Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/34352e3136352e31362e302f32322d3232203d3e20323638363637.roa
File:                     34352e3136352e31362e302f32322d3232203d3e20323638363637.roa (raw, json)
Hash identifier:          qnxwzHZ5J7QMWEZ89Tw0FRK5+Ds1KDPRXgN5oCElsAc=
Subject key identifier:   97:1F:8B:24:7A:D6:B6:A0:18:C6:B1:8A:5E:C9:97:77:B0:B6:08:67
Certificate issuer:       /CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
Certificate serial:       097CCA30328094ED096899DD6E5F4FF197E3D53A
Authority key identifier: 1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/34352e3136352e31362e302f32322d3232203d3e20323638363637.roa
Signing time:             Mon 15 Aug 2022 21:26:56 +0000
ROA not before:           Mon 15 Aug 2022 21:21:56 +0000
ROA not after:            Mon 14 Aug 2023 21:26:56 +0000
asID:                     268667
IP address blocks:        45.165.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7c:ca:30:32:80:94:ed:09:68:99:dd:6e:5f:4f:f1:97:e3:d5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
        Validity
            Not Before: Aug 15 21:21:56 2022 GMT
            Not After : Aug 14 21:26:56 2023 GMT
        Subject: CN=971F8B247AD6B6A018C6B18A5EC99777B0B60867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:5a:95:b0:ee:bf:f7:4a:5e:7d:0f:75:55:
                    14:5d:ca:aa:55:a1:39:2f:3f:9c:d5:64:d0:e8:8c:
                    c0:1f:65:d2:f9:8d:32:37:2e:8b:9f:26:0f:29:f0:
                    66:14:c5:fc:b3:43:da:65:36:56:a4:cf:92:62:42:
                    68:03:e7:13:c7:21:9c:91:a2:aa:f8:00:00:60:e3:
                    b7:da:03:52:c3:01:fe:ef:18:82:c9:77:38:c3:16:
                    cc:8d:1d:26:81:d0:c1:8d:e4:73:f0:c9:f5:b7:5f:
                    10:f3:c5:fe:86:25:4a:c5:60:05:15:e7:bd:31:13:
                    82:88:cf:b8:c5:9f:5d:85:ca:07:19:e2:c2:dd:20:
                    ea:10:cf:35:88:d1:94:a6:94:d5:37:b8:35:07:4f:
                    28:27:83:03:a1:21:92:d0:3f:57:1e:50:47:3e:c5:
                    6d:25:41:00:e5:77:47:8f:11:24:bc:41:0e:a0:13:
                    98:1a:0b:92:c1:aa:d6:d7:9b:2e:d3:dd:f9:96:ad:
                    99:b5:bd:7f:3c:f0:ef:16:cc:ba:98:eb:ed:6d:fe:
                    4d:aa:01:b8:2a:c2:11:76:ea:ff:91:1e:2a:5c:b3:
                    4e:78:bf:23:0c:a0:e9:ab:4a:76:ad:c0:e8:bb:ab:
                    c2:6d:ec:96:fc:8d:8b:4f:4f:a6:a9:63:ea:72:3d:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1F:8B:24:7A:D6:B6:A0:18:C6:B1:8A:5E:C9:97:77:B0:B6:08:67
            X509v3 Authority Key Identifier:
                keyid:1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/34352e3136352e31362e302f32322d3232203d3e20323638363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:11:f0:75:f5:c8:0f:70:9b:17:73:1b:22:7c:81:eb:61:6d:
         c8:4c:42:e6:7c:b9:a4:00:5c:6e:a8:bc:18:69:75:be:72:15:
         32:ed:0b:75:ee:7c:0a:71:dc:e9:92:a8:eb:64:9c:5f:cf:2c:
         ad:6a:4a:9a:e5:e5:a8:13:25:a9:44:8f:df:7b:51:83:8c:c1:
         ca:b0:cf:60:18:45:21:d5:9a:e0:76:ba:ca:6a:7d:5e:1f:fe:
         d1:41:c2:93:b8:74:9c:3d:f1:b1:df:4e:76:ae:9f:cc:21:e4:
         bb:0d:5b:cd:29:d6:c7:39:d6:fd:93:12:8c:a9:1b:90:91:e3:
         05:4f:1e:15:f9:5a:a5:f5:77:cd:cd:50:a0:42:51:6b:5e:c2:
         fc:63:74:6c:35:6e:65:11:6e:a6:32:b4:ec:da:aa:81:81:34:
         c4:4b:af:8c:1f:46:09:f5:fa:9d:bb:07:1a:6e:59:3d:10:4b:
         d3:59:e8:69:69:89:b9:82:c6:63:ce:a1:05:9d:1b:de:ef:d6:
         88:da:19:8d:f5:09:a0:31:4d:ab:f3:91:17:ef:13:e2:a3:39:
         1c:f5:86:a1:7c:d7:64:dd:f9:61:77:5f:76:6b:26:40:5b:ee:
         1b:5f:be:93:79:12:fb:85:3a:91:05:3b:d6:42:40:39:f6:de:
         3f:e5:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org