Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134312e302f32342d3234203d3e20323639353332.roa
File:                     34352e3138382e3134312e302f32342d3234203d3e20323639353332.roa (raw, json)
Hash identifier:          FyAJ1jUfles+fsls4xLf/cTB+D96J4amYPCYdQ27ym4=
Subject key identifier:   4C:D3:DF:E6:7B:72:EE:75:73:2C:0A:F4:A7:6B:3F:68:C4:12:75:B3
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       57E510ABB81213D7B88337226D2A46F59AB3D39E
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134312e302f32342d3234203d3e20323639353332.roa
Signing time:             Sat 10 Sep 2022 21:00:00 +0000
ROA not before:           Sat 10 Sep 2022 20:55:00 +0000
ROA not after:            Sat 09 Sep 2023 21:00:00 +0000
asID:                     269532
IP address blocks:        45.188.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e5:10:ab:b8:12:13:d7:b8:83:37:22:6d:2a:46:f5:9a:b3:d3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Sep 10 20:55:00 2022 GMT
            Not After : Sep  9 21:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:41:81:a8:91:22:13:dc:20:20:ad:ef:3e:cd:
                    99:b4:41:bd:51:9e:cb:dc:d2:58:f8:e6:70:14:24:
                    1e:d5:e0:1b:73:81:f6:a6:7a:db:c8:a1:2e:67:78:
                    23:87:bd:dd:5f:d8:94:5f:23:c0:98:86:a3:0c:c5:
                    e1:68:8c:92:dd:db:07:bb:e4:fd:cf:42:a4:9e:5c:
                    c0:e9:3a:4a:6a:9b:e6:d0:74:41:e1:65:cf:d3:e6:
                    9f:16:bc:34:39:64:c0:3d:a0:4d:5e:db:cd:8b:51:
                    28:f2:6c:bb:e7:aa:08:c7:4d:62:38:03:d8:28:28:
                    53:16:8c:78:ba:0b:0e:09:af:7d:3e:7d:b0:8e:54:
                    2f:1b:ac:e1:25:7f:e0:7a:7f:12:5f:7e:ee:42:fb:
                    8f:4e:cd:8c:80:3b:a3:9a:e0:f1:82:b7:ed:33:fd:
                    aa:b2:bd:a8:97:bb:ed:a7:ba:a2:13:f1:9f:80:d1:
                    98:13:69:5b:01:2f:eb:54:07:7e:08:2e:b0:36:ea:
                    42:d5:29:be:d5:97:97:7f:32:77:4e:ff:ce:77:b3:
                    b8:5d:79:02:21:39:91:e3:20:d4:2f:32:4e:40:6b:
                    98:fa:e6:3a:07:14:03:75:92:34:c7:a6:30:01:71:
                    b8:fd:6e:4e:d6:2d:4c:80:56:f5:0c:01:0d:6f:5e:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:DF:E6:7B:72:EE:75:73:2C:0A:F4:A7:6B:3F:68:C4:12:75:B3
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134312e302f32342d3234203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:bf:0e:f3:79:2e:bf:64:8c:42:4b:5b:fd:be:c4:b4:42:
         16:72:89:ff:8b:b5:5f:16:18:09:3f:17:ef:8c:d9:9a:06:05:
         3d:69:79:0d:e6:e0:94:bd:2a:a7:3a:cb:32:c1:03:5a:b8:4b:
         94:ec:02:14:55:55:9f:43:73:0a:c6:57:87:98:a3:6c:4f:52:
         41:70:60:8e:86:2b:93:d2:4e:09:ab:3c:b8:e9:d8:33:66:41:
         f7:6c:b4:52:35:84:b9:e6:17:7a:db:83:76:8a:2d:62:7c:12:
         ce:c7:63:b0:c6:c7:fa:0e:3e:05:bb:08:13:0b:62:82:2e:db:
         2a:32:91:37:10:ba:94:d2:6d:28:e8:d6:7e:5f:52:95:27:98:
         46:0f:48:53:d8:78:35:39:5e:9b:f1:85:8a:7c:70:8f:3d:e2:
         73:62:91:52:4f:b2:66:a7:f8:96:67:49:a9:a4:07:f8:a0:db:
         b9:5a:6b:e3:90:c2:46:e1:55:57:ed:be:2d:91:64:0e:91:d0:
         34:53:d4:62:d6:0b:36:b8:74:90:6d:13:8c:93:b9:02:0b:1c:
         6a:17:4e:ec:5b:3e:f8:c4:51:0d:99:eb:a0:81:7d:b7:e8:d1:
         17:98:5d:4a:2f:9f:3c:4b:bd:26:46:35:9a:22:5f:4f:f2:f5:
         ad:e7:94:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org