Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/34352e3137392e34382e302f32322d3234203d3e20323639303630.roa
File:                     34352e3137392e34382e302f32322d3234203d3e20323639303630.roa (raw, json)
Hash identifier:          MOYyW9VdvFxbouGHgMNnLK+2OpP392nMvDDzmMymWhQ=
Subject key identifier:   36:26:F9:FA:36:8F:89:1F:C0:9C:08:7D:DA:43:93:EB:42:AB:16:0B
Certificate issuer:       /CN=68EBF9E7509F0C8F461084CC21FC968DD29C8FB2
Certificate serial:       6BE6726570CB33F1B729115E225D023C8E1437C1
Authority key identifier: 68:EB:F9:E7:50:9F:0C:8F:46:10:84:CC:21:FC:96:8D:D2:9C:8F:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/34352e3137392e34382e302f32322d3234203d3e20323639303630.roa
Signing time:             Fri 27 Oct 2023 18:01:19 +0000
ROA not before:           Fri 27 Oct 2023 17:56:19 +0000
ROA not after:            Fri 25 Oct 2024 18:01:19 +0000
asID:                     269060
IP address blocks:        45.179.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e6:72:65:70:cb:33:f1:b7:29:11:5e:22:5d:02:3c:8e:14:37:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EBF9E7509F0C8F461084CC21FC968DD29C8FB2
        Validity
            Not Before: Oct 27 17:56:19 2023 GMT
            Not After : Oct 25 18:01:19 2024 GMT
        Subject: CN=3626F9FA368F891FC09C087DDA4393EB42AB160B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:41:62:89:1e:12:92:91:88:96:50:ef:fe:
                    58:7f:f6:79:fe:d2:cf:bd:94:40:75:f7:65:8a:a4:
                    73:be:39:d3:0d:c3:d9:c7:55:2b:c2:4f:d0:6e:e0:
                    ba:ca:69:d4:4f:11:72:03:37:2d:c1:77:bb:70:3b:
                    0b:ff:02:d8:30:ed:23:e8:13:47:b5:b9:9b:47:d3:
                    3c:4c:22:64:63:f8:19:11:ad:41:0b:17:f7:50:d1:
                    bc:35:3f:b2:07:0d:b7:b9:73:64:7d:cd:7e:75:c7:
                    d2:0e:ac:ed:f4:ed:40:3b:4b:c7:b8:5f:fa:b6:27:
                    eb:4f:bb:de:62:16:09:20:0b:2c:17:ec:5c:96:16:
                    04:a0:3c:e7:cc:e9:45:66:61:fc:34:6a:c7:87:d5:
                    b8:c1:a6:66:26:46:fb:b0:ff:5a:7a:b0:64:90:13:
                    d8:c5:8c:4c:96:8b:be:72:82:38:b5:ea:26:fc:e9:
                    ce:1f:1c:f3:87:3e:97:88:43:aa:83:4c:e5:fe:c5:
                    6a:60:03:ee:69:c0:8d:61:81:b3:53:e8:74:0c:3e:
                    2f:e9:d0:d8:a4:a3:15:1f:f7:83:4e:57:a9:4b:1f:
                    5f:52:12:bf:67:43:71:03:e2:05:aa:5c:13:a6:01:
                    c8:53:bb:c3:42:2b:db:34:bc:98:74:4e:ab:f7:99:
                    1e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:26:F9:FA:36:8F:89:1F:C0:9C:08:7D:DA:43:93:EB:42:AB:16:0B
            X509v3 Authority Key Identifier:
                keyid:68:EB:F9:E7:50:9F:0C:8F:46:10:84:CC:21:FC:96:8D:D2:9C:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/34352e3137392e34382e302f32322d3234203d3e20323639303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:ec:40:4a:48:8c:ba:2e:17:e9:e8:41:92:aa:de:9f:7c:bf:
         2f:4b:2d:cf:43:24:9c:6d:e9:69:a4:ab:01:3b:05:6c:e4:01:
         4e:b9:0f:46:85:6d:25:46:de:e7:cf:7b:36:1e:9e:71:a1:46:
         12:d8:00:82:ce:46:95:ba:21:fa:9a:aa:4e:cd:6e:f0:84:e0:
         f3:c0:c9:50:f5:ec:d2:8f:e3:c1:94:f9:e4:26:55:52:28:07:
         9a:5c:df:56:a8:06:48:56:e9:e8:4a:90:d6:86:7b:07:2b:86:
         44:2c:6b:5c:81:3f:cb:59:d0:6b:48:94:f6:b8:a5:57:1a:ff:
         68:88:39:5e:43:53:00:6e:ba:ad:2c:b2:ea:12:0e:c4:4e:d6:
         17:17:b6:1e:62:b7:d9:18:07:ba:a5:db:5b:bc:4e:ef:4f:c4:
         09:56:9b:47:a6:d0:19:c4:2c:27:28:1f:2e:d2:14:45:91:d2:
         80:0e:2e:2b:94:79:0f:6b:de:ec:50:b1:53:06:3d:3e:77:f4:
         7a:42:52:33:6f:88:5f:0c:66:01:ba:28:66:6c:8d:b7:47:74:
         42:c0:3b:ef:b7:4b:db:95:03:29:9f:25:fe:27:c4:8f:aa:ab:
         d7:92:9a:30:0b:e9:09:a8:71:ad:d2:ee:85:8c:c9:da:69:77:
         b0:4f:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org