Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3232203d3e20323634383632.roa
File:                     3136382e3138312e3133322e302f32322d3232203d3e20323634383632.roa (raw, json)
Hash identifier:          Q75nnmUW/H0liD0PD6H6Q04oWoTAJkva8TpW5FP40yU=
Subject key identifier:   12:05:8E:EA:AF:97:0D:32:32:04:81:9E:D9:DC:99:C2:63:54:40:5F
Certificate issuer:       /CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
Certificate serial:       5716AA8D4D5FC6B114BE2A50040B4BF1BFE3F634
Authority key identifier: 34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3232203d3e20323634383632.roa
Signing time:             Sat 19 Aug 2023 17:00:00 +0000
ROA not before:           Sat 19 Aug 2023 16:55:00 +0000
ROA not after:            Sat 17 Aug 2024 17:00:00 +0000
asID:                     264862
IP address blocks:        168.181.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:16:aa:8d:4d:5f:c6:b1:14:be:2a:50:04:0b:4b:f1:bf:e3:f6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
        Validity
            Not Before: Aug 19 16:55:00 2023 GMT
            Not After : Aug 17 17:00:00 2024 GMT
        Subject: CN=3082010A0282010100B2EAA8BD8771E127E290EB74AD35DE08B6ACD78580EC99B713DCC25FC6DBAAEBA9AEA0AA9E7F64F93277766FFF0A0BD4E1A177F46B9DED9D4DB8427B7B65DD03B835B84C0FE346566207B70587302B269F03A4D63AB75A5017795B6B2B20B5E81448A38E9A625F709263F61B535A6AF5B99BE688C5BCFEBBE8A451064E769A99BDB99C3B17C53FA6E6EDDD9DA13C97831FBCAD29CBD9D1E5B5A5134FE4C5A7B9EF62B86B4DE09F9968208B3B9871BA777FB994BD9365C465EF930D7907F7CF4E0E8FA14034D3C8DF13E4D66E6BC37F68F67210BF2F80BF6FDB4981C6E51163A9B40A795C036D838703EFCAC5033CF4E77C574853A39DE34372AEED566911C97B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:a8:bd:87:71:e1:27:e2:90:eb:74:ad:35:
                    de:08:b6:ac:d7:85:80:ec:99:b7:13:dc:c2:5f:c6:
                    db:aa:eb:a9:ae:a0:aa:9e:7f:64:f9:32:77:76:6f:
                    ff:0a:0b:d4:e1:a1:77:f4:6b:9d:ed:9d:4d:b8:42:
                    7b:7b:65:dd:03:b8:35:b8:4c:0f:e3:46:56:62:07:
                    b7:05:87:30:2b:26:9f:03:a4:d6:3a:b7:5a:50:17:
                    79:5b:6b:2b:20:b5:e8:14:48:a3:8e:9a:62:5f:70:
                    92:63:f6:1b:53:5a:6a:f5:b9:9b:e6:88:c5:bc:fe:
                    bb:e8:a4:51:06:4e:76:9a:99:bd:b9:9c:3b:17:c5:
                    3f:a6:e6:ed:dd:9d:a1:3c:97:83:1f:bc:ad:29:cb:
                    d9:d1:e5:b5:a5:13:4f:e4:c5:a7:b9:ef:62:b8:6b:
                    4d:e0:9f:99:68:20:8b:3b:98:71:ba:77:7f:b9:94:
                    bd:93:65:c4:65:ef:93:0d:79:07:f7:cf:4e:0e:8f:
                    a1:40:34:d3:c8:df:13:e4:d6:6e:6b:c3:7f:68:f6:
                    72:10:bf:2f:80:bf:6f:db:49:81:c6:e5:11:63:a9:
                    b4:0a:79:5c:03:6d:83:87:03:ef:ca:c5:03:3c:f4:
                    e7:7c:57:48:53:a3:9d:e3:43:72:ae:ed:56:69:11:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:05:8E:EA:AF:97:0D:32:32:04:81:9E:D9:DC:99:C2:63:54:40:5F
            X509v3 Authority Key Identifier:
                keyid:34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3232203d3e20323634383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:79:81:cc:68:d1:09:37:3f:29:f5:4b:3e:3f:a6:b9:f5:5f:
         ef:44:43:fc:dc:79:4d:b2:b1:dd:1f:01:06:ae:ad:d2:4a:ea:
         3f:9c:d1:a2:42:8e:73:90:99:5f:54:d6:e8:88:fe:d5:53:75:
         7a:4e:a2:6d:e4:14:4f:e4:90:9f:4d:20:6b:37:44:e2:2f:79:
         41:30:89:9f:10:44:20:b0:bd:6f:f4:8c:f0:b4:f4:81:fd:fc:
         9c:21:1a:1f:38:75:49:0a:9a:05:1e:44:a3:96:cd:cd:be:f9:
         e7:b7:16:0c:23:ae:93:30:da:f7:3d:32:4f:b2:31:f1:3e:ae:
         e3:48:b1:74:dc:04:95:45:1c:89:65:cc:48:bd:c6:8f:8e:05:
         7c:81:39:09:0e:1b:37:e7:ea:1c:5c:78:3b:7c:66:60:f7:5f:
         55:f9:10:19:60:6d:b6:3a:bf:f1:f2:08:09:11:7f:f8:fd:8d:
         6c:74:09:23:86:02:be:52:f4:ca:94:2f:a8:0a:5e:a0:27:12:
         f2:bb:f3:cd:ca:f9:17:ed:14:d4:59:48:fe:7c:0e:d0:46:5e:
         ed:0d:d4:46:f4:80:e3:a8:af:4c:72:d6:6d:36:e8:5a:f1:22:
         46:5e:20:44:c2:b9:66:2c:e0:6a:0d:50:4d:d3:6d:39:dc:92:
         1f:5c:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org