Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33382e302f32332d3233203d3e20323638303237.roa
File:                     34352e3136382e33382e302f32332d3233203d3e20323638303237.roa (raw, json)
Hash identifier:          OGxTKPF9pFbSAKJbwKV/qSL6ohbPNIrY/IdsoP3MMPs=
Subject key identifier:   53:42:CB:98:08:15:70:6B:E6:8B:0D:9A:54:A2:C6:87:F6:C0:C3:30
Certificate issuer:       /CN=CC78BDF85E39DECFD60C09178EE311CCEBFE77C7
Certificate serial:       1F68C6508F5B837E3A59060AE860C7AA4F7E88F1
Authority key identifier: CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33382e302f32332d3233203d3e20323638303237.roa
Signing time:             Mon 14 Nov 2022 20:33:49 +0000
ROA not before:           Mon 14 Nov 2022 20:28:49 +0000
ROA not after:            Mon 13 Nov 2023 20:33:49 +0000
asID:                     268027
IP address blocks:        45.168.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:68:c6:50:8f:5b:83:7e:3a:59:06:0a:e8:60:c7:aa:4f:7e:88:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC78BDF85E39DECFD60C09178EE311CCEBFE77C7
        Validity
            Not Before: Nov 14 20:28:49 2022 GMT
            Not After : Nov 13 20:33:49 2023 GMT
        Subject: CN=5342CB980815706BE68B0D9A54A2C687F6C0C330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:c5:cb:cf:a1:c7:d7:b5:ff:3c:ea:87:de:
                    18:19:be:5e:5c:6e:34:33:36:83:f9:86:75:0c:17:
                    9c:ba:3d:46:33:75:05:ba:5f:2f:c2:f3:ec:96:aa:
                    57:7b:4d:30:b4:88:71:a0:9c:3c:0e:b0:ea:95:3a:
                    3f:fd:fa:cc:8a:e7:ef:b1:26:b3:dc:75:53:7b:30:
                    b6:b2:39:11:22:77:7b:c7:12:58:0d:25:0e:e6:55:
                    5d:ad:31:9d:b1:8a:95:8c:c0:86:ee:ba:3c:36:ad:
                    c6:e7:19:e8:a0:77:83:22:91:c5:73:68:eb:b4:61:
                    13:0a:c5:be:44:03:d1:3a:30:d1:96:13:02:5e:f9:
                    e9:ac:9d:4a:e2:42:d3:2d:68:f4:74:ee:36:47:aa:
                    4e:9d:ff:66:af:88:ca:e3:c4:12:f5:cd:37:b7:dd:
                    22:01:a8:0f:2c:c4:b9:2a:06:09:c2:e8:56:83:5b:
                    7e:e1:00:be:f6:21:87:2c:c5:c9:b6:e9:e4:f0:e4:
                    db:de:3b:ab:ea:b6:3c:c9:91:52:5e:71:ec:e9:a1:
                    d7:1d:0d:fe:6d:25:f0:d7:76:ce:06:73:87:98:a8:
                    0d:a7:55:1f:83:a7:b0:16:eb:5c:af:1d:08:76:f3:
                    16:bd:8a:35:2e:d3:3d:a1:e5:88:97:25:7c:79:8f:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:42:CB:98:08:15:70:6B:E6:8B:0D:9A:54:A2:C6:87:F6:C0:C3:30
            X509v3 Authority Key Identifier:
                keyid:CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33382e302f32332d3233203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:f5:48:f2:7f:46:16:91:59:16:d5:65:e9:81:49:6f:04:59:
         22:57:83:d3:ac:04:ff:90:13:87:73:e3:dd:f4:50:ae:67:45:
         6d:21:6e:cd:c3:f0:55:57:41:ca:28:22:cc:a5:2e:cd:02:32:
         68:53:57:1b:5d:c9:66:c2:f2:82:75:4e:09:98:51:46:57:a3:
         dc:63:88:58:aa:2e:48:52:cc:11:7d:9a:d4:8e:49:82:31:33:
         6a:ff:19:49:d4:53:31:13:28:1d:48:b6:4c:79:92:21:85:38:
         9f:76:62:47:c2:66:44:b1:8c:6c:3b:6f:ce:6c:8d:ed:bd:d2:
         3a:9c:00:84:14:a0:2a:2c:01:29:4b:a8:90:3b:85:33:cd:2a:
         0b:03:28:0c:9f:0f:34:ba:a0:50:7f:3c:9a:e9:e4:f8:34:17:
         05:b2:4f:63:21:61:be:7f:4e:cc:58:f1:76:5f:30:e1:f4:6f:
         ad:be:31:a3:85:1e:fa:82:8d:da:ad:b3:cf:c6:4d:f0:40:2f:
         d9:9d:74:af:f3:1d:85:36:3a:74:ff:75:f7:8a:08:74:da:cb:
         a4:9f:74:c8:17:43:14:6f:ef:f7:fe:5c:d6:bf:dc:49:42:12:
         ec:f5:71:24:48:d6:df:40:7c:c3:8a:17:5f:62:e6:dd:5e:fb:
         fb:c6:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org