Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131322e302f32322d3232203d3e20323638323334.roa
File:                     34352e3233362e3131322e302f32322d3232203d3e20323638323334.roa (raw, json)
Hash identifier:          FMxmIGShFV/TkeVhY7B3ik0KTRQgRhEPYE8Nj8A3buk=
Subject key identifier:   CC:57:2B:C2:12:0B:C5:AA:AB:7A:BF:92:28:15:A1:85:AA:E0:78:B0
Certificate issuer:       /CN=8E2C587E03D77A09E0236848BE4C5CBC4D782D33
Certificate serial:       7DD871F79BCDFED8D6479A30C6A98C17BB11D77A
Authority key identifier: 8E:2C:58:7E:03:D7:7A:09:E0:23:68:48:BE:4C:5C:BC:4D:78:2D:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131322e302f32322d3232203d3e20323638323334.roa
Signing time:             Wed 13 Jul 2022 01:52:32 +0000
ROA not before:           Wed 13 Jul 2022 01:47:32 +0000
ROA not after:            Wed 12 Jul 2023 01:52:32 +0000
asID:                     268234
IP address blocks:        45.236.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d8:71:f7:9b:cd:fe:d8:d6:47:9a:30:c6:a9:8c:17:bb:11:d7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E2C587E03D77A09E0236848BE4C5CBC4D782D33
        Validity
            Not Before: Jul 13 01:47:32 2022 GMT
            Not After : Jul 12 01:52:32 2023 GMT
        Subject: CN=CC572BC2120BC5AAAB7ABF922815A185AAE078B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:96:60:ba:f0:69:14:c9:b9:43:18:3f:ab:
                    a8:82:c5:61:32:a0:30:5f:44:eb:ac:0f:f8:52:2a:
                    65:36:3b:1f:b7:4b:e7:5b:f4:7e:91:18:da:10:ef:
                    f2:88:0f:6f:51:17:96:a9:a3:31:8c:b3:61:b7:ea:
                    8d:9b:41:93:ee:4f:4f:1d:98:6f:41:5b:04:fb:22:
                    c8:02:67:a6:c6:9d:03:8a:b4:48:3c:7f:fb:3c:80:
                    e2:e0:67:0b:c8:db:95:f5:46:44:3b:6b:d7:d0:39:
                    86:9a:42:a9:17:26:40:8c:8a:51:e0:11:bf:9c:21:
                    ae:ba:66:44:f1:46:bc:af:83:ef:ad:83:80:ff:e8:
                    21:08:47:02:2a:c0:5d:6b:58:99:d9:4a:7a:20:58:
                    a8:c0:e5:d9:47:87:93:7b:9b:67:6e:19:da:93:a5:
                    53:9f:77:ec:df:a0:42:f5:0a:ce:7a:d7:cd:62:0e:
                    39:56:e1:f1:b7:5e:77:c4:7b:cb:e0:dc:6e:09:8d:
                    bd:ef:02:43:72:c3:65:4f:f9:f6:30:06:e3:e5:c8:
                    a5:c4:69:93:b3:45:39:38:3e:e4:73:f4:b2:48:48:
                    33:ad:e2:6c:6f:8d:e9:74:2f:45:8f:eb:a9:22:02:
                    c3:0d:49:e3:65:89:5a:41:eb:3e:27:4a:6b:c2:06:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:57:2B:C2:12:0B:C5:AA:AB:7A:BF:92:28:15:A1:85:AA:E0:78:B0
            X509v3 Authority Key Identifier:
                keyid:8E:2C:58:7E:03:D7:7A:09:E0:23:68:48:BE:4C:5C:BC:4D:78:2D:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131322e302f32322d3232203d3e20323638323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:94:2f:6c:e4:cb:45:ed:83:1d:60:3b:d0:93:37:01:a2:e5:
         74:d8:b6:99:26:ac:8d:42:db:cc:67:e6:a0:44:17:02:d1:e7:
         9b:a4:7a:76:3e:ad:2a:5c:f5:84:cc:09:b7:fd:43:9d:60:7f:
         62:da:74:15:73:90:51:95:4f:ca:86:9d:f8:ec:40:ad:e6:04:
         40:78:d2:9d:9d:be:b9:6c:49:c2:98:8c:62:28:d1:27:f0:fa:
         78:f1:1a:b9:f6:7a:c7:f9:13:10:f4:54:f4:dc:51:7a:9f:1e:
         56:43:7e:e6:a4:c1:7a:20:15:ff:ec:d5:1a:49:1c:60:a3:d0:
         35:ec:c2:22:36:87:97:e1:7c:ba:2e:52:34:1c:0b:87:f6:ab:
         2b:3e:54:f5:45:81:67:8f:cf:c5:19:cb:c0:bc:75:61:79:b3:
         a7:ac:59:93:e6:2c:b3:fa:6e:40:96:93:49:e5:ea:8f:e5:50:
         a1:46:c2:1e:91:cb:54:ac:95:9d:0a:96:4d:28:95:7d:26:2e:
         2a:62:44:76:6c:c4:1a:95:ba:b2:e7:f3:09:2a:6f:20:29:1a:
         b3:b3:f8:fb:a3:f1:8e:c8:1f:3f:1d:f8:18:08:c0:63:14:de:
         0c:dd:78:c8:42:31:35:b5:6a:32:26:d9:2b:f0:80:c0:a7:4e:
         04:26:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org