Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
File:                     34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (raw, json)
Hash identifier:          LxHuZf+P3UgGZwSK8Iiq3z6vOzwt8mpy7ymruTkaCSM=
Subject key identifier:   FA:04:82:B3:7D:45:53:EA:39:FB:14:34:48:C4:6D:46:74:DA:77:51
Certificate issuer:       /CN=B920BF0EDCE3A3B03FEC47745AFE6218226CB774
Certificate serial:       60C04D2D41096A3B929E5EB08C36EDE627E96B59
Authority key identifier: B9:20:BF:0E:DC:E3:A3:B0:3F:EC:47:74:5A:FE:62:18:22:6C:B7:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B920BF0EDCE3A3B03FEC47745AFE6218226CB774.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
Signing time:             Wed 03 Apr 2024 22:36:49 +0000
ROA not before:           Wed 03 Apr 2024 22:31:49 +0000
ROA not after:            Wed 02 Apr 2025 22:36:49 +0000
asID:                     273392
IP address blocks:        45.168.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c0:4d:2d:41:09:6a:3b:92:9e:5e:b0:8c:36:ed:e6:27:e9:6b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B920BF0EDCE3A3B03FEC47745AFE6218226CB774
        Validity
            Not Before: Apr  3 22:31:49 2024 GMT
            Not After : Apr  2 22:36:49 2025 GMT
        Subject: CN=FA0482B37D4553EA39FB143448C46D4674DA7751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:6d:e1:3c:ca:12:17:c2:93:f4:72:eb:60:
                    63:f0:de:c5:a6:5c:34:b4:26:47:f2:ad:08:73:d9:
                    87:0b:0e:b6:7f:a4:18:a4:18:bc:73:30:69:86:62:
                    25:54:ed:9c:af:ed:ec:7a:26:92:1d:23:87:28:97:
                    50:25:69:c0:7b:d8:2e:95:a5:4a:4b:99:c9:57:bf:
                    06:de:e6:33:00:23:d9:2c:80:62:12:62:a4:df:54:
                    47:65:39:b9:d1:28:3f:5a:0e:2e:fd:8e:a1:c4:a3:
                    ca:6b:ae:48:42:9f:a4:0d:d8:c3:64:bb:a2:4d:f9:
                    6b:a7:d9:6f:29:c6:c9:8e:cf:1e:c1:44:b7:e1:ab:
                    5b:c2:13:63:b7:0c:33:60:ee:1d:1a:07:9c:2a:a4:
                    71:5b:28:82:d8:b7:0c:17:84:c4:ad:2f:8d:aa:f8:
                    77:c5:88:ef:70:4d:59:78:4e:82:48:20:75:d7:89:
                    3e:84:68:7a:f4:26:c2:83:75:9a:bb:bb:65:14:13:
                    ef:36:d1:c4:dd:6e:cd:cf:36:01:78:5b:6e:23:40:
                    dd:93:06:08:0e:75:a9:fc:cc:b2:38:45:a1:76:7f:
                    51:24:a7:86:f8:b1:11:4f:bb:dc:c8:3d:77:50:a6:
                    8e:af:38:d0:80:3c:95:65:2e:be:11:40:dd:66:07:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:04:82:B3:7D:45:53:EA:39:FB:14:34:48:C4:6D:46:74:DA:77:51
            X509v3 Authority Key Identifier:
                keyid:B9:20:BF:0E:DC:E3:A3:B0:3F:EC:47:74:5A:FE:62:18:22:6C:B7:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/B920BF0EDCE3A3B03FEC47745AFE6218226CB774.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B920BF0EDCE3A3B03FEC47745AFE6218226CB774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:55:d0:37:f1:fd:6f:cd:99:8c:2d:b3:66:db:07:99:65:dd:
         47:71:c5:86:4d:11:a4:84:4a:cf:ca:ae:50:80:10:5d:bd:1f:
         3d:26:02:ae:69:1b:cf:2f:fb:8a:58:d4:d2:48:d0:36:88:2f:
         79:6c:2c:b9:02:c5:57:ba:73:d6:96:33:87:2d:f3:cf:44:d9:
         09:64:6c:0d:77:96:5e:04:be:19:a6:1b:4f:00:f8:28:4a:d1:
         a6:05:ee:60:06:66:92:7e:1d:cb:0c:d8:ed:22:a8:c6:82:12:
         7f:46:18:65:50:fa:e9:2d:ec:81:1e:38:09:f3:ba:0e:b7:db:
         32:f7:0f:6e:72:f7:14:20:98:49:90:64:11:d8:96:47:63:4d:
         de:c4:73:c7:23:19:a3:61:87:13:3f:a4:08:fd:e6:46:47:74:
         b7:dd:7e:6c:7f:e0:01:24:3f:51:50:ea:11:b1:38:12:69:8d:
         d9:20:ad:f1:a8:5f:0b:e7:13:10:7d:07:96:32:d0:95:90:ba:
         69:38:f3:f3:f3:00:16:8e:04:11:ed:eb:bf:35:82:97:27:69:
         2a:de:ec:31:7b:bc:68:7c:f7:89:4a:1b:27:49:1d:83:15:d0:
         35:1d:ed:90:30:91:f5:08:25:0b:65:26:47:6f:e5:1d:e9:3a:
         38:84:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org