Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/34352e3138312e35362e302f32322d3234203d3e20323639313639.roa
File:                     34352e3138312e35362e302f32322d3234203d3e20323639313639.roa (raw, json)
Hash identifier:          9fZqNY73iKyzNb0ALeZpeu+E7hCVR68cGI20WruPcDM=
Subject key identifier:   CB:41:13:29:0D:25:7C:6F:06:A1:CE:EC:47:22:AC:DA:05:44:35:E5
Certificate issuer:       /CN=4A1758C02056B68B850854C0D9687F347003679B
Certificate serial:       72CC8C49902075F46B7BE70DC5F94932E4E6E822
Authority key identifier: 4A:17:58:C0:20:56:B6:8B:85:08:54:C0:D9:68:7F:34:70:03:67:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A1758C02056B68B850854C0D9687F347003679B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/34352e3138312e35362e302f32322d3234203d3e20323639313639.roa
Signing time:             Wed 18 Oct 2023 19:00:01 +0000
ROA not before:           Wed 18 Oct 2023 18:55:01 +0000
ROA not after:            Wed 16 Oct 2024 19:00:01 +0000
asID:                     269169
IP address blocks:        45.181.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cc:8c:49:90:20:75:f4:6b:7b:e7:0d:c5:f9:49:32:e4:e6:e8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1758C02056B68B850854C0D9687F347003679B
        Validity
            Not Before: Oct 18 18:55:01 2023 GMT
            Not After : Oct 16 19:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:22:02:5a:90:02:95:71:0c:76:f6:bc:3e:
                    a7:c6:ce:6c:b8:ca:61:86:83:9a:5d:4f:53:4b:d9:
                    5d:b7:72:84:6d:7b:a8:fa:5c:a6:fa:a6:9b:46:ed:
                    10:f2:2c:cb:fa:23:8b:48:82:e5:6e:27:e8:fc:4a:
                    b1:82:5a:fb:3e:54:fc:23:b7:01:74:f6:36:2a:43:
                    77:84:cd:3d:b0:c4:8f:83:92:11:c4:62:c3:07:15:
                    12:4b:06:08:24:81:8d:a8:8e:7d:e9:24:d7:92:0e:
                    46:69:79:4d:4a:db:b3:90:34:7e:4f:d7:35:1d:57:
                    a7:53:e3:75:c1:da:9f:9b:e2:d7:95:9f:d6:40:9a:
                    cf:ba:0f:fe:3c:fd:a1:c1:83:16:c1:04:17:12:3f:
                    3d:5a:3b:09:e8:03:e1:6a:2a:6b:77:6e:56:9f:63:
                    8b:c8:f4:89:b4:af:d2:de:7f:ff:a3:5c:3b:32:ee:
                    a5:49:b3:4f:5c:5e:37:01:ac:1b:f7:f0:05:b9:ec:
                    09:c0:d7:91:24:e2:84:cf:ee:b3:e4:82:c6:b5:2f:
                    c8:c3:09:22:17:a8:6f:0d:84:8b:24:73:f9:74:c0:
                    e2:b1:14:5f:0b:42:47:34:0d:d0:7e:e2:1e:e2:d9:
                    72:ad:09:5c:05:be:3e:69:df:bf:ef:ac:08:9b:ed:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:13:29:0D:25:7C:6F:06:A1:CE:EC:47:22:AC:DA:05:44:35:E5
            X509v3 Authority Key Identifier:
                keyid:4A:17:58:C0:20:56:B6:8B:85:08:54:C0:D9:68:7F:34:70:03:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/4A1758C02056B68B850854C0D9687F347003679B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A1758C02056B68B850854C0D9687F347003679B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/34352e3138312e35362e302f32322d3234203d3e20323639313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:b1:3d:11:30:b0:58:30:9c:c1:43:d3:8e:89:95:cc:94:
         d9:ac:38:d0:f2:ff:19:7a:68:2c:33:dd:fc:8a:b4:87:7a:79:
         de:79:96:15:2c:44:e4:88:b6:4e:60:41:fc:90:3b:14:2f:67:
         20:42:ee:95:e0:80:e5:39:dc:2d:c5:c3:a8:cb:7a:f2:0c:6c:
         5a:75:b7:25:b3:eb:ef:14:ab:f3:bf:15:c6:4f:31:d3:8b:33:
         68:2b:a0:9c:fe:d4:9c:6d:54:5b:5a:6d:80:cc:f7:99:a0:98:
         f4:f9:51:65:d4:97:ed:97:bb:1a:9a:e2:2c:59:42:91:2d:bd:
         34:5f:89:55:8f:ea:86:91:0c:ec:55:99:71:66:bf:39:c9:27:
         35:34:2f:3e:1f:86:05:a3:ad:0e:c6:f7:ec:50:19:06:fd:a0:
         7a:59:44:3b:32:7e:42:24:96:a5:d0:48:a2:72:31:73:b0:8c:
         05:60:fc:90:fb:63:fb:7e:10:b9:6e:bf:01:82:3b:70:db:22:
         44:ff:88:c5:86:de:11:c5:0c:da:37:08:f5:e3:27:b0:c2:58:
         2e:9d:96:97:30:29:6e:39:d6:2d:9b:59:23:8d:73:15:ea:a0:
         55:02:1c:42:18:71:56:75:82:f7:87:e9:d3:06:46:42:b4:52:
         29:85:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org