Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3232203d3e20323636303836.roa
File:                     34352e342e3230382e302f32322d3232203d3e20323636303836.roa (raw, json)
Hash identifier:          p+wkAYz4mEJpNfzdIO5K2Z3aKWp1dabOAIVlvTFC0O0=
Subject key identifier:   C2:77:7A:10:77:0C:0D:70:1E:95:5D:13:18:7C:4B:13:30:74:2C:42
Certificate issuer:       /CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
Certificate serial:       5F958F328C07775B36DFE1E7289651F248BFF20B
Authority key identifier: 49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3232203d3e20323636303836.roa
Signing time:             Thu 21 Jul 2022 17:18:33 +0000
ROA not before:           Thu 21 Jul 2022 17:13:33 +0000
ROA not after:            Thu 20 Jul 2023 17:18:33 +0000
asID:                     266086
IP address blocks:        45.4.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:95:8f:32:8c:07:77:5b:36:df:e1:e7:28:96:51:f2:48:bf:f2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
        Validity
            Not Before: Jul 21 17:13:33 2022 GMT
            Not After : Jul 20 17:18:33 2023 GMT
        Subject: CN=C2777A10770C0D701E955D13187C4B1330742C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:cd:14:fa:ef:da:66:6f:89:2d:2c:87:8c:
                    ff:09:ff:de:13:2f:7e:14:6a:5a:55:98:58:e1:ef:
                    32:96:62:2b:99:23:91:c0:c4:1f:bb:d8:f9:a1:e3:
                    06:46:b6:62:b7:18:4f:70:e2:81:b9:87:c2:3f:ab:
                    dd:75:c1:1f:2e:05:f9:63:94:97:d0:25:a7:b4:74:
                    75:d2:c8:6a:ea:96:8c:18:62:f0:f4:b5:64:d0:b4:
                    62:25:81:4a:35:5f:c6:02:f2:0c:4b:ba:a2:07:a0:
                    b4:6b:a0:9e:b9:6e:8c:ba:85:4e:0e:fb:44:b9:cb:
                    02:69:78:00:4e:a4:67:d5:82:65:a4:08:92:d4:3b:
                    e7:7c:06:2a:03:a9:3c:ac:00:51:1d:5a:65:00:3a:
                    7a:06:ab:8f:ea:fc:45:62:40:28:13:e2:90:bc:63:
                    ea:be:9f:6f:57:02:00:9e:dd:96:68:89:af:35:53:
                    df:17:50:55:9e:40:cd:92:ee:f1:52:1e:8e:33:db:
                    ff:8f:0b:cd:b2:99:0e:4c:3f:7e:05:b1:ad:d1:b5:
                    c3:23:a8:49:a4:21:1a:ce:0d:bf:c3:84:77:85:e1:
                    bf:25:5a:05:c0:2d:ba:59:c7:d2:31:a1:48:a7:41:
                    03:06:5f:17:5d:f8:65:00:52:40:7b:92:fe:4c:c7:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:77:7A:10:77:0C:0D:70:1E:95:5D:13:18:7C:4B:13:30:74:2C:42
            X509v3 Authority Key Identifier:
                keyid:49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3232203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:8f:e5:01:b3:02:8d:d6:d7:b0:f6:d3:97:66:cc:b5:c7:5e:
         8d:47:b2:db:72:e2:2e:9f:fb:93:6a:a8:43:77:77:3b:a9:7f:
         22:fd:19:9f:81:46:67:21:38:84:d6:fe:9a:0b:32:d1:c2:f3:
         42:54:31:43:04:92:47:f7:6f:cb:9f:c6:a3:82:c9:3c:3b:a3:
         68:03:de:30:02:f4:2d:99:92:a4:2e:d5:1b:b9:cd:ca:79:4d:
         2e:e8:8d:71:61:c7:e5:bb:38:a5:88:53:66:a3:13:17:3e:ba:
         1f:ed:7b:95:65:38:de:02:99:0a:77:94:bd:1a:4a:10:66:85:
         08:9e:11:97:b2:ce:5b:32:c0:f5:c6:c9:18:fe:d4:65:ed:6b:
         bd:43:4a:bb:c8:aa:de:de:fb:f0:65:56:04:72:a6:ed:02:36:
         9b:39:64:55:d2:05:c2:47:34:60:4c:d8:c3:4d:3e:de:2e:2c:
         5d:3f:09:f4:af:81:dd:26:ac:58:76:a9:57:fa:da:e8:fa:f7:
         3e:b0:e1:d1:f2:f1:e6:56:48:9f:ce:ae:de:63:bc:6c:68:db:
         65:cb:66:60:9c:b1:a9:6c:87:95:6f:1d:40:89:bf:7d:bc:9d:
         4b:28:12:0c:9c:e3:00:b7:b0:9e:a3:54:e1:46:b0:20:40:d2:
         96:89:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org