Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/34352e3233392e35362e302f32322d3332203d3e20323638333534.roa
File:                     34352e3233392e35362e302f32322d3332203d3e20323638333534.roa (raw, json)
Hash identifier:          JN8pQ35996I9LmQ8uJuUH837OCmcpXIgauRg1hOeZmo=
Subject key identifier:   36:35:F0:4A:EC:E2:FF:31:6B:D0:FD:06:17:4F:89:81:7A:EE:DE:B7
Certificate issuer:       /CN=739C8421324751C7B11953D1A7B9E91FD7DF5830
Certificate serial:       43980D25F1A9CD78FFB45F2726F38F09EACCC5DE
Authority key identifier: 73:9C:84:21:32:47:51:C7:B1:19:53:D1:A7:B9:E9:1F:D7:DF:58:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/34352e3233392e35362e302f32322d3332203d3e20323638333534.roa
Signing time:             Tue 02 Apr 2024 13:20:39 +0000
ROA not before:           Tue 02 Apr 2024 13:15:39 +0000
ROA not after:            Tue 01 Apr 2025 13:20:39 +0000
asID:                     268354
IP address blocks:        45.239.56.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:98:0d:25:f1:a9:cd:78:ff:b4:5f:27:26:f3:8f:09:ea:cc:c5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739C8421324751C7B11953D1A7B9E91FD7DF5830
        Validity
            Not Before: Apr  2 13:15:39 2024 GMT
            Not After : Apr  1 13:20:39 2025 GMT
        Subject: CN=3635F04AECE2FF316BD0FD06174F89817AEEDEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:34:fa:79:6a:35:95:d4:24:1c:a6:7b:8e:6e:
                    11:d4:0f:ea:85:7c:c2:f1:5a:f6:a8:c9:46:c3:ae:
                    3e:3c:02:1a:5f:13:c4:97:6d:8a:ef:27:27:eb:10:
                    6a:ba:9c:72:4e:3d:d6:53:db:17:d3:58:4b:b8:25:
                    06:21:3f:09:37:fd:db:37:74:1c:3e:c8:5b:ba:83:
                    a8:0e:a1:d9:f2:e0:b1:8f:0b:94:c2:75:69:e4:5c:
                    33:9e:6f:2c:36:64:50:b3:f6:96:e2:98:45:83:c5:
                    e5:0b:17:8e:26:6a:26:5e:9a:fc:8e:2e:a5:d0:7f:
                    b0:01:46:da:c2:37:24:9b:95:be:ad:1e:f8:1d:9b:
                    17:91:eb:55:59:06:ed:c2:4e:31:f5:8b:cd:27:d2:
                    22:d0:f2:44:9b:c9:cb:a4:1f:2f:38:f5:b3:96:28:
                    21:f2:56:f1:a3:6c:e2:f0:ac:66:59:d7:45:0a:93:
                    7c:bd:ee:a1:3f:62:71:fe:a6:28:c7:1b:5f:97:5d:
                    8f:11:03:e3:a9:5a:d3:a6:21:33:58:15:0d:c6:3b:
                    e7:04:c8:88:d5:8d:f7:26:87:5f:37:72:13:21:47:
                    cb:6d:fb:83:56:bf:ad:21:7b:aa:74:9d:72:e4:fc:
                    c8:10:0e:22:69:32:86:1f:92:a7:4a:37:52:25:c5:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:35:F0:4A:EC:E2:FF:31:6B:D0:FD:06:17:4F:89:81:7A:EE:DE:B7
            X509v3 Authority Key Identifier:
                keyid:73:9C:84:21:32:47:51:C7:B1:19:53:D1:A7:B9:E9:1F:D7:DF:58:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/34352e3233392e35362e302f32322d3332203d3e20323638333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:0a:bf:a5:f0:3c:04:53:39:30:38:ea:57:1a:c7:11:10:97:
         f7:d9:f1:38:db:93:10:22:30:cd:c9:14:99:87:7b:43:d3:14:
         2a:b1:04:40:1b:b6:60:ec:14:05:0a:72:f1:ce:9d:14:ec:9e:
         b5:09:4d:a1:41:89:ac:b4:71:6e:2c:1e:93:04:e2:03:14:8f:
         47:59:86:39:31:63:ac:64:7a:06:98:df:3e:30:b0:9f:44:28:
         13:87:07:4d:90:d0:83:b3:45:b0:c2:8a:a1:41:43:fe:8f:e9:
         bb:80:ae:40:f8:ea:09:9a:e8:5d:41:f4:c9:53:3b:b7:9c:3c:
         94:8b:1b:06:8f:47:ce:c4:86:e5:a8:57:0b:8e:af:7a:8d:08:
         88:06:33:d7:25:1a:f2:b2:21:88:54:57:d2:39:0a:b8:f5:14:
         8e:f6:52:9f:b6:29:56:9a:92:9f:4b:03:3f:80:ca:68:01:99:
         01:d1:bb:52:a7:44:0b:54:7a:cf:c0:3d:f7:b0:80:ab:4c:d4:
         05:88:d5:b5:17:af:f4:3a:7f:cd:b2:4f:0b:92:4e:a8:34:11:
         fe:a3:54:3e:dd:9d:85:00:5c:62:e8:a2:b9:a1:05:80:0c:07:
         36:8b:6d:37:96:33:9d:5e:c9:b5:00:d8:ba:7c:cd:c6:05:61:
         48:49:44:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org