Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32322d3232203d3e20323639353732.roa
File:                     34352e3138392e36382e302f32322d3232203d3e20323639353732.roa (raw, json)
Hash identifier:          syCqXqwFIvV4lv42KrGs3p+uKvBcwuVd1p8oWXFYM4Y=
Subject key identifier:   0D:0E:91:F4:1B:89:61:5D:95:16:BB:C0:45:8B:C8:C8:3A:7A:21:D8
Certificate issuer:       /CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
Certificate serial:       64C2F5372F19F8A60B1746D3AA05600F42DEAE9A
Authority key identifier: FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32322d3232203d3e20323639353732.roa
Signing time:             Mon 24 Jul 2023 17:00:00 +0000
ROA not before:           Mon 24 Jul 2023 16:55:00 +0000
ROA not after:            Mon 22 Jul 2024 17:00:00 +0000
asID:                     269572
IP address blocks:        45.189.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c2:f5:37:2f:19:f8:a6:0b:17:46:d3:aa:05:60:0f:42:de:ae:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
        Validity
            Not Before: Jul 24 16:55:00 2023 GMT
            Not After : Jul 22 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:38:b5:c2:75:07:f9:1c:8e:29:8b:8b:06:
                    42:14:a4:de:c2:19:d9:14:f9:c4:7b:f2:b4:86:d0:
                    91:cb:5b:85:b8:e5:22:24:b9:00:1a:97:9a:90:54:
                    7f:ec:f8:35:95:a4:6e:70:06:f3:39:d9:1f:40:3b:
                    2a:cd:1b:47:e7:0c:61:7e:0c:52:61:36:32:26:be:
                    e5:bb:ca:cb:b6:31:0b:43:76:c4:1c:e2:62:e2:2e:
                    74:79:b1:64:ce:12:a9:7a:c4:af:a4:dc:a2:0d:65:
                    42:9e:02:a0:27:77:1c:c6:17:86:9a:46:9e:ac:73:
                    65:fe:e3:c8:6e:6d:97:79:52:a0:d1:37:72:2d:6c:
                    e5:2e:48:72:e7:22:dc:1e:5c:88:cf:1b:4e:6a:4a:
                    8e:da:c2:89:f5:71:bf:32:4f:74:7d:5f:54:2a:f1:
                    fb:2e:ec:7e:1e:25:7f:e7:4f:26:8a:f4:35:52:04:
                    66:03:0e:7a:51:48:b3:e0:28:f8:5a:3f:a7:ed:d1:
                    69:33:a1:4c:1c:e2:19:92:fc:37:56:3e:8e:2b:41:
                    25:42:5f:a1:cd:a6:58:9e:9e:1e:01:bc:8b:09:3f:
                    4f:0d:fd:19:c6:84:c8:0f:bf:d5:4e:b7:30:36:ae:
                    46:c7:95:16:8c:cb:75:15:08:db:f3:8d:5e:d5:a7:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0E:91:F4:1B:89:61:5D:95:16:BB:C0:45:8B:C8:C8:3A:7A:21:D8
            X509v3 Authority Key Identifier:
                keyid:FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32322d3232203d3e20323639353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:cf:05:17:72:62:3f:21:1c:bd:06:9c:09:6b:48:6a:c1:64:
         fc:20:16:27:6f:43:2b:a2:9a:3e:e8:81:19:bb:6a:6a:d2:b6:
         f4:59:de:d0:ab:60:aa:bb:4d:c4:06:ec:30:27:78:42:0a:f8:
         f7:69:ac:0a:e6:50:f8:bc:bb:85:26:ce:60:03:a2:bd:c8:1e:
         72:95:71:18:e5:6e:d9:70:64:05:6b:1f:33:0c:82:2a:3f:fd:
         35:a8:6c:b0:37:98:38:47:c2:5b:58:50:ab:4f:f4:bc:99:06:
         ed:3b:90:05:23:0c:b6:97:c2:61:2a:b4:64:47:26:f2:5e:57:
         e7:bb:d9:5f:84:9e:70:80:5b:3b:b9:4b:cd:e9:c7:18:6e:68:
         46:b2:c9:14:2a:cf:90:57:2c:a8:37:ab:0b:37:a9:ae:b4:5f:
         b5:02:11:d6:76:a1:10:1d:bc:2f:fe:6c:2a:57:69:b4:ae:c2:
         11:aa:cb:1e:08:57:cc:35:79:4f:88:3b:a1:95:3c:60:5d:49:
         95:5b:e2:a1:5c:36:3e:bd:5d:f1:97:ce:49:91:ec:7d:e0:8d:
         0e:ff:14:05:bd:dc:3f:7d:09:01:b1:82:ad:59:c3:8f:12:5e:
         b4:e3:cb:88:6e:d3:c8:a6:19:91:fe:ec:b8:fe:d2:98:c1:8c:
         58:b9:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org