Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/34352e3232362e35322e302f32322d3234203d3e20323636393835.roa
File:                     34352e3232362e35322e302f32322d3234203d3e20323636393835.roa (raw, json)
Hash identifier:          f5pdlEUCe/DdP45S1G7t0Yfqkqtab8Zk/qAAEWEbkR0=
Subject key identifier:   72:AA:1A:76:30:64:50:EB:CB:A2:1E:54:27:CE:7B:E7:12:7E:F0:89
Certificate issuer:       /CN=132226CC177EAE340BDB20C4FFCAAB0375FBF403
Certificate serial:       27DEE3CA59CE5CC9CF690D2B10D740F7F4A84073
Authority key identifier: 13:22:26:CC:17:7E:AE:34:0B:DB:20:C4:FF:CA:AB:03:75:FB:F4:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/132226CC177EAE340BDB20C4FFCAAB0375FBF403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/34352e3232362e35322e302f32322d3234203d3e20323636393835.roa
Signing time:             Fri 12 Nov 2021 01:31:59 +0000
ROA not before:           Fri 12 Nov 2021 01:26:59 +0000
ROA not after:            Fri 11 Nov 2022 01:31:59 +0000
asID:                     266985
IP address blocks:        45.226.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:de:e3:ca:59:ce:5c:c9:cf:69:0d:2b:10:d7:40:f7:f4:a8:40:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132226CC177EAE340BDB20C4FFCAAB0375FBF403
        Validity
            Not Before: Nov 12 01:26:59 2021 GMT
            Not After : Nov 11 01:31:59 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:29:5c:23:54:bd:ec:5a:57:01:69:e2:25:
                    5d:6f:ce:7b:9c:ae:1a:f2:11:8c:bd:e9:61:ba:93:
                    58:09:2d:f4:75:55:e9:98:10:19:58:37:8f:b3:e0:
                    53:02:53:63:db:19:ae:1b:55:ea:17:41:55:71:9a:
                    e6:d4:b4:1c:d0:27:1a:07:a3:61:aa:ed:ba:11:1e:
                    4b:c4:33:07:99:6a:c6:7f:f1:8a:cc:24:95:2f:56:
                    c2:29:a4:b9:8d:c6:07:4b:60:65:6d:2b:76:b7:47:
                    1d:c1:ee:7c:08:fb:34:30:82:c1:18:2a:00:3d:12:
                    d0:44:67:c9:88:51:cd:5d:2d:11:74:8b:30:6d:2b:
                    4f:79:31:c0:91:fc:b7:4c:a8:0d:9a:90:54:dd:73:
                    16:2c:a7:34:f4:81:15:ce:52:65:26:14:ac:eb:f0:
                    f5:f0:1c:7e:28:76:9c:bd:c9:98:53:ac:be:fe:c7:
                    fa:45:c4:97:83:2e:3d:84:90:66:85:e2:90:8f:39:
                    81:01:04:6e:a6:e7:30:b0:fb:35:68:5a:37:d5:32:
                    44:01:fe:a9:a9:bc:5f:46:2c:24:28:da:97:fb:43:
                    4e:f8:0f:ff:56:4a:71:e9:41:62:36:c8:41:1b:18:
                    d2:a8:50:0c:94:2c:fd:e5:99:c0:c3:0c:8b:c8:dc:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AA:1A:76:30:64:50:EB:CB:A2:1E:54:27:CE:7B:E7:12:7E:F0:89
            X509v3 Authority Key Identifier:
                keyid:13:22:26:CC:17:7E:AE:34:0B:DB:20:C4:FF:CA:AB:03:75:FB:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/132226CC177EAE340BDB20C4FFCAAB0375FBF403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/132226CC177EAE340BDB20C4FFCAAB0375FBF403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/34352e3232362e35322e302f32322d3234203d3e20323636393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:65:8d:bb:c2:be:77:72:20:43:6d:f6:cb:e0:3b:f3:67:
         c8:80:e0:09:5b:30:c0:9f:03:01:9c:f8:a0:e1:87:14:42:81:
         e4:f5:fb:a3:91:e9:08:a6:78:17:07:b0:b0:36:65:25:b0:b6:
         f6:6d:90:7b:d5:40:c4:44:00:ca:01:4a:f9:05:7b:d6:57:b1:
         43:32:f3:3f:b5:63:6f:99:4c:60:20:4d:7a:2e:f7:14:2a:c8:
         ed:bb:7d:09:40:05:21:b2:83:c1:e7:cb:2c:53:ca:c7:91:ad:
         4d:2a:d1:e8:52:5d:50:83:b9:27:07:4c:f0:46:ea:cc:86:a9:
         9f:70:07:17:fb:2f:62:0a:37:5e:81:b9:b5:f4:e4:96:47:ce:
         a9:bd:8d:43:1e:13:68:eb:06:5b:3a:71:ca:49:77:75:11:f1:
         ab:27:17:d2:2f:95:0e:f4:77:ee:72:45:95:ee:cf:93:6c:e1:
         ff:3a:66:08:69:30:10:31:97:e6:6c:7b:da:43:9e:ac:b7:71:
         73:f1:b7:55:a4:c0:63:2a:76:33:42:b6:e2:be:eb:f3:37:5e:
         b8:ea:f7:58:0f:bf:92:54:63:d6:60:b7:6a:84:cf:40:bb:1a:
         f6:1a:77:08:aa:b3:86:46:f7:de:51:23:0b:27:ed:ca:b8:1e:
         02:05:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org