Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/34352e3232342e3133372e302f32342d3234203d3e20323636393232.roa
File:                     34352e3232342e3133372e302f32342d3234203d3e20323636393232.roa (raw, json)
Hash identifier:          0v1LXlNwxRqdi92Lptt/9AMRi32OH6HGcDl0t9X8eCo=
Subject key identifier:   66:6B:0D:02:19:84:CB:E7:2B:71:20:D8:E9:26:F5:F8:A1:73:31:A6
Certificate issuer:       /CN=0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A
Certificate serial:       BC47388BDBA9D102E7A0685CDEF4AF864FC8D0
Authority key identifier: 0D:1B:D2:CB:DC:3E:26:A7:3F:3D:AF:C0:13:45:66:13:BE:DB:41:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/34352e3232342e3133372e302f32342d3234203d3e20323636393232.roa
Signing time:             Wed 10 Aug 2022 14:06:18 +0000
ROA not before:           Wed 10 Aug 2022 14:01:18 +0000
ROA not after:            Wed 09 Aug 2023 14:06:18 +0000
asID:                     266922
IP address blocks:        45.224.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bc:47:38:8b:db:a9:d1:02:e7:a0:68:5c:de:f4:af:86:4f:c8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A
        Validity
            Not Before: Aug 10 14:01:18 2022 GMT
            Not After : Aug  9 14:06:18 2023 GMT
        Subject: CN=666B0D021984CBE72B7120D8E926F5F8A17331A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:55:97:b6:f8:08:c0:54:b0:4b:d5:02:64:b6:
                    4d:56:3e:18:65:ce:11:f4:b2:98:c4:7b:30:62:09:
                    a8:f4:b5:2f:59:07:71:c1:39:10:10:54:27:76:ec:
                    03:be:c1:9e:63:82:c3:b8:f9:76:72:fd:5f:fc:61:
                    1d:8d:65:b4:ff:72:cb:39:fd:03:83:cf:bd:f4:86:
                    12:cd:07:3d:69:cd:6b:9e:7c:c3:a5:d2:6a:35:ec:
                    f4:9e:9c:35:21:eb:52:7a:1c:05:98:a4:fc:8c:2c:
                    99:3d:19:15:fe:aa:21:3f:a4:b3:35:72:bc:26:26:
                    34:0f:8e:8e:4e:7d:77:48:0d:38:6f:84:df:64:2c:
                    eb:2e:93:7c:b2:d2:89:22:ca:25:05:13:2e:2f:3b:
                    07:c0:46:9e:48:1b:8c:fc:10:24:6b:ee:96:89:b3:
                    ff:e7:7f:fe:84:40:b2:29:78:6c:a2:5a:22:50:41:
                    bc:32:26:b7:8c:5e:81:63:4f:d2:4f:9c:26:81:4f:
                    a6:7c:95:dd:b1:e1:93:b5:ea:2b:83:7a:31:6f:89:
                    be:22:d6:ac:dc:ee:f7:93:8c:d6:37:97:3f:27:96:
                    7c:ac:d6:0d:85:40:b2:29:7b:da:c3:a6:d5:9a:df:
                    86:da:65:ea:9e:05:ce:e1:0e:c8:c4:c1:ff:38:05:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6B:0D:02:19:84:CB:E7:2B:71:20:D8:E9:26:F5:F8:A1:73:31:A6
            X509v3 Authority Key Identifier:
                keyid:0D:1B:D2:CB:DC:3E:26:A7:3F:3D:AF:C0:13:45:66:13:BE:DB:41:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/34352e3232342e3133372e302f32342d3234203d3e20323636393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:3a:4a:ee:c2:e5:dc:5d:a9:e8:7f:9b:70:eb:15:bc:64:
         9f:85:b6:cd:17:04:f1:2d:c4:a7:aa:14:0b:bf:c7:5a:56:8f:
         3e:7b:3a:a9:a0:77:0d:86:27:15:af:0b:b3:17:49:e5:09:75:
         b3:b0:38:84:a3:39:87:92:21:b0:fc:a1:71:98:77:45:86:d8:
         eb:99:31:9f:ed:68:0b:97:ee:7e:7c:33:c7:fc:df:20:f0:08:
         24:77:40:14:43:67:a3:4b:cf:9e:d2:7e:b6:92:43:ae:d6:35:
         09:72:9c:69:2d:86:8c:55:b4:73:cd:c3:a4:81:ea:77:67:61:
         07:25:00:76:55:f5:c7:61:cb:64:5e:0c:4a:8d:d1:8e:ee:51:
         dd:cf:a9:29:7e:23:04:5d:1c:88:0f:f2:f4:ac:7a:80:8d:f3:
         87:8f:ba:ca:51:fe:14:da:cf:ae:bc:b1:3c:a6:a4:2b:94:9a:
         e1:64:31:83:fb:3f:84:35:0d:d2:17:c7:36:34:89:e1:b8:85:
         14:63:ee:1a:45:54:76:6d:c3:3d:74:2e:3a:a4:23:d2:19:bf:
         7d:26:4b:3a:04:fa:96:9b:be:67:c7:8b:e8:9c:25:1f:58:c8:
         cf:1f:32:e1:e9:e8:eb:a0:e7:76:b6:8f:02:a1:73:bf:01:82:
         23:6d:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org