Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3232203d3e20323638303237.roa
File:                     34352e3136382e33362e302f32322d3232203d3e20323638303237.roa (raw, json)
Hash identifier:          ZOQkZstpYyzrNVTp+uq/8bN96tv3RivzLeSd6b3GNKE=
Subject key identifier:   2C:87:4E:22:DD:C8:2D:84:66:FA:33:BE:AC:04:E1:5B:AF:EF:96:24
Certificate issuer:       /CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
Certificate serial:       25F8CFAC4A85C6DBA66A576EDA7BC3C3201D49C1
Authority key identifier: AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3232203d3e20323638303237.roa
Signing time:             Tue 18 Apr 2023 12:32:26 +0000
ROA not before:           Tue 18 Apr 2023 12:27:26 +0000
ROA not after:            Tue 16 Apr 2024 12:32:26 +0000
asID:                     268027
IP address blocks:        45.168.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f8:cf:ac:4a:85:c6:db:a6:6a:57:6e:da:7b:c3:c3:20:1d:49:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
        Validity
            Not Before: Apr 18 12:27:26 2023 GMT
            Not After : Apr 16 12:32:26 2024 GMT
        Subject: CN=2C874E22DDC82D8466FA33BEAC04E15BAFEF9624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:7b:c0:35:18:2c:15:78:45:c1:37:ab:89:
                    be:4a:d9:43:92:53:86:a6:8a:16:22:98:ad:07:e7:
                    e1:f8:20:7a:15:d7:c8:df:07:67:ef:fd:31:aa:1d:
                    51:c1:2c:92:cf:6f:79:0f:22:f2:9c:d5:e5:0d:47:
                    d5:c9:4a:f2:ad:f1:97:86:b5:20:c3:53:41:a5:f2:
                    f3:99:b1:ae:28:9d:14:4f:ea:39:25:b9:0c:ff:f8:
                    6e:71:4a:82:44:db:78:a2:7d:b4:44:82:67:ca:b5:
                    c7:d3:05:87:cf:77:a0:1a:9d:0c:19:8a:f7:22:d1:
                    4b:ee:7e:da:8e:fc:27:e7:fb:85:e4:b8:73:e5:b7:
                    14:9a:f0:12:0c:49:35:e0:96:ca:38:26:18:25:3c:
                    a2:b0:ef:1d:85:0d:da:bf:7e:df:a0:dd:c5:47:65:
                    bd:43:57:92:38:7e:14:da:44:e3:cd:cb:80:aa:f2:
                    41:18:57:72:6a:12:c1:20:2f:22:ea:27:38:4b:06:
                    65:50:d2:f4:64:49:d4:17:e5:dd:79:97:cf:c6:ac:
                    90:e0:79:84:77:84:e5:db:02:8c:89:e6:cc:c6:e6:
                    10:14:05:e2:1e:d9:a0:ed:3a:13:b0:1f:3d:ca:c2:
                    1c:64:ad:d4:d0:da:25:9e:f7:5d:78:59:75:64:ad:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:87:4E:22:DD:C8:2D:84:66:FA:33:BE:AC:04:E1:5B:AF:EF:96:24
            X509v3 Authority Key Identifier:
                keyid:AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3232203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:e3:21:a4:5c:75:b8:a5:df:ba:fe:78:35:0a:93:02:21:9f:
         a7:37:33:e7:07:93:11:10:76:d4:dd:f6:2a:ed:fa:51:37:5f:
         42:d7:be:cf:31:48:b4:2a:f1:1f:ea:97:98:da:09:0c:1e:08:
         d2:6a:39:20:14:15:ad:45:00:f5:ea:f1:ae:c2:da:33:f8:fa:
         f8:dc:04:fe:22:3b:7e:ac:f0:0c:39:3b:a6:b1:88:e7:73:84:
         8c:75:ad:61:ad:8f:20:fa:1b:94:2f:a0:20:0f:c4:66:d5:bf:
         5e:83:3a:fe:ce:9a:de:43:da:d6:0d:ab:85:83:3a:2a:c1:e0:
         11:1a:78:74:73:a7:ad:62:20:2a:72:4b:08:8d:82:7c:e4:b4:
         5b:1d:00:cb:d7:f9:e0:97:8d:b8:08:b9:de:1c:fd:6a:8c:40:
         bf:10:72:c9:c9:c7:81:87:01:b1:23:c6:de:14:04:e0:70:01:
         11:d0:79:46:c9:ee:a7:2d:a4:4c:29:65:84:de:0a:b3:7c:6a:
         e3:9a:b5:f3:08:af:98:a9:94:60:2a:42:21:b8:57:ab:9d:de:
         c7:ab:a4:a1:5b:1d:79:a9:49:f0:71:2d:4b:73:81:7c:1e:dc:
         c4:23:57:5f:2b:ed:e4:ba:c3:22:f4:23:ec:c1:ce:87:64:96:
         a7:9b:33:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org