Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32322d3232203d3e20323636393234.roa
File:                     34352e3232342e33322e302f32322d3232203d3e20323636393234.roa (raw, json)
Hash identifier:          aDJ/381iVBQ1ExV4JNyeG+tPr7YAuKs1+icoJ49o/cE=
Subject key identifier:   59:31:9B:2A:BC:10:1A:A5:5F:3C:35:AA:8C:F5:9B:CD:12:F3:9B:1F
Certificate issuer:       /CN=BD822F759E542679706513A49206DC4783B35F84
Certificate serial:       4B21960B928C271F8B6A5E60698F05B462C53D7A
Authority key identifier: BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD822F759E542679706513A49206DC4783B35F84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32322d3232203d3e20323636393234.roa
Signing time:             Sun 04 Aug 2024 00:34:27 +0000
ROA not before:           Sun 04 Aug 2024 00:29:27 +0000
ROA not after:            Sun 03 Aug 2025 00:34:27 +0000
asID:                     266924
IP address blocks:        45.224.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:21:96:0b:92:8c:27:1f:8b:6a:5e:60:69:8f:05:b4:62:c5:3d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD822F759E542679706513A49206DC4783B35F84
        Validity
            Not Before: Aug  4 00:29:27 2024 GMT
            Not After : Aug  3 00:34:27 2025 GMT
        Subject: CN=59319B2ABC101AA55F3C35AA8CF59BCD12F39B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:2c:68:05:ff:67:8c:69:17:2a:47:38:f2:
                    ce:98:bd:0b:72:f7:fd:17:64:9d:fe:5f:f7:36:95:
                    6b:a9:f3:fb:4f:21:01:e7:7c:7a:10:a5:32:43:e9:
                    2c:6b:5a:6a:45:22:cb:57:d7:9d:1e:59:aa:0e:6d:
                    14:7e:b3:5a:a4:c0:be:db:89:01:14:a2:75:8a:28:
                    2b:75:9b:e4:26:3b:1a:b7:de:4c:3c:d6:08:b7:43:
                    e6:2d:ab:af:a7:8a:b5:16:3b:7c:06:1d:3f:1b:33:
                    b7:47:15:7c:a2:fa:c1:00:01:50:97:0c:ef:19:b5:
                    18:fa:2e:d2:8c:f5:40:04:c6:bc:2e:cb:72:f8:ce:
                    33:dd:40:a0:dc:e1:e0:73:8a:1f:9f:5b:4b:a8:36:
                    26:3e:ef:ca:dc:ad:02:4d:cd:b7:6b:80:b1:ad:a6:
                    92:d6:b4:ff:a9:d2:8e:b6:16:2d:c6:e9:eb:91:44:
                    0a:b1:1f:3d:21:82:82:ca:75:41:38:a7:6a:30:eb:
                    dc:99:d0:2e:c5:27:ab:23:db:98:d2:ba:bb:63:39:
                    0a:93:ab:b3:40:59:82:59:f9:1d:70:d6:f4:d3:71:
                    00:b7:43:da:0d:bc:c1:8a:a4:fd:10:61:29:c9:84:
                    b6:91:0c:dc:ce:35:a2:96:d0:36:47:60:8e:7e:e6:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:31:9B:2A:BC:10:1A:A5:5F:3C:35:AA:8C:F5:9B:CD:12:F3:9B:1F
            X509v3 Authority Key Identifier:
                keyid:BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/BD822F759E542679706513A49206DC4783B35F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD822F759E542679706513A49206DC4783B35F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32322d3232203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:57:2f:2b:09:90:64:73:5d:66:e7:64:39:f3:e4:3f:61:7e:
         29:54:12:c3:4b:8c:24:21:40:9a:a3:61:20:b7:ab:72:ac:0d:
         70:b2:51:01:e5:a4:c9:4c:87:22:6d:df:32:d3:66:d5:b1:57:
         5a:0c:7a:92:ef:f8:74:a4:94:12:c7:cc:93:3a:0c:b3:3e:a1:
         b0:1d:7b:38:8c:68:8f:b5:f2:d8:13:7b:37:08:1f:cd:a4:fc:
         f4:ae:de:4c:fe:86:71:b2:f5:15:78:46:38:c5:de:c0:96:4e:
         06:0c:bf:3d:35:0c:bc:f9:50:3a:5e:b5:b9:22:3a:4c:0a:1e:
         78:bb:d3:ce:93:18:90:fa:c7:c6:36:de:38:4a:17:9f:4f:9e:
         d6:21:07:90:f2:bb:72:f6:b7:3c:18:b5:9a:ec:8b:1e:51:9f:
         db:65:af:d3:98:21:e5:c4:5d:66:46:bf:21:f7:b0:47:60:c6:
         31:22:18:12:f9:f7:ad:39:7a:ad:10:74:b5:67:99:8a:6d:b9:
         20:c5:ab:cb:5f:d6:2c:11:fb:8f:0b:36:e9:34:76:62:78:0d:
         b2:cf:31:bb:e3:cc:70:ff:cb:e4:82:9d:68:05:d9:f0:3b:92:
         3c:9e:b0:67:1e:02:32:54:44:b5:f3:ea:b5:dd:e8:63:11:36:
         a2:7e:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 03:23:40 2024 by rpki-client on console-ams.rpki-client.org