:f9:bf:
         eb:c1:aa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org