Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132302e302f32322d3232203d3e20323639303936.roa
File:                     34352e3138352e3132302e302f32322d3232203d3e20323639303936.roa (raw, json)
Hash identifier:          qhZnbJNNBCG3g9Fcgd/UU3LRJEYDdjqP3Svmt5sBNpk=
Subject key identifier:   A8:9B:88:1F:9A:12:C2:F9:7C:02:34:41:50:3D:87:35:34:C6:AD:0C
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       051CB2C746879078AF8D7CCFAE996840C4B03FE1
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132302e302f32322d3232203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 15:01:31 +0000
ROA not before:           Wed 05 Apr 2023 14:56:31 +0000
ROA not after:            Wed 03 Apr 2024 15:01:31 +0000
asID:                     269096
IP address blocks:        45.185.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1c:b2:c7:46:87:90:78:af:8d:7c:cf:ae:99:68:40:c4:b0:3f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 14:56:31 2023 GMT
            Not After : Apr  3 15:01:31 2024 GMT
        Subject: CN=A89B881F9A12C2F97C023441503D873534C6AD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:72:d0:03:80:0f:30:24:ea:fc:0c:48:17:
                    1b:31:ac:4f:1b:90:dd:c7:eb:5c:a4:ab:71:16:20:
                    ef:16:d6:8b:84:f2:ff:b1:00:f1:36:20:5f:e4:38:
                    9d:6e:f0:fe:ac:d9:d9:e4:fb:6e:60:7d:aa:2e:ca:
                    e9:44:0a:c3:a5:74:2b:b8:1d:b6:38:1f:48:c5:b3:
                    42:ec:a6:dd:2e:ca:4f:c8:b5:6c:46:c5:3f:66:06:
                    dd:6b:ed:00:86:0c:6e:9a:6e:97:ca:24:c7:4f:3b:
                    6d:36:4b:11:d5:0b:88:e7:dc:44:7d:39:0c:37:a1:
                    41:cc:1b:1b:69:58:57:e6:2a:ee:a1:15:ac:f6:d5:
                    1d:80:e6:7e:6e:44:d6:03:b1:b7:25:02:29:c8:5a:
                    18:ad:12:53:e8:09:6a:ef:83:5b:0e:9f:8c:7a:31:
                    8b:54:95:78:b7:d6:cc:72:3f:72:74:af:5a:1e:b3:
                    37:67:7a:01:54:3e:a5:5d:4c:30:88:26:9e:c3:ed:
                    6c:c4:1a:6f:cd:7e:6c:4c:d9:7b:a5:3d:f5:db:77:
                    f5:75:d3:54:bc:22:ad:47:7d:31:ca:72:0d:9a:f4:
                    15:e9:df:7c:d9:70:c1:75:2e:0c:0a:0d:91:5f:cc:
                    94:2d:07:bf:5a:33:6b:86:be:43:be:fc:91:cb:76:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9B:88:1F:9A:12:C2:F9:7C:02:34:41:50:3D:87:35:34:C6:AD:0C
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3138352e3132302e302f32322d3232203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:26:92:9f:0a:7f:4d:e0:6b:42:e1:ef:cb:35:5b:12:62:77:
         08:45:fa:ff:e1:32:2c:c9:14:e2:ba:b6:41:96:bc:dc:44:78:
         2b:84:4f:99:65:05:46:81:ae:c6:a8:cc:63:10:af:54:06:f1:
         18:b8:68:87:61:e6:85:4d:6f:a1:16:d1:8a:46:5a:c5:1f:8c:
         15:bd:73:ce:7d:c0:e4:08:3a:9b:01:35:4d:19:a6:ce:e5:9c:
         31:ee:86:46:ad:2e:36:68:ac:81:5c:be:40:ac:b0:68:b1:30:
         97:26:65:fb:8b:82:a8:75:ba:62:3c:9f:10:28:f8:79:b3:f7:
         b4:2d:39:43:89:b4:6e:66:c2:2c:e3:8b:6c:11:01:38:04:06:
         8e:c5:b3:aa:e7:f4:e0:3b:71:a6:ff:2f:6a:7a:07:08:e0:60:
         e5:98:b2:c3:e8:24:5b:35:ca:d7:14:4f:12:13:ec:11:d5:2c:
         dc:fb:a2:2d:51:8f:d9:5e:9e:f2:2f:6d:35:b3:38:17:a5:18:
         a0:dd:9f:c2:56:88:05:82:06:b2:4d:c8:4b:14:90:b9:6e:86:
         a7:3b:dd:f9:80:c7:6c:f0:db:6c:d3:c1:70:c4:37:4d:98:47:
         24:43:5f:29:e0:c4:8a:fa:8e:1e:a6:70:d8:25:8d:53:58:2c:
         4d:f9:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org