Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33362e302f32322d3232203d3e20323639313631.roa
File:                     34352e3138312e33362e302f32322d3232203d3e20323639313631.roa (raw, json)
Hash identifier:          dEnfJUy59Mbag6XgvN4yPUVQoLIwLQY1ZLT/TnL+pEk=
Subject key identifier:   65:5B:86:03:4B:B9:0C:9A:26:E1:16:13:CA:4D:E8:84:BD:12:06:F0
Certificate issuer:       /CN=391DEBC26509E9D194B7EE34BAA518754DF93098
Certificate serial:       28CF20624BBABF4109DC4076DD6367B850A8EC2E
Authority key identifier: 39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391DEBC26509E9D194B7EE34BAA518754DF93098.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33362e302f32322d3232203d3e20323639313631.roa
Signing time:             Thu 29 Jun 2023 17:18:48 +0000
ROA not before:           Thu 29 Jun 2023 17:13:48 +0000
ROA not after:            Thu 27 Jun 2024 17:18:48 +0000
asID:                     269161
IP address blocks:        45.181.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cf:20:62:4b:ba:bf:41:09:dc:40:76:dd:63:67:b8:50:a8:ec:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391DEBC26509E9D194B7EE34BAA518754DF93098
        Validity
            Not Before: Jun 29 17:13:48 2023 GMT
            Not After : Jun 27 17:18:48 2024 GMT
        Subject: CN=655B86034BB90C9A26E11613CA4DE884BD1206F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:f4:b2:2d:db:2d:b8:76:87:b5:a3:45:e1:
                    f7:98:ca:54:27:73:3a:9b:07:cf:fd:12:12:c2:c2:
                    27:8e:ad:38:17:0d:19:d5:73:24:22:1d:5f:bd:6a:
                    59:4f:39:19:02:22:50:0c:80:87:f3:07:15:ef:4e:
                    71:6f:7a:40:ef:fd:9e:ee:92:13:e4:be:a1:84:42:
                    07:b9:1f:21:38:0f:b5:9e:c2:e5:93:0a:88:67:e7:
                    de:64:dd:91:62:09:84:a7:ec:8e:29:4f:15:d4:98:
                    a4:47:2f:ca:ff:6f:86:d2:b2:ed:58:0c:40:cd:a4:
                    2f:b3:8f:e0:bd:f6:39:de:c8:7c:db:2f:f4:d0:38:
                    fb:0c:ed:3f:20:2c:af:30:94:fa:f2:b2:16:7b:37:
                    fa:65:49:6d:90:1a:d8:30:38:06:cd:a5:82:e4:20:
                    2b:05:67:24:fe:cc:09:06:f8:0a:ee:69:9c:62:86:
                    99:41:38:91:fc:84:55:c5:17:4c:91:27:44:4b:58:
                    0b:6e:7a:7b:9a:45:26:cb:b8:72:83:89:a2:ee:f2:
                    89:35:05:b6:e5:85:d1:60:66:fa:9e:a6:01:c0:56:
                    af:1a:02:67:67:3a:2a:b9:a9:bb:8a:cd:21:83:5b:
                    f5:da:bf:ac:76:15:2b:e5:b3:7c:7f:8f:2f:ef:5e:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5B:86:03:4B:B9:0C:9A:26:E1:16:13:CA:4D:E8:84:BD:12:06:F0
            X509v3 Authority Key Identifier:
                keyid:39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/391DEBC26509E9D194B7EE34BAA518754DF93098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391DEBC26509E9D194B7EE34BAA518754DF93098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33362e302f32322d3232203d3e20323639313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:62:04:80:b3:d6:01:54:0d:39:9a:de:b7:4a:55:d6:81:65:
         f9:ea:36:6b:06:ab:c1:1e:dc:ce:20:f5:fb:e6:7a:42:7b:6e:
         a6:8f:86:2c:1c:8a:22:95:07:1e:6d:0b:3c:21:e8:78:d1:4e:
         b9:02:ef:90:07:9c:ba:91:7d:84:7e:58:0f:aa:0a:8c:50:8b:
         c9:16:e4:16:81:f9:8f:02:ed:9d:52:61:f5:dc:48:11:ac:e0:
         54:85:95:da:81:87:34:dc:ff:75:9b:6d:81:a6:a9:ba:28:e2:
         f4:73:e2:0d:10:c7:c7:6c:62:f7:ae:5b:51:a7:e3:be:22:e5:
         76:aa:d0:a1:4e:e7:ff:77:13:fb:0a:af:50:e0:ba:e3:03:33:
         88:28:8e:76:e1:3d:d2:d0:24:4d:f2:d7:de:82:f5:3d:88:9c:
         67:32:ec:0a:1c:bc:31:29:90:53:61:cd:4c:df:a5:4a:0e:72:
         d6:6f:e4:1b:4c:b7:09:92:2f:b5:6f:53:55:79:00:a9:9b:12:
         53:10:82:4b:e7:d4:df:13:13:4e:ac:30:8c:76:47:84:2d:a8:
         c6:28:16:f9:ab:f7:4a:2b:d8:0c:95:68:26:7e:a9:2a:23:b7:
         a9:5c:3f:58:52:02:3b:8e:e3:5b:82:b5:3b:2e:8b:d5:26:98:
         64:ae:dd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org