Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/34352e3138312e382e302f32342d3234203d3e20323639313539.roa
File:                     34352e3138312e382e302f32342d3234203d3e20323639313539.roa (raw, json)
Hash identifier:          8pqIbenkTbqF0NQzRvK9ELESydsBVP5ZwMyag7PzONw=
Subject key identifier:   A5:94:2B:E8:A4:F3:40:44:DD:FE:97:D6:7A:A1:7D:F8:4E:17:00:EF
Certificate issuer:       /CN=04E29E3B51896946B4BDD39559D5106072E07B3B
Certificate serial:       74521466351467FB112B418860A7562C1C0A5547
Authority key identifier: 04:E2:9E:3B:51:89:69:46:B4:BD:D3:95:59:D5:10:60:72:E0:7B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04E29E3B51896946B4BDD39559D5106072E07B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/34352e3138312e382e302f32342d3234203d3e20323639313539.roa
Signing time:             Fri 10 Feb 2023 17:29:11 +0000
ROA not before:           Fri 10 Feb 2023 17:24:11 +0000
ROA not after:            Fri 09 Feb 2024 17:29:11 +0000
asID:                     269159
IP address blocks:        45.181.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:52:14:66:35:14:67:fb:11:2b:41:88:60:a7:56:2c:1c:0a:55:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E29E3B51896946B4BDD39559D5106072E07B3B
        Validity
            Not Before: Feb 10 17:24:11 2023 GMT
            Not After : Feb  9 17:29:11 2024 GMT
        Subject: CN=A5942BE8A4F34044DDFE97D67AA17DF84E1700EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:63:7b:f4:3f:8a:ad:84:ca:e5:23:32:63:
                    b4:e0:a7:73:2d:4b:3e:da:9f:7e:2f:62:51:3f:63:
                    27:94:9e:73:f6:9d:ab:80:21:19:be:15:45:ba:ee:
                    c1:8a:f4:00:be:67:55:23:18:f7:9a:52:5e:ff:64:
                    13:72:5d:d1:30:1e:ce:c6:18:70:f6:d3:22:63:56:
                    fc:15:44:19:a5:78:cd:95:f4:05:a3:fa:94:2d:14:
                    b9:2d:e0:5d:1d:c4:c9:dd:fb:bb:e0:e0:00:7f:9a:
                    69:8b:d3:f7:6b:a3:e9:48:c3:5b:b1:5d:03:b1:42:
                    1e:06:e2:07:91:dd:2b:fb:a4:68:22:4f:fa:75:36:
                    0e:f4:ac:65:7f:ee:33:3e:d2:b1:f7:fc:75:20:c2:
                    3a:df:f0:58:f1:38:85:a9:53:46:a9:d6:e8:8b:50:
                    cb:6a:4c:7a:88:f1:e6:eb:e2:03:e6:4a:9e:9e:9d:
                    77:f5:d9:dc:58:d8:15:45:a1:14:83:0e:3f:63:08:
                    9f:12:6b:32:e6:81:67:75:fe:ce:82:48:fc:a6:80:
                    95:3b:a8:02:b3:c7:7e:24:6e:18:41:e5:11:1c:4f:
                    b4:48:1f:74:3d:fa:b5:52:ba:c5:56:cf:a9:ea:c6:
                    d2:78:cf:44:42:f6:34:24:56:ae:1f:23:d7:6d:72:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:94:2B:E8:A4:F3:40:44:DD:FE:97:D6:7A:A1:7D:F8:4E:17:00:EF
            X509v3 Authority Key Identifier:
                keyid:04:E2:9E:3B:51:89:69:46:B4:BD:D3:95:59:D5:10:60:72:E0:7B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/04E29E3B51896946B4BDD39559D5106072E07B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04E29E3B51896946B4BDD39559D5106072E07B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/34352e3138312e382e302f32342d3234203d3e20323639313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a2:6a:39:bc:55:3c:ff:89:44:81:20:f6:c3:25:a2:e5:36:
         8a:ec:22:a1:88:9c:b1:7f:80:bf:59:81:eb:73:31:c9:54:20:
         b2:41:92:e1:13:c6:ae:82:9c:a2:e7:0a:85:36:26:5f:2c:b1:
         bb:de:74:23:01:2b:cf:43:c0:2e:83:01:64:c0:dd:40:92:cd:
         6f:63:94:c0:ba:d0:6f:01:d4:41:57:0b:bf:07:03:6a:f6:5e:
         71:17:ea:8a:59:cc:41:c4:6d:66:51:78:69:7a:7f:63:01:63:
         32:e2:14:f3:6d:08:2d:31:d4:30:4d:49:e5:2b:55:7e:07:ad:
         f1:91:9d:1d:e1:30:40:eb:18:f2:96:15:f4:6a:45:db:f6:42:
         a0:01:d5:c5:b3:bc:24:ed:5f:f0:8f:47:36:26:7d:a1:98:6d:
         51:ff:64:b1:65:e3:c4:eb:87:c1:06:37:51:2e:15:05:1d:c1:
         d7:ee:6c:57:f1:f5:81:45:3b:05:7f:8d:4e:d9:32:eb:88:a0:
         1d:29:83:28:bf:35:0b:f3:a4:a6:5b:20:5b:b1:3b:f8:f3:1d:
         9d:04:24:16:87:38:b4:f0:98:40:b2:2c:84:e8:18:9e:fa:55:
         3e:58:9b:65:9f:bd:f0:37:b6:c0:1a:eb:f3:55:8f:53:15:cb:
         a3:b7:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org