Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32322d3234203d3e20323639353538.roa
File:                     34352e3138392e32382e302f32322d3234203d3e20323639353538.roa (raw, json)
Hash identifier:          RekoDTHjoMd1HdrfFfJfyGg33e2Cgg0H0HLWuzZMHcA=
Subject key identifier:   9E:AE:EE:21:86:74:2C:2F:D3:63:CE:EF:54:47:B8:8E:D3:C8:73:31
Certificate issuer:       /CN=C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9
Certificate serial:       62C655C523D83DD7F8441FA18369778C34A66F5F
Authority key identifier: C3:BC:16:1B:1A:4B:D1:6E:42:39:69:EE:74:48:EF:EA:EF:4A:41:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32322d3234203d3e20323639353538.roa
Signing time:             Tue 27 Sep 2022 23:00:00 +0000
ROA not before:           Tue 27 Sep 2022 22:55:00 +0000
ROA not after:            Tue 26 Sep 2023 23:00:00 +0000
asID:                     269558
IP address blocks:        45.189.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c6:55:c5:23:d8:3d:d7:f8:44:1f:a1:83:69:77:8c:34:a6:6f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9
        Validity
            Not Before: Sep 27 22:55:00 2022 GMT
            Not After : Sep 26 23:00:00 2023 GMT
        Subject: CN=3082010A0282010100F7A39F755F10C2A40A711D2C61C6822DCBFE201332417FE3222FFBB24ABCAF2180FEE830908D1F76F3A60858FE7B848A1743AD9BDB4E464D0C07C2A6EDF106B48600231EDEAB2247596D7C9B8C9081A22C9C6D39BA0FD5961A04098BB9B19A897E2485C5FC7FF01FE4AA7C35954B02C9A3E1192B3CC9E805B1E0FD5D14D61337A62BE8FBBB763358345935A5DD1A758EC1A3FDFAEC6F85BBA86773F68D1608C56E8285BA9F3F9CB1A4F704C60D1F798C8207BA135E1D60F1A4BE6567083CD6C5E6074AD6FCA42DC85A96CDE6A916F459520FECDDB36455302B0A902788A355F27AB35700232A3CA4CC19F4DE6AE3DCB1BC0C0546CC344F16B7868AD8F71B7EE50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a3:9f:75:5f:10:c2:a4:0a:71:1d:2c:61:c6:
                    82:2d:cb:fe:20:13:32:41:7f:e3:22:2f:fb:b2:4a:
                    bc:af:21:80:fe:e8:30:90:8d:1f:76:f3:a6:08:58:
                    fe:7b:84:8a:17:43:ad:9b:db:4e:46:4d:0c:07:c2:
                    a6:ed:f1:06:b4:86:00:23:1e:de:ab:22:47:59:6d:
                    7c:9b:8c:90:81:a2:2c:9c:6d:39:ba:0f:d5:96:1a:
                    04:09:8b:b9:b1:9a:89:7e:24:85:c5:fc:7f:f0:1f:
                    e4:aa:7c:35:95:4b:02:c9:a3:e1:19:2b:3c:c9:e8:
                    05:b1:e0:fd:5d:14:d6:13:37:a6:2b:e8:fb:bb:76:
                    33:58:34:59:35:a5:dd:1a:75:8e:c1:a3:fd:fa:ec:
                    6f:85:bb:a8:67:73:f6:8d:16:08:c5:6e:82:85:ba:
                    9f:3f:9c:b1:a4:f7:04:c6:0d:1f:79:8c:82:07:ba:
                    13:5e:1d:60:f1:a4:be:65:67:08:3c:d6:c5:e6:07:
                    4a:d6:fc:a4:2d:c8:5a:96:cd:e6:a9:16:f4:59:52:
                    0f:ec:dd:b3:64:55:30:2b:0a:90:27:88:a3:55:f2:
                    7a:b3:57:00:23:2a:3c:a4:cc:19:f4:de:6a:e3:dc:
                    b1:bc:0c:05:46:cc:34:4f:16:b7:86:8a:d8:f7:1b:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AE:EE:21:86:74:2C:2F:D3:63:CE:EF:54:47:B8:8E:D3:C8:73:31
            X509v3 Authority Key Identifier:
                keyid:C3:BC:16:1B:1A:4B:D1:6E:42:39:69:EE:74:48:EF:EA:EF:4A:41:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32322d3234203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:21:d5:69:74:88:85:ff:08:26:6a:46:ef:c7:a3:38:9c:78:
         cf:c9:9c:14:2b:ef:88:82:9f:03:ae:49:b0:95:4c:15:8a:3a:
         26:ef:d1:c5:70:54:41:c2:46:e4:0e:e1:13:9b:4d:43:55:2e:
         2f:72:11:3d:e9:16:3f:72:bc:94:a2:25:9d:5b:99:62:32:99:
         05:d6:d0:dd:3b:be:bd:30:ef:9f:7d:1b:a8:f2:06:59:5f:bb:
         a5:04:dc:60:6b:f6:48:76:19:cb:e8:ab:f7:c1:d2:46:4c:1a:
         ff:c3:0b:8d:cc:42:eb:ad:6e:c3:3c:ff:d3:40:42:8c:85:b6:
         0c:c7:73:cf:b2:4e:bc:44:36:eb:cb:e3:b8:82:1a:dd:6d:cf:
         50:bc:f5:4e:a1:7a:ec:64:f7:d3:89:72:02:18:9e:c5:09:50:
         38:b7:3a:7b:cb:7b:f7:8e:b9:85:ef:f5:ce:4a:7a:8d:48:3f:
         2d:ef:17:00:47:64:ff:3a:d3:e8:3b:cd:c9:57:80:64:c6:9a:
         8d:88:b1:8d:48:a3:2f:27:da:2e:b0:cc:f9:78:8d:75:b8:a8:
         84:01:55:04:ac:e4:8a:7d:0a:42:26:d4:b3:69:58:20:fa:87:
         ff:66:c3:19:53:4f:48:63:cb:23:b2:4b:c2:ee:ed:80:76:c3:
         7e:62:cf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org