Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
File:                     34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (raw, json)
Hash identifier:          k/XyT6UR8cup0KfUa6W907h93Tp2QviyXdrmu/fqEU8=
Subject key identifier:   AD:69:8C:EB:07:E4:33:E4:73:6A:43:2C:20:9B:96:55:E6:82:AC:58
Certificate issuer:       /CN=520B73CFD2D4A90F7BFCBB9994BCEEC50715860B
Certificate serial:       06082E8A9DDB4736BBA522029E75F6B633C0CFAF
Authority key identifier: 52:0B:73:CF:D2:D4:A9:0F:7B:FC:BB:99:94:BC:EE:C5:07:15:86:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
Signing time:             Thu 04 Jan 2024 22:47:15 +0000
ROA not before:           Thu 04 Jan 2024 22:42:15 +0000
ROA not after:            Thu 02 Jan 2025 22:47:15 +0000
asID:                     273392
IP address blocks:        45.168.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:08:2e:8a:9d:db:47:36:bb:a5:22:02:9e:75:f6:b6:33:c0:cf:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520B73CFD2D4A90F7BFCBB9994BCEEC50715860B
        Validity
            Not Before: Jan  4 22:42:15 2024 GMT
            Not After : Jan  2 22:47:15 2025 GMT
        Subject: CN=AD698CEB07E433E4736A432C209B9655E682AC58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:ff:9b:8a:e1:2b:23:c9:9d:05:73:13:32:
                    41:87:f4:38:d3:70:e1:29:77:e7:8e:04:cb:7f:ee:
                    60:69:c4:d7:64:20:61:8d:68:a8:ab:38:f6:9b:98:
                    30:30:5a:bb:24:f7:ce:fd:e3:6a:6b:9d:dc:6e:1e:
                    85:1d:43:d1:02:a3:40:b3:e4:3b:f4:25:09:92:8c:
                    51:ac:93:3f:bc:25:66:11:ea:42:d7:f5:99:62:e0:
                    e3:09:5c:98:68:80:f4:62:8f:51:1f:9e:d9:97:12:
                    a3:1f:e4:73:24:27:ec:37:63:3d:3d:98:35:e3:83:
                    3a:1a:3c:be:c5:e2:70:70:af:c9:a1:95:dc:75:ea:
                    49:92:ac:42:84:b7:f8:f2:be:b8:a3:a8:58:89:4d:
                    00:a8:d8:eb:0a:9c:89:cf:74:a6:5c:ba:cd:f7:cb:
                    46:eb:a6:04:cc:9a:d7:1a:8e:5e:fb:57:4f:e4:ec:
                    c7:bf:f2:46:48:55:6b:6b:d7:29:79:7f:b7:73:50:
                    f1:c4:a4:cd:58:87:b4:4e:75:bb:3a:8c:7d:13:8b:
                    ea:0c:ab:20:a8:d7:90:03:57:76:51:80:ab:21:82:
                    9e:31:d6:f5:63:91:8b:23:89:be:9b:ec:ea:54:5f:
                    74:d9:4b:ce:15:6b:1c:bc:4c:29:dd:38:fa:9c:f3:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:69:8C:EB:07:E4:33:E4:73:6A:43:2C:20:9B:96:55:E6:82:AC:58
            X509v3 Authority Key Identifier:
                keyid:52:0B:73:CF:D2:D4:A9:0F:7B:FC:BB:99:94:BC:EE:C5:07:15:86:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6f:5e:40:c1:99:2d:49:4e:99:a8:29:02:89:68:b8:f6:42:
         9b:dd:83:ac:4b:a3:2b:eb:1c:f4:14:52:6d:6a:f7:92:8b:f6:
         d3:22:bb:2c:78:c5:98:71:1e:a1:d7:71:25:da:66:b5:e2:1b:
         2e:72:2a:f3:ce:6c:ba:63:64:32:11:c4:93:c3:25:66:0e:51:
         02:4f:c0:64:9d:73:d8:e9:25:7d:50:c4:8d:b2:bf:ee:a5:7a:
         3f:cc:80:2b:74:19:fb:27:e0:4e:3a:9a:ac:4a:ff:b8:b2:c9:
         da:9f:a3:79:e7:65:b2:e2:64:4d:73:c8:60:8b:0a:78:49:93:
         4f:40:d3:52:4e:69:e4:5d:66:ae:f1:69:12:9e:4f:2b:72:72:
         5c:1c:9a:c8:55:72:a0:91:29:9b:ab:33:2a:d2:9e:76:c0:8b:
         50:39:aa:d8:e3:ec:e0:07:52:63:73:4b:c6:e1:03:36:1e:75:
         b8:96:f7:f0:3e:a5:ff:e8:3d:fe:fa:f6:36:44:09:cb:8c:ae:
         ee:c9:7d:21:a9:7c:70:d1:e8:7d:83:0d:28:02:24:30:2e:d9:
         0b:e4:bd:07:f1:3a:90:2b:3a:88:8b:54:9a:25:a9:7b:f6:ab:
         7f:96:40:02:23:cf:b9:b3:09:bf:70:0c:29:f1:ef:b9:1e:66:
         9e:4e:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org