Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/34352e3136312e3235322e302f32322d3234203d3e20323632323835.roa
File:                     34352e3136312e3235322e302f32322d3234203d3e20323632323835.roa (raw, json)
Hash identifier:          9zXv+vYFGPzz/azv9mE+XtuvuX5GNeDzPmeY5Xz6vf4=
Subject key identifier:   2D:68:B5:09:27:4F:9E:FB:13:CB:51:9B:E5:AC:69:12:F6:78:F7:D0
Certificate issuer:       /CN=A561916EB1A61E110D909C0CA2D8F6759A3F0EA4
Certificate serial:       08212FAB7B125BC6B74DD6531B210EA9EA4F71F0
Authority key identifier: A5:61:91:6E:B1:A6:1E:11:0D:90:9C:0C:A2:D8:F6:75:9A:3F:0E:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/34352e3136312e3235322e302f32322d3234203d3e20323632323835.roa
Signing time:             Mon 13 Mar 2023 18:55:39 +0000
ROA not before:           Mon 13 Mar 2023 18:50:39 +0000
ROA not after:            Mon 11 Mar 2024 18:55:39 +0000
asID:                     262285
IP address blocks:        45.161.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:21:2f:ab:7b:12:5b:c6:b7:4d:d6:53:1b:21:0e:a9:ea:4f:71:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A561916EB1A61E110D909C0CA2D8F6759A3F0EA4
        Validity
            Not Before: Mar 13 18:50:39 2023 GMT
            Not After : Mar 11 18:55:39 2024 GMT
        Subject: CN=2D68B509274F9EFB13CB519BE5AC6912F678F7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:f2:7b:b4:ca:a4:2d:f1:08:6a:de:df:f5:
                    52:d9:42:3a:eb:0e:fa:94:00:fc:31:80:da:27:c7:
                    6b:c9:f3:31:a9:10:4d:cb:17:ea:9d:27:f7:6c:e7:
                    42:a8:24:4e:72:05:18:2d:ce:2c:a6:98:52:e1:b2:
                    54:3d:48:ab:af:ce:26:7e:85:13:2a:b0:e3:6b:1f:
                    a8:8a:d9:10:ef:0c:24:65:67:65:1a:70:02:01:04:
                    13:0c:d9:49:eb:90:9d:8a:03:74:65:fc:81:12:0a:
                    f0:a3:65:47:1e:d5:9a:d5:5f:53:c1:eb:ff:f0:6b:
                    1d:65:a6:eb:d8:b4:db:34:88:32:86:75:73:6b:47:
                    2d:c9:a5:08:1b:75:13:4f:3f:a2:2c:d9:59:56:a1:
                    75:76:4f:bf:11:53:24:45:18:34:ea:30:12:65:3d:
                    72:e0:71:1a:02:00:1a:b4:69:ae:d1:77:24:c6:84:
                    cf:3d:0d:5b:c5:51:54:06:0e:13:b5:f8:f8:e0:87:
                    ab:bb:27:b4:c5:31:1c:e2:89:e2:30:c7:76:7e:bf:
                    10:bd:99:3b:21:df:c3:6e:92:18:79:2b:52:6f:34:
                    f1:d0:ee:d4:39:ba:84:e5:a2:e3:b8:75:8e:81:19:
                    66:62:c8:02:42:f4:92:6b:2e:a1:2b:eb:ba:07:8d:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:68:B5:09:27:4F:9E:FB:13:CB:51:9B:E5:AC:69:12:F6:78:F7:D0
            X509v3 Authority Key Identifier:
                keyid:A5:61:91:6E:B1:A6:1E:11:0D:90:9C:0C:A2:D8:F6:75:9A:3F:0E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/34352e3136312e3235322e302f32322d3234203d3e20323632323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:31:58:bd:74:bf:88:e5:bd:b4:8c:e6:1d:62:c2:46:2d:26:
         f9:c6:b0:8f:51:8c:69:2e:ef:de:be:f8:ce:78:7d:62:27:e5:
         fd:b7:d4:c3:a6:3a:27:8e:b5:28:73:5a:1f:e4:26:16:08:39:
         cc:ec:09:8e:de:50:c3:a7:64:1e:26:95:2e:6d:4e:e6:a4:60:
         e6:0a:43:a9:03:a7:63:f7:c8:f3:c7:0b:90:5b:9d:2d:c6:b6:
         58:21:97:5d:e0:95:30:52:a8:db:34:a3:c5:19:b2:a8:45:25:
         f4:36:f2:86:94:f6:1c:bb:fc:d9:59:12:16:67:3b:36:47:4b:
         4d:14:6a:56:26:d9:01:3d:d4:88:a8:00:f4:87:c5:9f:4b:7a:
         66:0e:4f:59:21:2a:97:c0:ef:fe:5a:ea:24:e5:41:ae:db:9b:
         9e:cb:e8:b1:cf:1d:e0:27:7b:4a:c6:47:8a:c0:81:b8:73:c4:
         ab:d2:71:a1:f2:e1:de:ef:3f:d1:7f:c6:ca:0d:f9:99:df:01:
         b1:38:aa:b0:02:21:50:d2:97:65:50:b3:da:ec:21:6c:2b:ec:
         a4:72:e0:b0:87:20:06:95:f2:04:be:bc:07:44:69:d8:ee:dc:
         a9:f2:44:e8:e7:f2:05:cb:66:ce:9b:e1:b1:e5:f5:fc:96:c5:
         b7:d2:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org