Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa
File:                     34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa (raw, json)
Hash identifier:          yXdSsW3hx5SfLoS6TJhdBXiQdkIIYsjpYOliZGZ3Rfk=
Subject key identifier:   0D:22:62:06:27:D5:91:05:22:07:7E:54:22:E4:65:0C:D6:E5:9F:00
Certificate issuer:       /CN=3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8
Certificate serial:       15AF4AF21B1E564BD9763854975DA50B08FCAF51
Authority key identifier: 3A:D5:52:9C:A1:BE:DB:06:41:BC:71:82:E9:7E:66:4E:AF:EC:22:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa
Signing time:             Mon 06 Nov 2023 13:46:09 +0000
ROA not before:           Mon 06 Nov 2023 13:41:09 +0000
ROA not after:            Mon 04 Nov 2024 13:46:09 +0000
asID:                     268108
IP address blocks:        45.169.124.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:af:4a:f2:1b:1e:56:4b:d9:76:38:54:97:5d:a5:0b:08:fc:af:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8
        Validity
            Not Before: Nov  6 13:41:09 2023 GMT
            Not After : Nov  4 13:46:09 2024 GMT
        Subject: CN=0D22620627D5910522077E5422E4650CD6E59F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:56:86:82:ad:2d:d3:ea:67:c3:34:de:3c:
                    de:57:9d:97:50:ab:2b:a0:d1:34:ed:58:b8:6e:0c:
                    43:87:74:da:88:62:44:f2:09:e2:c3:5e:08:59:d1:
                    e9:7d:00:3b:b4:e5:ba:62:2a:66:b6:10:13:e7:b5:
                    65:4f:47:d3:fe:60:08:cc:04:c9:f0:99:5c:69:f8:
                    b5:bb:ac:0b:06:d9:f7:ff:24:50:24:f1:8c:f6:98:
                    3f:28:98:2f:b6:a2:e8:ad:bd:55:69:e4:fe:40:ca:
                    b0:83:d8:6b:92:a8:99:93:63:84:f6:40:c9:82:c6:
                    41:f6:9f:0b:f2:ff:3a:91:7e:59:6f:18:13:27:5c:
                    11:35:67:b0:fa:04:da:b2:5e:d4:8c:ae:8c:5c:08:
                    c4:8f:e1:bd:f7:7f:ea:84:df:b7:ad:6b:22:5e:15:
                    34:bf:8c:6f:2b:06:ed:65:f1:80:89:35:9f:bb:e4:
                    d1:a6:cf:e4:80:ab:73:4f:e5:13:42:44:f5:36:d0:
                    51:cb:47:7b:b1:44:3b:0c:11:e2:e3:56:3b:71:59:
                    18:24:81:70:fb:d3:8c:63:92:03:fa:47:c4:0b:b9:
                    93:42:bb:56:39:64:23:37:f2:00:1d:65:c0:7d:00:
                    d6:fb:b5:c8:86:32:0d:91:a7:be:c4:48:4e:e7:86:
                    4f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:22:62:06:27:D5:91:05:22:07:7E:54:22:E4:65:0C:D6:E5:9F:00
            X509v3 Authority Key Identifier:
                keyid:3A:D5:52:9C:A1:BE:DB:06:41:BC:71:82:E9:7E:66:4E:AF:EC:22:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:6d:c8:0d:7f:fd:49:d5:67:2f:77:76:96:0e:a4:34:97:
         7c:97:1b:a5:ad:35:87:b5:6a:a9:94:40:4f:13:14:23:c3:55:
         e4:32:68:7a:47:37:49:aa:ad:c6:a6:8d:43:33:99:b8:39:0e:
         d1:9c:fc:c3:54:5b:b3:0e:3f:30:b2:2d:ae:ee:d8:08:d7:82:
         c1:db:be:9e:08:d2:5c:71:85:3f:67:3c:47:07:65:3c:a6:a4:
         84:c7:3b:a1:81:58:60:73:82:35:af:6b:29:83:10:e7:28:89:
         61:70:f1:bd:7a:ee:aa:f3:09:30:16:4c:77:ce:af:3e:b7:e5:
         27:a6:34:d8:9e:11:f4:da:3e:2f:57:15:16:04:86:80:e5:c2:
         0d:b2:53:2a:66:02:8c:0e:24:42:74:e9:c2:cf:21:b7:b4:bb:
         02:f4:57:a4:89:60:26:2d:a1:70:e0:b3:b6:f3:e6:3a:81:84:
         a6:a4:16:57:1e:a6:0b:17:01:94:ee:c3:e2:b9:50:72:ea:89:
         fe:da:19:b5:4c:df:d2:b0:55:4b:28:4e:0c:15:ab:34:04:97:
         07:91:7d:85:35:53:d6:db:53:45:7c:e4:89:f7:ba:5e:78:61:
         32:a8:43:05:f9:e5:bd:0b:70:c5:02:39:8e:5a:45:6c:f8:51:
         e5:8a:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org