Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e342e302f32322d3234203d3e20323638393235.roa
File:                     34352e3137362e342e302f32322d3234203d3e20323638393235.roa (raw, json)
Hash identifier:          +3O+NIXaiU6inahiE/SNAODVJGUj6gSBZU9dntUgcSs=
Subject key identifier:   6E:25:8B:4D:16:2B:12:A5:56:C2:F2:EF:F8:C1:C9:4A:49:35:D6:EA
Certificate issuer:       /CN=AF84072BD8A0EA33CE6C51665EE97B32664F9CA6
Certificate serial:       2BF6994E6FA4959DC565183785155E7A82918B19
Authority key identifier: AF:84:07:2B:D8:A0:EA:33:CE:6C:51:66:5E:E9:7B:32:66:4F:9C:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e342e302f32322d3234203d3e20323638393235.roa
Signing time:             Sun 07 Aug 2022 19:00:00 +0000
ROA not before:           Sun 07 Aug 2022 18:55:00 +0000
ROA not after:            Sun 06 Aug 2023 19:00:00 +0000
asID:                     268925
IP address blocks:        45.176.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f6:99:4e:6f:a4:95:9d:c5:65:18:37:85:15:5e:7a:82:91:8b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF84072BD8A0EA33CE6C51665EE97B32664F9CA6
        Validity
            Not Before: Aug  7 18:55:00 2022 GMT
            Not After : Aug  6 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:12:f8:f5:3e:7b:f7:ae:9e:fc:5f:01:8c:
                    4a:bc:df:de:23:2f:01:53:29:d0:35:47:36:d1:45:
                    73:27:a0:2f:5f:6c:9e:f5:67:bf:7a:56:cd:0a:8f:
                    14:70:85:1b:01:2d:79:74:8f:cb:23:14:d3:54:6e:
                    54:b0:45:f0:8f:5f:32:ce:7b:b0:a4:b4:73:d8:04:
                    b7:44:70:09:7b:ba:b4:1c:74:b8:43:95:53:9d:51:
                    8d:74:f1:38:71:6c:fc:8f:3d:cd:da:99:0f:aa:59:
                    e9:50:0a:4c:b7:79:d6:71:44:52:1e:58:8f:bf:23:
                    b2:a1:58:28:33:d6:24:ef:16:e7:8d:5f:83:47:6f:
                    73:a7:66:54:36:dd:67:1e:24:51:a3:9d:e7:be:fc:
                    3b:88:af:c9:8b:a4:64:b4:c1:85:be:42:10:da:9d:
                    18:16:f3:ce:99:0e:33:27:75:ac:3d:ff:fe:a0:35:
                    a4:92:86:9a:c8:10:81:09:80:2d:c0:dd:df:56:f6:
                    a2:0c:5d:76:3f:91:62:78:d7:7a:05:73:69:ac:ce:
                    a1:24:5d:d9:ff:e4:42:af:cd:1d:57:7b:12:8c:69:
                    fb:06:fb:5c:43:98:74:cc:c8:27:40:15:ea:f0:f4:
                    6b:32:6d:c6:ba:41:70:7c:82:55:c8:4f:ff:7c:99:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:25:8B:4D:16:2B:12:A5:56:C2:F2:EF:F8:C1:C9:4A:49:35:D6:EA
            X509v3 Authority Key Identifier:
                keyid:AF:84:07:2B:D8:A0:EA:33:CE:6C:51:66:5E:E9:7B:32:66:4F:9C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e342e302f32322d3234203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:73:58:d8:e3:c5:5a:c0:c4:41:cb:b4:09:15:66:be:0c:aa:
         f2:2a:b5:52:a2:54:84:a9:bf:ae:d2:72:7d:6a:c0:59:4e:ec:
         11:fe:f8:5e:4a:3c:4d:6d:54:04:42:26:47:b4:a5:6d:05:25:
         37:4c:62:5b:07:b5:f8:ff:50:c4:6e:02:4e:a0:dc:0d:6e:b1:
         c5:f8:55:2c:27:87:b0:84:b1:09:10:9b:e9:47:c6:ba:ef:df:
         25:43:1b:8f:29:41:d3:8d:1c:92:21:17:b9:6b:6e:a0:3f:a7:
         63:61:10:79:19:0a:bb:33:b0:6c:a7:0a:06:6b:d9:b4:0c:87:
         c6:17:a5:e9:23:68:62:ee:e0:94:20:63:4f:b3:97:73:e1:38:
         19:44:6d:a8:a4:af:2f:dc:d2:e0:48:79:d0:16:89:e0:2b:e4:
         a9:21:ce:03:71:3f:ee:29:4a:27:f5:a6:ca:95:77:cb:88:aa:
         f3:a4:a3:83:da:e5:c2:34:a9:d7:d9:41:79:d2:df:59:3a:47:
         cc:4c:8e:25:8e:64:78:b8:af:e8:57:74:b9:ed:bb:b7:9f:2f:
         b5:82:ee:84:a3:87:e5:b7:22:a0:cf:b8:30:45:a0:1d:5d:44:
         2b:93:be:09:09:33:4e:f5:f8:76:fd:ee:a4:3a:74:4c:68:2e:
         ec:56:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org