Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130312e302f32342d3234203d3e20323638353935.roa
File:                     34352e3136332e3130312e302f32342d3234203d3e20323638353935.roa (raw, json)
Hash identifier:          p9EiG4bZUVi7WCZC6qlzX4rng5H4godlhsLqzAVj/zQ=
Subject key identifier:   AA:61:C8:D0:D5:B0:7C:EC:15:D7:7F:1E:E6:74:ED:E7:B4:5D:0F:68
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       491058EFA5A88DB88A5424C4364E356F84FA1F23
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130312e302f32342d3234203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:37:30 +0000
ROA not before:           Mon 22 Aug 2022 21:32:30 +0000
ROA not after:            Mon 21 Aug 2023 21:37:30 +0000
asID:                     268595
IP address blocks:        45.163.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:10:58:ef:a5:a8:8d:b8:8a:54:24:c4:36:4e:35:6f:84:fa:1f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:32:30 2022 GMT
            Not After : Aug 21 21:37:30 2023 GMT
        Subject: CN=AA61C8D0D5B07CEC15D77F1EE674EDE7B45D0F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5c:33:0d:54:4a:07:7d:d9:fd:4b:ec:fb:1b:
                    bd:79:7d:f9:d7:ae:5e:9c:7a:69:ad:14:24:54:4d:
                    c4:f2:fd:62:7d:bb:75:b6:10:ac:41:67:fb:d4:58:
                    9b:9b:03:68:ea:1a:b1:0c:a4:e4:0b:b1:4a:e7:5c:
                    65:36:a4:b4:ab:07:8c:36:96:62:2d:2d:45:bb:4d:
                    39:1a:77:f9:fd:43:63:37:bc:bc:0d:4b:f5:4c:68:
                    7a:33:12:0f:a2:2d:58:7c:c2:a3:60:2d:6a:cc:e4:
                    9c:b8:56:a4:c8:7d:20:e7:20:78:46:97:8e:fb:26:
                    c8:5f:34:1e:81:b0:88:9b:a2:ea:29:54:d4:fb:28:
                    13:b5:14:60:4f:60:04:59:94:a1:0a:f7:38:5e:aa:
                    2d:85:f2:0b:6d:61:b9:0e:2d:ea:21:45:e1:53:dd:
                    9e:5f:b5:a6:81:9f:a6:be:a6:73:38:6e:71:f9:19:
                    a2:6e:7b:f0:83:a3:ac:a5:f2:c3:a7:20:56:d8:74:
                    76:d3:ad:59:f5:63:b8:e8:bf:dd:5d:5a:20:d8:78:
                    9a:d8:ab:03:e2:86:48:ca:c5:af:56:57:76:e3:84:
                    72:c9:b7:ba:be:57:c6:13:d1:d1:2d:f8:05:f5:0a:
                    b1:ab:69:04:b6:c4:24:b9:2c:d5:52:35:f5:c1:a0:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:61:C8:D0:D5:B0:7C:EC:15:D7:7F:1E:E6:74:ED:E7:B4:5D:0F:68
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130312e302f32342d3234203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:25:c5:bf:fa:78:26:d9:46:24:f0:fb:93:b3:69:c7:9b:65:
         b9:ce:83:3f:1d:64:87:08:bc:c7:1a:36:e8:4b:5c:b0:33:a6:
         33:e7:da:4a:16:9d:b4:4e:eb:ac:6f:df:b9:04:87:10:c2:82:
         3b:bd:c6:4f:58:7d:d3:94:a1:e3:82:11:16:22:10:a5:d8:84:
         cf:79:4e:ac:57:f4:e1:06:b3:80:2c:20:6c:f2:4c:03:0f:35:
         44:80:5d:20:2f:8a:88:54:cb:56:e4:ff:3d:f3:d1:65:1c:82:
         ce:a9:77:20:45:96:8b:d5:aa:dd:0a:39:1d:d4:5c:f9:5c:c9:
         4d:43:5c:1d:22:76:3b:2b:b6:be:0c:4e:ce:dd:50:e9:e0:da:
         c6:c0:41:29:53:15:4d:df:56:bb:a9:fb:f0:cc:a6:75:68:28:
         9c:81:32:f8:fe:ae:b8:ba:75:60:51:98:10:2c:69:fb:7d:3f:
         d4:a3:c0:b2:73:00:72:bb:0d:56:13:d6:26:d3:35:6e:1f:27:
         db:f4:12:51:57:9d:39:1e:1e:18:64:09:c8:49:1e:5f:76:ae:
         d1:cc:f1:9e:60:b3:2e:39:4c:d4:65:e3:be:37:ce:67:97:52:
         b4:6c:5e:e5:10:50:8a:7e:f0:8d:5d:af:d4:a4:94:44:ef:e1:
         d1:59:d4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org