Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/34352e3137302e3233362e302f32332d3234203d3e20323638313832.roa
File:                     34352e3137302e3233362e302f32332d3234203d3e20323638313832.roa (raw, json)
Hash identifier:          sdd04Gu8NFtFa+ognjJuUxMDtQpy9+a7aytSVhCKFXU=
Subject key identifier:   F7:2F:78:47:E7:E3:B6:19:2F:91:38:F3:B9:70:54:C6:E9:B7:8F:C5
Certificate issuer:       /CN=E6AEEF2DE6CFAF4084226081AA1831400F328939
Certificate serial:       1B5802917F1471CFAF1AD11C092B8EA3C6B6698F
Authority key identifier: E6:AE:EF:2D:E6:CF:AF:40:84:22:60:81:AA:18:31:40:0F:32:89:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6AEEF2DE6CFAF4084226081AA1831400F328939.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/34352e3137302e3233362e302f32332d3234203d3e20323638313832.roa
Signing time:             Mon 11 Jul 2022 13:00:00 +0000
ROA not before:           Mon 11 Jul 2022 12:55:00 +0000
ROA not after:            Mon 10 Jul 2023 13:00:00 +0000
asID:                     268182
IP address blocks:        45.170.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:58:02:91:7f:14:71:cf:af:1a:d1:1c:09:2b:8e:a3:c6:b6:69:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6AEEF2DE6CFAF4084226081AA1831400F328939
        Validity
            Not Before: Jul 11 12:55:00 2022 GMT
            Not After : Jul 10 13:00:00 2023 GMT
        Subject: CN=3082010A0282010100A9EBE2E019C52CB6619370AF039EB20165485C1B7E557C4BA44E100C4F67B2F80ADC0CB8D083ABA92464660D6BE5FD6DB0458521A751AC8663C545A4F8610BF970077C8AB42D3D7CCD7BCBDFFA8C14562F7B5F3EEFF4D1FDE647631FB50505D2901A44830218D0BCE27027991795A2CC0F0548A36B73F57FCC99E2CA752CD95DCE4495002B91761726B0AB37BFCBF941BCF240EB2819D8BE0046CDBC003B4E463A7C9DAB69EB8528BD996A4C3B6D7208B1AF5215865AC164A8DAAF2AE5F0618D3943B39C51F275AE2B46A168ADE278807E003F7AAB406AE52DC554C8C15931319F07E9D2218B3CCF67A83729CAD82F5F7F050D14A8C62562EF45E351796D45450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:e2:e0:19:c5:2c:b6:61:93:70:af:03:9e:
                    b2:01:65:48:5c:1b:7e:55:7c:4b:a4:4e:10:0c:4f:
                    67:b2:f8:0a:dc:0c:b8:d0:83:ab:a9:24:64:66:0d:
                    6b:e5:fd:6d:b0:45:85:21:a7:51:ac:86:63:c5:45:
                    a4:f8:61:0b:f9:70:07:7c:8a:b4:2d:3d:7c:cd:7b:
                    cb:df:fa:8c:14:56:2f:7b:5f:3e:ef:f4:d1:fd:e6:
                    47:63:1f:b5:05:05:d2:90:1a:44:83:02:18:d0:bc:
                    e2:70:27:99:17:95:a2:cc:0f:05:48:a3:6b:73:f5:
                    7f:cc:99:e2:ca:75:2c:d9:5d:ce:44:95:00:2b:91:
                    76:17:26:b0:ab:37:bf:cb:f9:41:bc:f2:40:eb:28:
                    19:d8:be:00:46:cd:bc:00:3b:4e:46:3a:7c:9d:ab:
                    69:eb:85:28:bd:99:6a:4c:3b:6d:72:08:b1:af:52:
                    15:86:5a:c1:64:a8:da:af:2a:e5:f0:61:8d:39:43:
                    b3:9c:51:f2:75:ae:2b:46:a1:68:ad:e2:78:80:7e:
                    00:3f:7a:ab:40:6a:e5:2d:c5:54:c8:c1:59:31:31:
                    9f:07:e9:d2:21:8b:3c:cf:67:a8:37:29:ca:d8:2f:
                    5f:7f:05:0d:14:a8:c6:25:62:ef:45:e3:51:79:6d:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2F:78:47:E7:E3:B6:19:2F:91:38:F3:B9:70:54:C6:E9:B7:8F:C5
            X509v3 Authority Key Identifier:
                keyid:E6:AE:EF:2D:E6:CF:AF:40:84:22:60:81:AA:18:31:40:0F:32:89:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/E6AEEF2DE6CFAF4084226081AA1831400F328939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6AEEF2DE6CFAF4084226081AA1831400F328939.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/34352e3137302e3233362e302f32332d3234203d3e20323638313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:1f:d6:84:f7:0a:8b:cb:08:be:df:a8:76:5c:ea:5d:3d:
         9c:08:7c:d3:3c:33:1b:21:63:54:1b:7a:48:e7:19:2b:e2:16:
         c8:1f:32:cc:c4:52:d2:c3:16:c3:58:37:2f:1e:ea:2d:f6:7a:
         c4:e1:6f:a5:b3:17:7c:7e:ac:a4:01:2d:da:32:2c:b3:52:17:
         31:02:27:13:3e:86:f0:ec:63:15:f6:a9:f3:33:90:32:87:08:
         5c:67:17:96:a6:9f:e2:0b:40:fc:01:db:03:3c:ca:c1:09:b0:
         68:00:c2:09:61:db:ed:75:74:44:b7:70:30:3e:65:d5:5c:0c:
         4b:3b:6f:9d:a7:63:32:b1:fa:41:e6:68:91:f1:1c:6b:74:c4:
         45:58:d8:83:e1:ce:29:48:2c:6d:d6:66:8b:56:ee:b9:5e:5c:
         f7:4a:05:f0:28:98:f7:fe:64:e0:b1:84:ba:1d:77:8b:bc:32:
         5b:35:53:98:61:17:be:9b:f8:1f:e4:78:95:ac:c0:e9:71:27:
         93:92:11:12:e8:e7:72:36:61:63:1d:5f:d2:1e:c6:eb:8a:62:
         f1:7b:a2:b1:05:59:0c:33:55:1c:2b:d8:a7:3a:7e:1f:e9:e3:
         5b:35:74:73:01:a6:94:19:be:07:d1:fe:a3:0b:63:9c:bb:5d:
         3b:33:bb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org