Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/34352e3138312e31302e302f32332d3233203d3e20323639313539.roa
File:                     34352e3138312e31302e302f32332d3233203d3e20323639313539.roa (raw, json)
Hash identifier:          et10JdxNhAZRC3VYwah/+1vIzaSQhUKwHAj8tKkHf54=
Subject key identifier:   25:58:6A:58:79:5E:20:58:B9:5E:81:25:B9:54:64:DC:BF:79:EF:16
Certificate issuer:       /CN=04E29E3B51896946B4BDD39559D5106072E07B3B
Certificate serial:       29F7D564AB5CBFFA248DA0AAEA2AE0062052AC42
Authority key identifier: 04:E2:9E:3B:51:89:69:46:B4:BD:D3:95:59:D5:10:60:72:E0:7B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04E29E3B51896946B4BDD39559D5106072E07B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/34352e3138312e31302e302f32332d3233203d3e20323639313539.roa
Signing time:             Fri 10 Feb 2023 17:29:18 +0000
ROA not before:           Fri 10 Feb 2023 17:24:18 +0000
ROA not after:            Fri 09 Feb 2024 17:29:18 +0000
asID:                     269159
IP address blocks:        45.181.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f7:d5:64:ab:5c:bf:fa:24:8d:a0:aa:ea:2a:e0:06:20:52:ac:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E29E3B51896946B4BDD39559D5106072E07B3B
        Validity
            Not Before: Feb 10 17:24:18 2023 GMT
            Not After : Feb  9 17:29:18 2024 GMT
        Subject: CN=25586A58795E2058B95E8125B95464DCBF79EF16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:89:10:fc:1d:e9:51:2e:3d:36:b9:c2:06:
                    d8:36:64:cd:fb:db:51:1d:14:f7:37:1a:1d:cd:83:
                    08:34:25:c0:5b:b2:cc:21:49:0a:98:de:b1:60:af:
                    a1:f3:e1:d9:4a:af:48:56:00:b2:a6:7e:19:89:ce:
                    60:fd:cd:25:87:2f:71:57:7a:89:ce:26:9e:16:dd:
                    74:e3:11:3e:5a:78:33:81:b4:9b:6b:8c:72:03:75:
                    ef:75:09:70:69:e5:c9:a2:69:6b:dc:c0:16:17:e7:
                    1c:f5:0e:89:f3:ab:30:77:62:63:7b:ff:7f:7f:b8:
                    fc:02:ee:79:4c:8a:9c:bb:e4:25:30:0d:03:78:46:
                    7a:aa:c7:0b:54:a2:7c:cd:85:ae:1f:20:f2:ec:29:
                    39:c5:a9:3e:46:f4:1a:90:6c:94:4a:e7:f0:b4:c5:
                    73:15:57:28:75:59:68:7a:cf:bc:05:b5:c7:49:bd:
                    3c:09:87:97:01:9b:05:d8:16:3b:da:1c:28:f6:42:
                    1b:d0:9d:df:b9:e0:34:87:83:88:61:c8:99:4b:38:
                    08:7e:5f:cc:2f:4a:bb:be:87:04:6c:5e:a1:2b:4f:
                    b0:bb:ac:68:88:a3:e4:58:4d:6e:2b:93:f2:58:4a:
                    49:c5:c5:ea:b6:f5:03:1c:61:d7:9e:46:e4:b1:d9:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:6A:58:79:5E:20:58:B9:5E:81:25:B9:54:64:DC:BF:79:EF:16
            X509v3 Authority Key Identifier:
                keyid:04:E2:9E:3B:51:89:69:46:B4:BD:D3:95:59:D5:10:60:72:E0:7B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/04E29E3B51896946B4BDD39559D5106072E07B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04E29E3B51896946B4BDD39559D5106072E07B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/34352e3138312e31302e302f32332d3233203d3e20323639313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:72:e3:d0:d2:cd:f2:cf:d1:06:0e:c4:e3:9a:56:7b:e9:
         0b:ef:06:fd:f5:96:b0:d4:b6:ab:30:ba:52:4e:46:28:e7:3f:
         0f:8c:08:2f:ac:ac:09:28:7f:bf:8a:ef:f1:a1:60:c9:f1:f1:
         03:8a:4e:b0:6c:e9:40:73:90:a7:a5:32:dc:c1:c7:7e:36:4d:
         80:39:94:8b:25:a1:1c:18:b9:49:1b:57:5b:bb:d5:01:da:8f:
         c3:bf:b1:46:50:46:2e:9c:77:c3:9d:75:80:5e:ed:3a:19:91:
         96:92:64:29:90:fa:9b:d5:49:db:84:0d:dc:72:ff:34:b5:79:
         43:52:07:de:2b:17:b1:57:91:ec:09:44:59:c4:b1:58:5b:5a:
         5b:60:8f:e4:4d:cf:e6:a1:cb:42:c9:9d:b3:b0:6d:62:2c:4a:
         7d:f7:73:07:56:71:05:fc:9f:2b:1e:6b:bc:4f:cc:57:d6:b7:
         90:54:f1:29:3f:29:08:41:4e:1b:4d:56:c1:27:2b:f3:0f:e2:
         ad:01:14:e3:1c:43:82:b9:38:22:24:a4:50:ed:28:b6:cc:f4:
         d6:14:24:1d:5e:e0:6a:8f:d8:b5:6a:ab:8f:80:de:00:8f:0a:
         8c:ac:0f:10:28:27:d1:2d:3b:a9:bb:34:e0:1e:64:ce:a5:51:
         6f:9c:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org