Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/34352e3139302e39372e302f32342d3234203d3e20323639363435.roa
File:                     34352e3139302e39372e302f32342d3234203d3e20323639363435.roa (raw, json)
Hash identifier:          kr/0YZGjM+2fSeaUQBWIKFPG+isKFQXCruWzRI8MR24=
Subject key identifier:   1D:E1:8D:16:F4:47:2C:53:6C:C1:F7:18:DF:78:9C:6A:83:84:00:C5
Certificate issuer:       /CN=ED5D66318EFFC37900E14A00DD2D9379FECCFA14
Certificate serial:       3E6BB97B4FDBE6FF8647E9B26E900CAA6E52FB99
Authority key identifier: ED:5D:66:31:8E:FF:C3:79:00:E1:4A:00:DD:2D:93:79:FE:CC:FA:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/34352e3139302e39372e302f32342d3234203d3e20323639363435.roa
Signing time:             Fri 25 Aug 2023 11:42:49 +0000
ROA not before:           Fri 25 Aug 2023 11:37:49 +0000
ROA not after:            Fri 23 Aug 2024 11:42:49 +0000
asID:                     269645
IP address blocks:        45.190.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6b:b9:7b:4f:db:e6:ff:86:47:e9:b2:6e:90:0c:aa:6e:52:fb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5D66318EFFC37900E14A00DD2D9379FECCFA14
        Validity
            Not Before: Aug 25 11:37:49 2023 GMT
            Not After : Aug 23 11:42:49 2024 GMT
        Subject: CN=1DE18D16F4472C536CC1F718DF789C6A838400C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:38:3a:10:16:58:8b:49:06:36:ba:f9:9c:fa:
                    55:dd:e9:de:a5:a2:3a:e0:6d:db:21:4f:58:e2:64:
                    98:cb:17:9f:be:cb:19:a0:77:b0:06:96:d9:17:98:
                    11:c7:05:50:70:2f:d6:6d:3e:8f:e0:d1:7f:96:4f:
                    83:f3:89:36:32:b5:9e:58:b4:95:50:b7:2d:05:b8:
                    4c:7d:8e:87:9e:92:f7:ba:c7:f2:c3:05:39:e1:b6:
                    22:40:97:53:1a:f6:09:e1:db:43:b5:47:7d:33:18:
                    1e:aa:bb:fa:bf:d8:cd:3a:e6:f6:a3:62:1a:0c:62:
                    05:66:85:39:b6:4e:dc:fa:eb:69:63:ae:43:5c:59:
                    27:11:77:a1:01:7a:5b:46:47:19:5b:2d:22:5b:27:
                    cc:0a:8c:31:82:9c:f5:a8:82:d0:10:3d:f0:29:0d:
                    d6:43:99:87:24:c7:a6:d7:52:4c:49:86:e2:2b:20:
                    a5:05:2a:54:da:51:04:d2:d8:77:2d:bc:84:89:72:
                    de:f7:30:e5:42:d2:45:cc:12:68:93:71:c6:7a:be:
                    c3:bb:4b:1f:94:1c:9a:04:6e:5d:c3:bb:51:90:c1:
                    5f:00:75:d3:f7:e5:27:7c:13:7b:70:c3:fc:f1:c3:
                    9b:fd:51:82:e6:9d:b7:ac:6c:71:45:d5:6f:fe:22:
                    16:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E1:8D:16:F4:47:2C:53:6C:C1:F7:18:DF:78:9C:6A:83:84:00:C5
            X509v3 Authority Key Identifier:
                keyid:ED:5D:66:31:8E:FF:C3:79:00:E1:4A:00:DD:2D:93:79:FE:CC:FA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/34352e3139302e39372e302f32342d3234203d3e20323639363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c5:a0:55:5e:8a:07:a7:d8:21:94:79:56:bd:af:85:75:cd:
         a7:9f:34:89:7a:e1:17:cb:3d:6d:8b:d7:d2:eb:e7:d7:fc:72:
         4a:da:0a:8a:7c:49:89:c2:fb:80:4b:89:be:f3:f9:e6:70:05:
         fb:3d:c1:e5:d0:9f:21:c4:cb:ba:8a:b2:a6:f9:8a:61:c1:7d:
         ba:27:84:74:70:f5:11:a0:03:f1:04:0d:5c:1a:16:d1:f0:be:
         86:39:cf:d4:38:1f:6a:8f:82:14:e6:c9:19:a5:2c:38:3f:6e:
         ac:e3:cd:a5:6a:96:24:f2:9c:ef:a2:ed:11:7d:73:6e:fd:31:
         01:38:8d:1d:20:12:06:1b:25:b9:d3:6c:65:39:77:ac:40:e2:
         48:8f:e1:29:ef:db:c5:6e:cb:b0:39:23:4a:ef:62:39:30:79:
         e5:50:9d:50:ab:c5:d7:d9:e8:f2:e2:91:31:a0:1c:bf:81:b2:
         ae:f1:e1:0d:09:c2:21:7f:47:18:9f:f8:8e:0b:32:88:75:09:
         ab:b6:06:53:7c:4c:9e:f6:9c:3d:36:de:d9:52:dc:d8:62:1c:
         90:01:01:f4:f3:bc:a1:0f:6f:38:bf:96:f5:56:36:ae:1c:40:
         0d:bf:91:88:74:b8:48:4d:f3:77:c2:62:1d:98:b8:a0:7b:2b:
         f4:9f:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org