Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/34352e3138392e322e302f32332d3234203d3e20323639363438.roa
File:                     34352e3138392e322e302f32332d3234203d3e20323639363438.roa (raw, json)
Hash identifier:          br2MGwTLy7xUv1IKdNflp52zb3xVfzR2LYfENLVE5NY=
Subject key identifier:   FA:D5:B4:9C:89:DD:7E:48:5D:0D:75:AF:72:54:43:17:33:34:FF:4B
Certificate issuer:       /CN=94479532E36E2E4A46856F1FFC4E21FEF7910DA0
Certificate serial:       7275EE4D3F518E5A27B34B9A5AFD6F4B19B08703
Authority key identifier: 94:47:95:32:E3:6E:2E:4A:46:85:6F:1F:FC:4E:21:FE:F7:91:0D:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94479532E36E2E4A46856F1FFC4E21FEF7910DA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/34352e3138392e322e302f32332d3234203d3e20323639363438.roa
Signing time:             Fri 17 Nov 2023 18:15:01 +0000
ROA not before:           Fri 17 Nov 2023 18:10:01 +0000
ROA not after:            Fri 15 Nov 2024 18:15:01 +0000
asID:                     269648
IP address blocks:        45.189.2.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:75:ee:4d:3f:51:8e:5a:27:b3:4b:9a:5a:fd:6f:4b:19:b0:87:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94479532E36E2E4A46856F1FFC4E21FEF7910DA0
        Validity
            Not Before: Nov 17 18:10:01 2023 GMT
            Not After : Nov 15 18:15:01 2024 GMT
        Subject: CN=FAD5B49C89DD7E485D0D75AF725443173334FF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:40:61:5c:4a:5a:01:f4:c9:ba:8c:a8:ce:
                    ae:e6:43:e0:26:f0:ad:51:30:e4:34:2d:3b:30:87:
                    c0:6a:50:70:9b:0f:1a:e9:2e:59:db:34:b0:a3:cd:
                    ed:28:51:20:a6:8f:ba:77:84:07:93:77:51:27:9a:
                    4c:c8:9f:07:b9:03:9a:5c:f2:b6:7c:10:42:42:76:
                    b5:eb:ac:2a:84:f8:35:f4:8e:32:d3:fc:ee:90:32:
                    36:e6:1b:42:17:ad:05:34:71:cd:7e:4f:ac:b1:d3:
                    ba:e7:1c:8b:f0:38:db:3a:b2:72:f9:27:4f:b7:14:
                    13:7d:8a:67:86:91:4c:38:4b:1d:e8:a3:6e:a3:0c:
                    fa:75:bb:e4:ee:be:79:cb:26:36:6a:d7:23:66:07:
                    0b:a5:1e:94:13:ba:81:ce:2a:f4:45:87:49:6a:4b:
                    bd:70:60:52:c6:a1:c8:aa:f1:35:49:3a:74:8c:82:
                    38:4d:3b:13:61:f5:ce:9a:17:6c:4c:7d:0f:53:21:
                    9c:3f:85:f9:e4:c4:d5:a7:dd:72:78:8a:73:24:14:
                    d4:56:11:eb:5d:88:d1:65:0a:63:d5:8e:c6:ce:f6:
                    4c:ab:03:92:af:e4:61:f5:0f:f0:96:ce:9d:9b:04:
                    ff:44:c6:c2:f5:73:4e:09:cc:08:91:cd:60:fa:bc:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D5:B4:9C:89:DD:7E:48:5D:0D:75:AF:72:54:43:17:33:34:FF:4B
            X509v3 Authority Key Identifier:
                keyid:94:47:95:32:E3:6E:2E:4A:46:85:6F:1F:FC:4E:21:FE:F7:91:0D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/94479532E36E2E4A46856F1FFC4E21FEF7910DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94479532E36E2E4A46856F1FFC4E21FEF7910DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/34352e3138392e322e302f32332d3234203d3e20323639363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:cc:09:4d:6c:12:f7:68:8b:e8:c2:30:1b:52:a8:59:4c:
         09:8a:12:00:b7:5d:79:5c:6b:0a:9d:d6:13:91:b0:48:dc:ee:
         59:b3:50:70:2b:b5:c1:37:9c:19:24:7c:29:85:f2:17:be:09:
         d4:d9:e3:79:9c:6a:48:8d:ec:10:2d:da:95:5f:dd:f9:b2:c6:
         44:a4:54:ac:67:56:85:6d:ff:88:8a:e6:78:b3:1a:d7:5b:0f:
         f9:17:95:20:52:1a:54:0c:f0:17:a6:f0:40:5e:b7:7b:ef:bd:
         a7:6b:a6:b4:0f:74:24:a3:da:5f:3a:96:25:3c:6e:76:87:4a:
         91:a3:11:42:ab:13:13:c8:4d:41:02:1c:83:23:10:23:4f:36:
         4e:d7:eb:e1:fc:d4:24:8a:c7:b5:6e:ac:ac:f6:31:41:9d:aa:
         85:39:21:96:1a:4f:2f:4f:ab:1e:a7:c1:bd:62:b2:bd:4a:38:
         e3:6f:8a:cd:50:d8:4d:c6:2a:f7:7c:c2:ea:15:98:a2:ea:f4:
         1f:40:fb:18:d8:c9:cd:b2:0b:c7:b0:79:c4:6b:ee:af:9a:3c:
         c2:6d:6a:e3:93:d8:82:f3:08:33:a0:2a:25:ae:06:46:ef:46:
         c8:ae:d5:0c:2e:77:da:ce:a0:fb:5e:29:a1:0b:26:04:88:c1:
         80:29:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org