Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e37312e302f32342d3234203d3e20323639353732.roa
File:                     34352e3138392e37312e302f32342d3234203d3e20323639353732.roa (raw, json)
Hash identifier:          ZAVck1j51sd3N3FSxgv/sLHVZMNHARPoC3MV84jOLO4=
Subject key identifier:   F8:56:00:B6:96:2D:29:86:C1:71:4D:76:88:B8:C4:84:2F:B0:14:A0
Certificate issuer:       /CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
Certificate serial:       5060ABABA58836FEF5CCF1D535B60B43C3B7BEAE
Authority key identifier: FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e37312e302f32342d3234203d3e20323639353732.roa
Signing time:             Mon 24 Jul 2023 17:00:00 +0000
ROA not before:           Mon 24 Jul 2023 16:55:00 +0000
ROA not after:            Mon 22 Jul 2024 17:00:00 +0000
asID:                     269572
IP address blocks:        45.189.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:60:ab:ab:a5:88:36:fe:f5:cc:f1:d5:35:b6:0b:43:c3:b7:be:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
        Validity
            Not Before: Jul 24 16:55:00 2023 GMT
            Not After : Jul 22 17:00:00 2024 GMT
        Subject: CN=3082010A0282010100B5FC7A25D94FCDC611F1CA28A2316B3A7653559834626E05EA81899E2B62F5DB45771589A74EE5A1F198A4D90D9FA89A3946FC9044DC40D28E7C2CB9C57C5EF25CC0F254A4EC60B9311D30458D044A593C3F89B55ACA178662515D1C1D932C304319001EFFBE200BE7D3F0709C520E35B6EFAB63E2FE0A22A4B1B9DA270A87CFB1FB8F1DB13611EBCCEDF4CDCA9A123052D5676703F66A8160AD10BD88568AC2AF0053240AD90EEBF20CDDC6F276B81106F492A05528AC153C53B7C898E3491B6BC208ABBC451B103E7D821FA5C8F518B591D401437B0729147E539AD68CFFB3B4AD60CEB27EA464B8019B1F3853347704BBFE77F4F8A714D91DF8CB0A8E61B30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:7a:25:d9:4f:cd:c6:11:f1:ca:28:a2:31:
                    6b:3a:76:53:55:98:34:62:6e:05:ea:81:89:9e:2b:
                    62:f5:db:45:77:15:89:a7:4e:e5:a1:f1:98:a4:d9:
                    0d:9f:a8:9a:39:46:fc:90:44:dc:40:d2:8e:7c:2c:
                    b9:c5:7c:5e:f2:5c:c0:f2:54:a4:ec:60:b9:31:1d:
                    30:45:8d:04:4a:59:3c:3f:89:b5:5a:ca:17:86:62:
                    51:5d:1c:1d:93:2c:30:43:19:00:1e:ff:be:20:0b:
                    e7:d3:f0:70:9c:52:0e:35:b6:ef:ab:63:e2:fe:0a:
                    22:a4:b1:b9:da:27:0a:87:cf:b1:fb:8f:1d:b1:36:
                    11:eb:cc:ed:f4:cd:ca:9a:12:30:52:d5:67:67:03:
                    f6:6a:81:60:ad:10:bd:88:56:8a:c2:af:00:53:24:
                    0a:d9:0e:eb:f2:0c:dd:c6:f2:76:b8:11:06:f4:92:
                    a0:55:28:ac:15:3c:53:b7:c8:98:e3:49:1b:6b:c2:
                    08:ab:bc:45:1b:10:3e:7d:82:1f:a5:c8:f5:18:b5:
                    91:d4:01:43:7b:07:29:14:7e:53:9a:d6:8c:ff:b3:
                    b4:ad:60:ce:b2:7e:a4:64:b8:01:9b:1f:38:53:34:
                    77:04:bb:fe:77:f4:f8:a7:14:d9:1d:f8:cb:0a:8e:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:00:B6:96:2D:29:86:C1:71:4D:76:88:B8:C4:84:2F:B0:14:A0
            X509v3 Authority Key Identifier:
                keyid:FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e37312e302f32342d3234203d3e20323639353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:00:b7:70:1a:9d:d3:df:b0:61:18:24:56:ce:5d:bc:71:00:
         36:d5:f4:5f:3d:b2:e9:65:cb:1f:83:38:1c:bf:40:85:91:f3:
         cb:b8:a6:6f:9c:f0:c3:6a:c3:2e:2b:ea:9f:23:cc:49:c3:30:
         f5:77:61:00:3a:8a:8b:85:12:11:63:c6:8c:64:ff:10:ed:af:
         8b:d4:02:a6:88:76:4b:20:17:23:fd:2a:d6:fd:6d:6a:dc:55:
         c3:3c:7f:05:bc:74:e0:10:e2:4c:66:ea:a9:73:f5:af:14:ec:
         d7:b8:b0:36:63:35:44:28:4c:bd:94:e3:7a:3b:c9:2c:c6:e2:
         dd:bd:1e:cf:fe:ff:9f:77:52:a7:40:c8:e3:3c:37:67:ae:c5:
         ce:4f:fe:97:47:87:ca:e2:02:55:b9:61:be:f9:d9:bb:03:7d:
         0d:82:cc:94:da:9c:ff:01:2b:04:7a:45:a9:15:79:5a:b8:14:
         c1:5c:39:d3:13:e6:fe:53:b4:8a:e0:c5:f9:63:fa:10:48:4b:
         dc:1f:ce:1c:2b:9b:4b:74:2b:37:88:46:b1:d6:dd:b4:f5:6e:
         78:2d:ef:83:19:e8:17:b0:e0:75:1d:ef:32:59:9f:fd:8c:d0:
         8a:06:24:f6:24:a0:d9:ff:32:24:08:a6:c0:b1:6f:9b:06:58:
         bc:51:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org