Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/34352e352e3139362e302f32342d3234203d3e20323636313035.roa
File:                     34352e352e3139362e302f32342d3234203d3e20323636313035.roa (raw, json)
Hash identifier:          FH5OTv9i9e0wUSYtgGmv+4YaQRCMWeI4LiMYQntqQyY=
Subject key identifier:   D2:13:C4:9F:6C:24:9B:9B:F8:7A:DB:2F:E9:BC:2B:EC:BE:35:1B:C9
Certificate issuer:       /CN=C6822FB9E5BC38D4B1DA40A1163F90BDC005D290
Certificate serial:       6BC8014EDBE66C7B4D29523891F435ABFB6E20F5
Authority key identifier: C6:82:2F:B9:E5:BC:38:D4:B1:DA:40:A1:16:3F:90:BD:C0:05:D2:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6822FB9E5BC38D4B1DA40A1163F90BDC005D290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/34352e352e3139362e302f32342d3234203d3e20323636313035.roa
Signing time:             Mon 15 Jan 2024 14:47:48 +0000
ROA not before:           Mon 15 Jan 2024 14:42:48 +0000
ROA not after:            Mon 13 Jan 2025 14:47:48 +0000
asID:                     266105
IP address blocks:        45.5.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c8:01:4e:db:e6:6c:7b:4d:29:52:38:91:f4:35:ab:fb:6e:20:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6822FB9E5BC38D4B1DA40A1163F90BDC005D290
        Validity
            Not Before: Jan 15 14:42:48 2024 GMT
            Not After : Jan 13 14:47:48 2025 GMT
        Subject: CN=D213C49F6C249B9BF87ADB2FE9BC2BECBE351BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:96:68:43:9d:ca:8a:bc:fb:49:44:9b:8d:c9:
                    1c:8f:00:fd:55:30:64:b1:8f:14:04:53:35:79:28:
                    f3:90:d9:66:38:4e:2e:37:14:e7:ad:c2:90:67:b5:
                    94:3b:8a:65:54:6f:2d:68:5b:30:df:a4:76:44:0d:
                    a6:41:ba:05:e2:34:00:5b:dc:c2:fe:00:37:cd:79:
                    2f:09:13:3a:63:7d:78:aa:88:73:b9:a6:3a:f0:10:
                    ba:82:70:06:a9:67:6d:09:4b:b0:01:d8:ca:5f:c7:
                    b2:42:ca:90:a1:50:b8:61:7c:2c:a8:98:f9:44:a3:
                    94:96:5f:86:15:68:aa:df:b4:a3:14:89:57:a1:a8:
                    7d:1f:f2:7b:3e:a3:08:8e:33:f6:aa:a0:d4:fe:ec:
                    f7:4f:b9:29:f9:45:4c:61:cf:61:27:58:f6:c4:ac:
                    05:05:9c:84:44:9d:58:93:87:49:14:80:31:1e:70:
                    56:43:42:d0:27:bf:b0:e3:80:86:0c:60:1a:07:d3:
                    e7:d2:18:3b:95:6a:3e:f2:e0:7c:73:d4:1c:76:84:
                    a2:8a:27:f4:bf:33:e6:79:dd:5e:0f:46:13:32:e0:
                    d0:cb:39:c8:a0:1b:39:e4:0b:2b:f1:89:30:29:08:
                    fc:fa:fb:32:09:68:df:08:67:33:6f:af:e3:23:52:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:13:C4:9F:6C:24:9B:9B:F8:7A:DB:2F:E9:BC:2B:EC:BE:35:1B:C9
            X509v3 Authority Key Identifier:
                keyid:C6:82:2F:B9:E5:BC:38:D4:B1:DA:40:A1:16:3F:90:BD:C0:05:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/C6822FB9E5BC38D4B1DA40A1163F90BDC005D290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6822FB9E5BC38D4B1DA40A1163F90BDC005D290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/34352e352e3139362e302f32342d3234203d3e20323636313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:89:a0:c4:32:b8:0d:65:ee:fd:21:2a:7c:25:6c:9b:da:b7:
         d9:8e:91:a6:d6:d6:30:6f:d1:78:88:8b:e1:9c:57:14:c3:32:
         d5:f5:3b:2d:6e:3e:13:1a:1d:b2:65:e1:bd:9f:83:00:ba:84:
         ae:9c:f3:8d:b7:98:56:2e:21:d8:78:5e:b2:9f:6d:fb:0a:2b:
         d7:9a:bb:db:70:92:77:2d:3d:96:3b:84:a1:81:62:ea:1b:d4:
         69:be:f5:ce:59:64:03:34:5c:a9:f6:32:10:cc:f2:b1:45:c5:
         3c:d4:ed:d8:18:dd:f5:df:9c:ee:0c:8e:d0:f9:51:ae:ce:9c:
         ca:41:de:d4:07:61:54:11:9e:12:07:9a:10:cc:99:db:79:a8:
         c3:3e:40:6b:46:bd:1b:1e:b0:cc:47:60:a7:95:81:a5:86:74:
         a7:b8:60:0e:95:3e:a3:12:be:8b:32:76:91:4e:51:87:da:34:
         84:b3:41:6d:bc:3f:df:8d:3b:9a:dd:45:cc:23:43:93:83:ae:
         a7:12:37:25:9f:85:ea:24:dc:c8:0a:13:80:3d:70:1c:b0:d1:
         6d:4e:49:4b:9d:13:b7:4c:f4:fd:62:60:fc:68:4c:f3:a7:0f:
         6d:16:ad:95:19:78:24:12:da:b2:b4:d0:4a:2e:8c:89:fb:af:
         5a:7e:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org