Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130322e302f32342d3234203d3e20323638353935.roa
File:                     34352e3136332e3130322e302f32342d3234203d3e20323638353935.roa (raw, json)
Hash identifier:          6ZUZxioGULFSd7/E1Jh/bSBcXvXYT6561PM7f/24360=
Subject key identifier:   36:70:D9:3F:E5:C2:6C:BA:BB:2A:A7:F8:BF:C4:AE:92:A2:1B:86:DE
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       2BF3458E82DC42ABB696FA59364E211E7C483B70
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130322e302f32342d3234203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:37:35 +0000
ROA not before:           Mon 22 Aug 2022 21:32:35 +0000
ROA not after:            Mon 21 Aug 2023 21:37:35 +0000
asID:                     268595
IP address blocks:        45.163.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f3:45:8e:82:dc:42:ab:b6:96:fa:59:36:4e:21:1e:7c:48:3b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:32:35 2022 GMT
            Not After : Aug 21 21:37:35 2023 GMT
        Subject: CN=3670D93FE5C26CBABB2AA7F8BFC4AE92A21B86DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:f4:f2:4a:86:a5:ab:04:31:cb:c7:52:1c:
                    6d:0c:8e:af:53:3d:a0:34:9c:ce:72:80:a6:86:94:
                    4f:39:78:11:0e:9d:71:a4:ff:e2:f8:ad:b0:fb:30:
                    1d:06:d1:69:26:9d:14:d6:de:59:51:e4:07:8a:20:
                    ff:e1:0e:4e:ce:09:b4:3e:f7:74:7d:a2:dd:c2:6f:
                    24:a5:21:12:49:e3:12:7a:27:b0:98:c3:26:f0:5f:
                    5d:57:22:f7:a5:bf:f5:3b:a4:79:ed:ac:73:68:d5:
                    36:2c:f9:da:7c:30:aa:4e:c6:13:3e:53:21:c6:44:
                    5a:47:c2:64:73:21:b8:77:0d:46:ef:3f:f0:d1:4a:
                    9e:9b:66:0c:ef:c7:53:2e:c0:ad:dc:4b:37:e3:17:
                    2f:10:38:c3:63:74:3f:ef:b1:b1:30:7e:24:bb:92:
                    0b:0d:1a:1d:0c:bc:04:6f:df:76:47:d8:f8:54:d8:
                    5a:4b:14:56:07:d4:80:ab:28:fc:d7:18:85:59:f6:
                    2a:6e:d4:75:1d:d7:d2:e0:42:62:bc:df:39:3e:9a:
                    97:0a:ad:02:0b:ed:a9:82:47:87:37:6d:e8:b1:6e:
                    ac:08:b7:0c:c3:38:46:63:d6:af:78:6b:75:90:c2:
                    aa:62:03:26:42:d0:e8:94:ea:26:ff:af:8e:53:71:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:D9:3F:E5:C2:6C:BA:BB:2A:A7:F8:BF:C4:AE:92:A2:1B:86:DE
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130322e302f32342d3234203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:c6:a8:6a:01:70:19:c6:62:4b:bd:2c:40:a8:a4:e2:a0:
         41:6d:7a:a6:83:fc:4b:9f:c4:a4:50:c8:5a:18:34:d8:99:3b:
         c4:00:6c:7b:f1:46:1b:a6:48:cb:8c:8b:5b:39:0a:2b:d4:bf:
         bd:6c:5b:14:51:7a:0b:78:70:42:ca:fc:e3:d9:87:9b:39:b2:
         fa:c8:18:17:54:e4:28:70:47:d9:ae:83:16:30:53:57:6f:49:
         76:67:d9:ca:97:f2:0f:15:35:b4:d2:4f:ca:04:e1:56:e2:37:
         16:49:05:aa:fd:0e:74:1e:56:5e:e9:1b:9d:18:f1:54:27:dd:
         05:7e:80:3f:d1:e4:2f:76:c0:b5:ce:16:8b:38:be:5d:84:0a:
         ce:2d:c7:12:cd:81:ed:8d:c6:0b:99:92:44:75:60:50:c5:df:
         32:1c:07:92:ee:71:bf:b3:5f:a9:bb:ec:72:1d:d6:58:e3:d1:
         6b:27:cb:a6:24:07:fc:30:18:21:36:99:6f:87:10:32:ee:fb:
         c4:e5:fd:e2:21:52:4f:88:20:51:ca:e1:f2:0c:39:e4:c5:7a:
         c4:41:47:83:19:c9:de:51:03:c4:ea:e4:7f:e3:97:1d:c3:90:
         bd:c2:d4:14:c7:ac:c8:5e:2d:97:bb:ce:2a:ed:d0:58:4f:b4:
         e0:38:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org