Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3234203d3e20323634383632.roa
File:                     3136382e3138312e3133322e302f32322d3234203d3e20323634383632.roa (raw, json)
Hash identifier:          Cw5FemI/vYSKbTSwUrEcjufM0XHG526SZgWDIUnOi/0=
Subject key identifier:   E7:CE:DA:B7:B1:EE:FA:18:09:59:8A:FB:17:60:0D:F4:80:C5:CE:42
Certificate issuer:       /CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
Certificate serial:       46D3447920B7D971FB054E9BE5526E60CB946634
Authority key identifier: 34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3234203d3e20323634383632.roa
Signing time:             Fri 29 Dec 2023 16:00:00 +0000
ROA not before:           Fri 29 Dec 2023 15:55:00 +0000
ROA not after:            Fri 27 Dec 2024 16:00:00 +0000
asID:                     264862
IP address blocks:        168.181.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d3:44:79:20:b7:d9:71:fb:05:4e:9b:e5:52:6e:60:cb:94:66:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
        Validity
            Not Before: Dec 29 15:55:00 2023 GMT
            Not After : Dec 27 16:00:00 2024 GMT
        Subject: CN=3082010A0282010100E6CABBAC46B1642BEBA2147CAC4C1565C464CBA0CBCC2CEE32A58913A0E2AD7E4B68F223B990300EF0A8B6AFC85A6532445DCEBF206B7105D4B10B0049D77B23AD1503E7A81EF82F8D96B8B8596E6D47D335EF7E6D8FFEA9E05872B93BDA922ABDCB5ACB1EDD1E4D6E800C06ED0AD306181BC27E6A26277EFE5435EA24CB199FE3722BDE7555A2818096D1D41DA8AC3591CC64D281C8DB535CC612B0D1D3CDA104BCD9E43208388A8777319B5D5B2C00DE8B19927D8809353EA523C03B65C3310E264BB15845F04F519533B05F342D8C05DE85979CE232CC66FF2538120DCBDEF5559A5323EFB18BBC01E32EE20E7F144FEF6952257555B4D54376754B0D82F30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ca:bb:ac:46:b1:64:2b:eb:a2:14:7c:ac:4c:
                    15:65:c4:64:cb:a0:cb:cc:2c:ee:32:a5:89:13:a0:
                    e2:ad:7e:4b:68:f2:23:b9:90:30:0e:f0:a8:b6:af:
                    c8:5a:65:32:44:5d:ce:bf:20:6b:71:05:d4:b1:0b:
                    00:49:d7:7b:23:ad:15:03:e7:a8:1e:f8:2f:8d:96:
                    b8:b8:59:6e:6d:47:d3:35:ef:7e:6d:8f:fe:a9:e0:
                    58:72:b9:3b:da:92:2a:bd:cb:5a:cb:1e:dd:1e:4d:
                    6e:80:0c:06:ed:0a:d3:06:18:1b:c2:7e:6a:26:27:
                    7e:fe:54:35:ea:24:cb:19:9f:e3:72:2b:de:75:55:
                    a2:81:80:96:d1:d4:1d:a8:ac:35:91:cc:64:d2:81:
                    c8:db:53:5c:c6:12:b0:d1:d3:cd:a1:04:bc:d9:e4:
                    32:08:38:8a:87:77:31:9b:5d:5b:2c:00:de:8b:19:
                    92:7d:88:09:35:3e:a5:23:c0:3b:65:c3:31:0e:26:
                    4b:b1:58:45:f0:4f:51:95:33:b0:5f:34:2d:8c:05:
                    de:85:97:9c:e2:32:cc:66:ff:25:38:12:0d:cb:de:
                    f5:55:9a:53:23:ef:b1:8b:bc:01:e3:2e:e2:0e:7f:
                    14:4f:ef:69:52:25:75:55:b4:d5:43:76:75:4b:0d:
                    82:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CE:DA:B7:B1:EE:FA:18:09:59:8A:FB:17:60:0D:F4:80:C5:CE:42
            X509v3 Authority Key Identifier:
                keyid:34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3234203d3e20323634383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:19:5f:d1:a9:a9:b0:93:fb:50:59:5d:af:63:45:dc:b1:6f:
         33:7c:a1:f2:28:5b:37:20:fa:72:fb:9d:57:c0:46:ea:b5:47:
         6e:4c:4c:e3:aa:eb:cf:66:d2:b4:1c:4b:47:16:ec:ad:fa:00:
         05:3b:ea:85:ee:eb:09:6a:77:49:88:75:4a:16:47:63:ce:08:
         06:42:88:cb:e2:b5:e9:15:6d:cb:95:fc:43:9d:f6:31:81:1d:
         61:6d:10:6b:48:cc:57:16:bb:83:b3:d3:33:bb:46:26:27:0f:
         b2:95:a3:92:03:04:b3:34:53:57:00:a5:a1:12:81:8d:0d:64:
         63:f7:20:e5:9a:e4:20:8d:fc:e9:3a:cd:73:39:3d:52:54:bf:
         9c:98:f1:52:7d:72:b2:49:13:73:ee:06:bd:7a:77:fd:23:cd:
         8e:a2:6f:49:2d:8b:6f:76:03:24:ab:66:3b:46:2e:69:23:8f:
         7d:fd:62:fe:6f:a3:b2:12:0a:a8:15:09:48:83:3f:80:79:62:
         fb:c0:c2:27:2c:09:d4:cb:1a:6a:60:3c:e1:59:6e:c1:3f:17:
         0f:d2:9a:db:73:27:b4:bb:15:8a:10:d6:bc:c5:83:57:0c:ff:
         4e:cd:4f:3b:9e:70:71:74:52:44:08:97:55:ad:7d:46:11:b5:
         02:36:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org