Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32322d3232203d3e20323639353239.roa
File:                     34352e3138382e3138302e302f32322d3232203d3e20323639353239.roa (raw, json)
Hash identifier:          lH1m9evbieGkzKV4qXN68F3fohy9BS5m7KwMVUgaFp8=
Subject key identifier:   0A:B8:98:2C:1A:08:0F:11:20:F2:41:20:CF:4C:81:83:09:2C:FE:9E
Certificate issuer:       /CN=E391D45BA9D3292DBFB22F4152439B03F59996F3
Certificate serial:       09911D280B92E977C360AD29C8E56C46BDD381A5
Authority key identifier: E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32322d3232203d3e20323639353239.roa
Signing time:             Mon 25 Mar 2024 20:25:17 +0000
ROA not before:           Mon 25 Mar 2024 20:20:17 +0000
ROA not after:            Mon 24 Mar 2025 20:25:17 +0000
asID:                     269529
IP address blocks:        45.188.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:91:1d:28:0b:92:e9:77:c3:60:ad:29:c8:e5:6c:46:bd:d3:81:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E391D45BA9D3292DBFB22F4152439B03F59996F3
        Validity
            Not Before: Mar 25 20:20:17 2024 GMT
            Not After : Mar 24 20:25:17 2025 GMT
        Subject: CN=0AB8982C1A080F1120F24120CF4C8183092CFE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:53:97:bc:f1:4a:6b:e4:7a:0b:4b:b5:8f:
                    c9:b2:74:9d:9f:b5:7d:b8:ba:4f:ce:14:c6:86:6b:
                    6b:10:17:b6:ce:4c:a4:8c:a5:7e:53:30:16:bb:f4:
                    7e:b4:ff:18:50:9d:5a:06:38:80:6b:51:67:d4:07:
                    e0:66:da:50:86:60:d1:3b:ec:f1:22:4f:e6:bd:85:
                    83:34:84:9b:a5:2f:96:d8:3a:52:f0:6e:9b:bb:5f:
                    35:6a:d1:b2:ca:15:4c:f8:02:a2:c3:ee:b0:72:c1:
                    45:f7:6c:e5:7a:42:16:1a:5a:f2:25:f1:4c:e5:51:
                    ca:9b:8c:5e:29:77:f7:60:e0:8d:45:36:78:fe:cc:
                    b8:68:3e:d2:4d:a0:73:91:f7:b1:7f:1e:44:6e:3a:
                    30:49:46:fd:8a:0a:a0:51:fe:6c:13:2b:8e:0d:78:
                    99:89:5a:bc:63:91:ef:27:82:59:f2:0b:1c:6d:f9:
                    53:b9:a2:d9:48:b1:fb:13:98:38:a9:49:85:cf:28:
                    ef:d3:06:b5:20:bb:3b:72:07:6d:6d:56:de:66:93:
                    a2:c8:ea:47:3c:7a:42:07:48:4e:34:c6:c7:3f:2f:
                    54:a5:cb:62:87:45:64:7c:b9:59:ea:bb:b9:31:30:
                    78:b1:39:18:be:6f:34:fe:68:6f:47:ee:c6:34:e3:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B8:98:2C:1A:08:0F:11:20:F2:41:20:CF:4C:81:83:09:2C:FE:9E
            X509v3 Authority Key Identifier:
                keyid:E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32322d3232203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:3f:55:c1:f4:17:a3:8a:57:a5:4f:4d:7b:31:8f:1a:81:
         27:d5:32:49:be:56:e7:51:9f:7e:4f:ec:25:a5:ec:ff:73:ed:
         e9:58:37:2c:d1:59:a2:b1:d3:a9:f8:5c:f4:a5:69:da:ce:54:
         2d:5d:a4:2b:a1:68:ff:96:17:2a:91:ce:ea:6d:2a:99:84:af:
         28:6c:ff:b3:d5:3c:da:24:2c:64:79:70:7d:4e:aa:46:ed:a9:
         59:e1:11:ec:d5:3b:ba:1d:1c:fb:89:26:6d:01:0f:f7:e3:1b:
         4a:2e:53:1c:02:58:a7:24:4b:45:4b:5f:5d:b8:88:af:49:f5:
         95:e7:12:65:04:be:04:62:38:9e:96:0e:c8:41:a3:6b:ac:29:
         33:36:5a:0a:6a:02:b7:a5:2d:9f:5c:9c:a5:49:b4:c4:e3:82:
         28:82:49:9e:4d:69:b2:3a:a2:4e:84:d2:80:8d:e9:af:f2:f0:
         19:eb:05:9c:91:d9:95:43:cd:07:52:1f:3a:f9:33:90:c9:58:
         d5:16:77:4a:c8:a2:6f:23:c8:20:28:bb:75:ed:e7:21:09:af:
         b5:e6:68:71:84:1f:79:fb:51:0d:0c:13:eb:c0:1f:a3:c8:00:
         3a:d5:ca:69:c3:a0:15:56:2d:e4:3b:12:7c:b3:62:8a:86:4f:
         23:4a:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org