Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130322e302f32332d3233203d3e20323638353935.roa
File:                     34352e3136332e3130322e302f32332d3233203d3e20323638353935.roa (raw, json)
Hash identifier:          XToEpNmNCZdpBFXXF0w2uicn/8D3jJhDNjznGOuJQjM=
Subject key identifier:   99:66:8B:38:2B:A4:26:FD:C5:93:55:59:58:54:D8:17:AF:DC:C6:C6
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       424629956F18E02C6A700BC208B9064F7D9418F3
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130322e302f32332d3233203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:37:33 +0000
ROA not before:           Mon 22 Aug 2022 21:32:33 +0000
ROA not after:            Mon 21 Aug 2023 21:37:33 +0000
asID:                     268595
IP address blocks:        45.163.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:46:29:95:6f:18:e0:2c:6a:70:0b:c2:08:b9:06:4f:7d:94:18:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:32:33 2022 GMT
            Not After : Aug 21 21:37:33 2023 GMT
        Subject: CN=99668B382BA426FDC59355595854D817AFDCC6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:e3:ae:5b:dc:03:65:29:c9:12:de:97:a5:
                    22:af:8d:9b:83:eb:93:10:2e:c5:43:9c:b7:60:32:
                    5a:24:90:4c:a3:fe:f4:56:cd:48:f0:76:63:ed:55:
                    09:04:e3:8f:e9:b6:e9:59:a1:4d:5f:f3:a5:c3:3f:
                    50:b2:92:24:34:d4:13:00:9e:76:12:59:10:75:58:
                    a4:f7:db:08:f9:ec:1e:3c:62:93:27:28:88:ca:71:
                    1e:b8:50:4b:c7:78:d8:5b:46:44:9f:44:59:13:3a:
                    9c:10:43:e9:ae:64:df:5c:23:c1:f4:d8:20:af:76:
                    95:6f:75:14:1b:8b:d3:72:c4:9d:b7:39:74:58:6e:
                    03:4a:92:f4:56:bc:f4:95:8e:09:9b:4a:95:ff:f9:
                    4a:6c:d6:de:82:24:f4:91:6f:df:1c:15:77:ea:f7:
                    93:32:fc:68:3c:df:5c:9e:e7:17:72:d9:24:c9:cb:
                    a3:49:78:d8:33:b1:a6:78:a3:fc:25:ec:4d:d2:bf:
                    4d:da:ec:c3:d8:48:ad:39:82:6d:15:d9:a6:21:b3:
                    3a:dd:ca:58:72:e4:74:67:6b:7c:5c:0a:38:60:37:
                    84:4a:08:78:4a:5e:3c:40:33:b0:6b:e7:e7:3e:ab:
                    f8:61:cd:2d:09:5a:2d:8f:9a:fa:16:01:75:df:51:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:66:8B:38:2B:A4:26:FD:C5:93:55:59:58:54:D8:17:AF:DC:C6:C6
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130322e302f32332d3233203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:74:fc:0e:75:fd:a4:cd:a5:75:46:9d:5c:ec:f8:94:8a:
         6c:8b:32:94:7e:b7:7d:8e:dd:76:13:7a:71:84:a9:11:9a:2a:
         fe:e9:8d:ce:bb:d8:99:3a:9d:85:ad:fc:77:fb:fd:c6:41:6c:
         d4:75:ea:cc:e6:81:ed:da:5d:80:9e:2d:15:f7:2c:dc:f4:2a:
         77:7c:2c:91:90:93:b9:8d:ab:1d:31:8c:55:8a:ff:9f:aa:40:
         41:50:54:31:6a:db:b8:ba:77:e8:65:29:c9:a1:d6:4d:37:03:
         05:7e:fc:0c:e9:59:3e:67:5d:41:09:61:69:d6:ec:f5:b0:36:
         ee:74:23:31:03:60:ea:ec:0c:db:e4:f0:f2:64:a8:a7:33:82:
         bf:15:cf:28:f1:29:c0:a9:34:7f:f3:b7:be:75:fd:7d:d6:2e:
         23:66:f4:ae:ab:e1:b2:71:34:d6:6d:4d:ca:51:ad:9a:62:c1:
         81:4d:0e:dd:2a:b7:52:dd:e1:9c:39:19:c2:10:b5:bf:e2:fe:
         c4:18:a1:22:9e:ba:e8:17:70:9f:6c:bf:35:93:2a:8f:bb:0e:
         f3:5a:c7:c0:b0:d0:1f:0d:1a:c3:3f:fc:e0:ab:bb:1f:cd:c5:
         75:73:0a:57:7a:8d:19:bd:d8:02:49:c1:a5:4f:87:80:60:57:
         a2:52:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org