Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/34352e3139302e39392e302f32342d3234203d3e20323639363435.roa
File:                     34352e3139302e39392e302f32342d3234203d3e20323639363435.roa (raw, json)
Hash identifier:          TF98oOrD9b1tGd0SzqgHEMwDjtu7K1vBDxxqlPVdMw0=
Subject key identifier:   15:99:8A:2D:AB:95:E6:8B:E8:A4:B7:63:DA:07:A4:20:EB:D0:A8:60
Certificate issuer:       /CN=ED5D66318EFFC37900E14A00DD2D9379FECCFA14
Certificate serial:       1F29BCB9E15F143C32D1D71E419732E2D50365DE
Authority key identifier: ED:5D:66:31:8E:FF:C3:79:00:E1:4A:00:DD:2D:93:79:FE:CC:FA:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/34352e3139302e39392e302f32342d3234203d3e20323639363435.roa
Signing time:             Fri 25 Aug 2023 11:42:48 +0000
ROA not before:           Fri 25 Aug 2023 11:37:48 +0000
ROA not after:            Fri 23 Aug 2024 11:42:48 +0000
asID:                     269645
IP address blocks:        45.190.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:29:bc:b9:e1:5f:14:3c:32:d1:d7:1e:41:97:32:e2:d5:03:65:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5D66318EFFC37900E14A00DD2D9379FECCFA14
        Validity
            Not Before: Aug 25 11:37:48 2023 GMT
            Not After : Aug 23 11:42:48 2024 GMT
        Subject: CN=15998A2DAB95E68BE8A4B763DA07A420EBD0A860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:a2:e8:cd:2e:f6:9a:8f:25:46:6d:53:6f:
                    d1:9d:29:55:20:39:b0:c1:96:07:fd:e1:b6:27:82:
                    ae:a0:48:e7:c1:e5:e3:ba:10:3e:c7:a6:27:ad:f9:
                    6a:d1:0f:3f:61:8e:d9:ab:d6:61:ab:7d:f9:c3:1a:
                    e0:cb:b3:9e:5c:7e:c0:07:74:06:bd:e0:a6:19:66:
                    75:ce:a6:51:7f:d9:31:48:c6:80:fc:37:1e:74:c0:
                    4d:6f:77:09:78:89:43:bb:b4:15:83:47:75:f9:0e:
                    29:35:8b:c1:77:ee:de:1e:37:4d:fc:fa:eb:50:12:
                    b7:54:a2:c9:e3:07:34:fa:9c:68:e8:61:26:b4:ef:
                    7f:dd:51:70:bd:a7:1b:58:e3:cf:3a:8e:88:dc:f7:
                    2a:b3:15:d2:e0:89:5f:b7:c4:56:a8:7f:2c:67:b3:
                    b7:32:89:15:9e:4c:b2:14:57:30:15:eb:f4:3f:56:
                    79:06:55:45:d5:a3:04:5e:61:49:8f:43:d7:8e:65:
                    53:64:52:c4:80:1f:36:3b:f3:ad:91:f9:ac:8a:a0:
                    bc:9f:d4:ce:57:7f:98:25:9a:79:52:72:69:19:95:
                    a8:74:08:32:36:ae:3d:5c:a4:f2:ba:a7:d3:2d:bf:
                    98:23:5b:23:7a:14:cc:c8:9a:fb:37:77:f6:29:c6:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:99:8A:2D:AB:95:E6:8B:E8:A4:B7:63:DA:07:A4:20:EB:D0:A8:60
            X509v3 Authority Key Identifier:
                keyid:ED:5D:66:31:8E:FF:C3:79:00:E1:4A:00:DD:2D:93:79:FE:CC:FA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/34352e3139302e39392e302f32342d3234203d3e20323639363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:57:b3:1a:ac:74:6e:95:af:8b:83:e0:56:bc:bd:7c:59:
         e3:27:d6:68:ae:5e:46:1f:1c:3f:0e:ae:38:ae:3c:aa:66:d9:
         60:c5:cf:d4:21:79:36:68:ba:c7:86:70:56:d5:4e:c2:cd:cc:
         4a:c8:f9:54:71:06:d8:57:2d:d0:5f:15:9c:77:62:be:5d:5e:
         a8:f2:83:65:9e:30:35:ab:58:00:fb:9d:66:72:66:67:ac:b5:
         b0:cf:5f:6d:ce:23:bd:0a:4f:5d:e1:0d:79:a3:63:54:54:3b:
         b0:0e:ec:a3:6b:f6:50:92:0e:75:7c:ea:e0:61:c3:34:1a:4a:
         a3:71:c1:ff:0c:6b:b1:18:af:13:65:ad:53:df:3b:e4:7d:87:
         b1:b5:9a:81:6a:e1:51:c9:1e:c6:80:cf:c1:b8:d1:52:dd:7c:
         51:a1:8d:d7:31:8f:dd:9a:22:aa:f1:39:ad:9c:7f:8f:5d:6e:
         96:1a:d1:6c:86:d4:76:e3:72:e8:0c:d9:01:9b:e9:3b:92:4c:
         ba:b4:c7:f3:d2:a7:6d:b2:77:4d:46:49:ce:ec:94:d0:0e:e8:
         90:f7:f0:30:34:c0:7c:12:4a:63:1b:71:7a:6b:ac:f8:01:2f:
         e4:e0:a2:3d:22:f7:54:d4:3d:46:0e:71:67:1d:c5:4f:16:98:
         7c:0a:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org