Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/34352e3136342e3231372e302f32342d3234203d3e20323638363533.roa
File:                     34352e3136342e3231372e302f32342d3234203d3e20323638363533.roa (raw, json)
Hash identifier:          GjEm44h4frlFMAfLv8odTCqvagQoExg8o1WRsF6/+Cs=
Subject key identifier:   DC:2F:AC:E8:F5:B0:BC:44:4A:B9:18:67:7D:E9:BC:66:4F:3B:76:1F
Certificate issuer:       /CN=8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D
Certificate serial:       392CD219695DDFE2E3C88F5CDF190EEC62483580
Authority key identifier: 8D:CC:52:EA:C5:DD:6E:E6:5F:5D:95:40:ED:0C:69:BB:1A:6F:7C:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/34352e3136342e3231372e302f32342d3234203d3e20323638363533.roa
Signing time:             Thu 24 Mar 2022 20:05:56 +0000
ROA not before:           Thu 24 Mar 2022 20:00:56 +0000
ROA not after:            Thu 23 Mar 2023 20:05:56 +0000
asID:                     268653
IP address blocks:        45.164.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2c:d2:19:69:5d:df:e2:e3:c8:8f:5c:df:19:0e:ec:62:48:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D
        Validity
            Not Before: Mar 24 20:00:56 2022 GMT
            Not After : Mar 23 20:05:56 2023 GMT
        Subject: CN=DC2FACE8F5B0BC444AB918677DE9BC664F3B761F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:b0:8a:f0:a6:f1:21:db:68:0a:9e:50:50:
                    f0:e9:b4:3d:12:cb:46:c0:81:66:9f:6f:86:61:f5:
                    a1:34:d8:ca:0e:28:46:fa:06:9f:46:7b:6d:6c:c7:
                    53:47:49:dc:6e:d1:76:ab:1e:27:75:1b:d2:83:a3:
                    fb:f0:44:5a:57:fd:db:43:55:40:95:dc:e4:c8:e5:
                    71:ec:43:2f:d1:34:7e:cf:55:e7:9e:50:1e:81:ca:
                    11:65:67:6a:c1:88:1c:8f:33:44:c7:1a:a0:a4:a5:
                    81:e2:b6:be:59:34:63:82:e8:28:74:d0:2d:c5:c3:
                    6d:08:20:ea:f9:e5:e4:8a:13:b6:9d:fa:e3:5e:65:
                    53:a4:f3:8c:da:4d:e8:41:9e:49:14:2b:0a:59:56:
                    05:38:da:3a:d3:6c:81:34:b2:4e:f8:ab:49:af:44:
                    5d:ab:41:f0:68:ec:b7:2d:ee:ff:90:fa:ae:cf:d8:
                    73:76:e6:bb:d0:56:2e:21:6f:b0:99:61:27:39:3f:
                    ea:be:6b:ff:5b:9b:29:93:e0:31:ae:a8:8d:e1:6d:
                    ad:a2:cf:6d:0d:64:77:33:94:e7:ed:d4:1d:6d:bf:
                    37:80:28:2d:b6:f8:6c:58:e4:a6:c8:02:70:be:06:
                    11:b5:bd:d0:62:ec:57:ba:fb:74:9e:31:ba:86:07:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2F:AC:E8:F5:B0:BC:44:4A:B9:18:67:7D:E9:BC:66:4F:3B:76:1F
            X509v3 Authority Key Identifier:
                keyid:8D:CC:52:EA:C5:DD:6E:E6:5F:5D:95:40:ED:0C:69:BB:1A:6F:7C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/34352e3136342e3231372e302f32342d3234203d3e20323638363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:de:a5:6c:e8:b4:87:4b:8a:d7:da:08:db:02:df:f8:f2:
         22:8e:02:6b:d2:19:7a:b7:c8:4c:a9:86:e7:af:55:62:79:dc:
         b4:20:d5:07:25:3f:07:e9:26:f7:73:dc:6d:fe:d0:9a:d0:54:
         58:1a:31:93:a7:ef:59:d8:38:1e:74:bd:88:53:53:e8:79:e2:
         73:b7:e5:18:c7:13:0b:b4:95:03:1f:a9:e4:6f:8c:4d:e8:62:
         a2:89:cf:f5:db:42:73:24:c8:2b:d5:a3:3d:b2:c8:73:5c:39:
         e9:b8:20:89:cf:32:1d:25:11:1f:76:07:79:19:f7:ec:49:0c:
         14:29:54:9d:0b:7c:de:13:c7:ea:bf:f2:95:02:48:76:1c:ec:
         c2:32:d9:00:29:41:81:c1:a5:22:cf:9c:f6:07:0c:8d:e0:7a:
         ab:2f:8a:86:dc:b0:c6:9a:28:9e:5c:2f:1e:b5:ee:05:13:52:
         af:8f:e3:0e:cd:49:ed:b3:8b:da:0a:a8:ec:8d:74:54:84:aa:
         37:4d:2a:18:86:7c:d6:5c:04:cd:6a:fa:ee:35:8e:0a:98:8c:
         9e:2a:c8:32:a4:d5:bd:a5:bd:89:4f:b1:83:46:44:0a:51:a7:
         e4:ff:a7:90:45:27:f6:18:b3:01:91:1a:42:b5:9a:76:eb:5d:
         cd:d7:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org