Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231322e302f32332d3233203d3e20323638353634.roa
File:                     34352e3136322e3231322e302f32332d3233203d3e20323638353634.roa (raw, json)
Hash identifier:          v06tPQn/JCuKKcy2reqFdIbztY4e3yg1in+3egnjFsw=
Subject key identifier:   BD:6A:6B:31:DA:AD:BC:65:1C:7B:64:79:C8:B2:E4:51:48:F5:7E:B9
Certificate issuer:       /CN=FA5DD4A99CE33D3AE72F86A394621F08627407D3
Certificate serial:       248194F7EBA3E897002ABCE4953C6020002628F9
Authority key identifier: FA:5D:D4:A9:9C:E3:3D:3A:E7:2F:86:A3:94:62:1F:08:62:74:07:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231322e302f32332d3233203d3e20323638353634.roa
Signing time:             Fri 22 Mar 2024 17:00:02 +0000
ROA not before:           Fri 22 Mar 2024 16:55:02 +0000
ROA not after:            Sat 22 Mar 2025 17:00:02 +0000
asID:                     268564
IP address blocks:        45.162.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:81:94:f7:eb:a3:e8:97:00:2a:bc:e4:95:3c:60:20:00:26:28:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5DD4A99CE33D3AE72F86A394621F08627407D3
        Validity
            Not Before: Mar 22 16:55:02 2024 GMT
            Not After : Mar 22 17:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:3b:c2:5a:61:fe:69:ad:bd:12:39:21:72:
                    47:5e:50:b4:ff:71:3d:9e:56:e1:a1:53:15:cc:9e:
                    34:41:2a:68:e2:66:36:f3:88:42:f7:b6:95:78:10:
                    33:5b:e4:37:1b:de:74:2d:01:a9:69:a5:87:98:f2:
                    43:b9:61:e5:e9:ff:74:af:7c:07:51:1d:b8:0d:70:
                    c3:62:ef:6b:17:12:f2:58:23:ae:11:34:1d:41:5f:
                    e2:51:25:ca:7b:88:5f:18:7e:c6:02:aa:8e:86:1f:
                    32:e1:8f:79:d2:62:9f:a7:91:10:c0:b0:25:1a:54:
                    e4:27:0a:56:f5:e8:46:70:7c:d3:08:57:12:c1:a2:
                    42:e0:e2:b9:9d:03:36:2c:25:41:56:04:b2:56:c0:
                    c9:05:65:0e:4f:54:5a:af:48:ea:62:59:c0:2a:ae:
                    74:00:44:29:32:ba:ca:6c:64:05:c4:54:35:68:ab:
                    8a:51:01:0c:cd:94:6b:32:ce:1a:36:88:24:20:f9:
                    33:e6:86:d3:74:48:01:76:1e:96:fe:95:ce:9c:58:
                    1c:61:90:4b:de:ef:d0:66:fa:04:9a:04:33:fa:d9:
                    33:4f:a9:27:5d:59:aa:f3:84:79:12:f1:2d:f9:1b:
                    71:67:12:ba:22:ca:cc:f6:56:f6:c9:31:94:fc:87:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:6B:31:DA:AD:BC:65:1C:7B:64:79:C8:B2:E4:51:48:F5:7E:B9
            X509v3 Authority Key Identifier:
                keyid:FA:5D:D4:A9:9C:E3:3D:3A:E7:2F:86:A3:94:62:1F:08:62:74:07:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/34352e3136322e3231322e302f32332d3233203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:fe:05:eb:ac:68:d9:97:9e:39:44:a8:12:30:c7:cb:c8:77:
         b8:44:ac:f7:34:c4:e6:03:3f:e6:78:5a:2c:64:89:0b:1d:c6:
         67:1f:3c:18:5f:df:e3:9c:7c:07:23:ce:ce:8a:56:f9:a1:08:
         c9:cc:0a:7f:21:58:1d:44:a3:ba:d1:b8:16:0c:e8:da:37:ac:
         97:01:c1:69:82:ad:9e:9b:dc:78:bb:5e:c0:fd:72:5d:d0:41:
         1f:e5:0f:34:14:c0:42:31:a7:92:90:0d:af:1c:6b:fd:1f:97:
         57:66:35:d5:92:7d:73:e6:b3:1e:1c:5c:91:90:b8:4f:5b:61:
         1a:af:ff:e7:f8:64:d4:39:62:4a:dd:b0:dc:30:3d:64:97:16:
         24:aa:74:e4:76:6f:cf:51:dd:19:db:2f:43:46:62:52:09:0b:
         79:b6:2d:75:53:e8:1a:4e:18:c1:cf:0c:eb:43:78:d8:cb:55:
         03:30:d8:ba:9d:2b:55:5f:27:88:00:44:c1:64:09:ca:d1:ff:
         c0:09:8e:7c:0a:6c:b6:de:19:af:dd:a2:8b:27:90:f3:7e:79:
         4d:f1:66:10:be:70:d7:b6:fd:fb:c3:a4:4c:30:3b:08:64:9e:
         bc:a4:a0:1c:3b:5d:0a:b0:98:21:17:66:07:2e:9f:78:38:2c:
         f5:4b:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org