Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa
File:                     34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (raw, json)
Hash identifier:          1tLUHBYF4XzVjc0Qs12Yamu7PQSJTqZAN6V3NPWg0nM=
Subject key identifier:   2B:6C:C4:D5:93:56:A7:36:9E:B5:32:DB:5F:BC:DC:9B:2B:ED:9F:BF
Certificate issuer:       /CN=1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1
Certificate serial:       5DA08E3DF98DF8457E2709F0B79335254362A0BA
Authority key identifier: 14:74:B1:FB:59:CC:BD:EC:AE:0E:CB:3C:A7:D2:C9:DC:35:48:52:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa
Signing time:             Tue 19 Mar 2024 14:39:44 +0000
ROA not before:           Tue 19 Mar 2024 14:34:44 +0000
ROA not after:            Tue 18 Mar 2025 14:39:44 +0000
asID:                     268016
IP address blocks:        45.167.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a0:8e:3d:f9:8d:f8:45:7e:27:09:f0:b7:93:35:25:43:62:a0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1
        Validity
            Not Before: Mar 19 14:34:44 2024 GMT
            Not After : Mar 18 14:39:44 2025 GMT
        Subject: CN=2B6CC4D59356A7369EB532DB5FBCDC9B2BED9FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:8f:2f:57:e1:53:50:f6:bb:78:be:76:f3:
                    66:a9:62:f7:3d:a9:6c:16:97:28:3a:21:33:3f:48:
                    84:9f:1a:78:e7:27:fc:0a:b5:08:5d:55:34:41:a0:
                    35:e0:02:a3:cd:fd:a6:56:10:e1:ef:d9:f5:ae:2f:
                    46:4f:75:9d:cc:10:eb:18:0e:c4:6c:51:e2:f7:4a:
                    57:b2:b5:b2:71:c4:96:45:cf:42:c8:f4:b9:25:2b:
                    5c:d0:95:9f:42:d5:7f:83:e6:17:3d:ff:2c:26:10:
                    38:16:e7:86:39:91:54:1a:a8:43:f1:53:ce:6a:e2:
                    cc:50:b1:43:2d:20:b2:6b:7d:6a:cc:3c:85:89:3e:
                    c6:c8:50:a2:ee:b2:ea:3b:56:0a:3f:0e:5a:88:6f:
                    97:32:8b:ad:b6:67:5f:ef:73:9d:f6:91:fe:11:d2:
                    98:20:ab:d1:b6:cd:32:bd:fe:11:bc:0b:b1:c2:9b:
                    f9:b4:7b:09:81:f0:6a:b4:b5:95:94:71:63:15:8f:
                    7e:29:b7:c0:df:6c:c5:4c:85:22:75:3a:2f:85:a1:
                    3f:c9:78:65:c7:c9:08:aa:eb:a9:5e:01:0b:09:67:
                    6a:fa:ed:8c:bc:5b:b0:83:31:eb:2b:21:29:94:01:
                    7b:f8:d4:44:ca:85:c2:b9:88:c7:61:ba:81:de:7b:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:C4:D5:93:56:A7:36:9E:B5:32:DB:5F:BC:DC:9B:2B:ED:9F:BF
            X509v3 Authority Key Identifier:
                keyid:14:74:B1:FB:59:CC:BD:EC:AE:0E:CB:3C:A7:D2:C9:DC:35:48:52:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:f4:97:f2:31:03:3b:88:50:9d:41:55:f2:ba:39:56:67:9f:
         56:f7:3e:b1:7b:5b:d2:a5:d0:11:6b:59:bb:70:93:c3:52:55:
         4f:6f:8f:15:1a:f5:66:df:b6:69:f0:ee:d9:88:18:9c:66:d2:
         20:0e:49:87:2e:a1:b5:b1:9e:4a:18:d5:57:91:ad:f0:96:cb:
         4a:27:70:ab:96:6e:cd:1b:53:36:24:c8:6a:aa:4d:7e:18:a5:
         a7:4e:82:df:d1:d1:f0:69:02:3f:d5:90:c8:8a:b7:7d:ca:81:
         b3:45:1b:1d:fa:1e:4a:60:bd:7b:dc:3a:69:8a:d6:b0:3a:14:
         cf:e2:dc:e7:16:45:70:7c:af:cf:b6:38:fd:62:ba:6d:45:63:
         e6:18:88:64:34:98:3a:a3:9c:00:a9:f0:49:76:81:80:66:85:
         a3:22:1e:5a:a0:64:b8:f5:0c:dd:2e:67:3b:7e:8c:eb:6b:ac:
         e8:c6:1e:f7:f2:48:3b:4a:60:5a:53:bf:33:3f:6e:9e:cd:63:
         ef:39:fb:fc:ff:43:b7:3a:fc:d0:b8:51:46:3e:44:e2:4c:b2:
         3c:00:08:c9:e0:4d:e9:74:ba:48:d7:a3:3b:b0:3a:1c:2b:c4:
         33:fb:ac:12:ad:a1:33:91:8c:b6:a3:e4:e6:43:be:47:cb:ec:
         ad:62:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org