Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32322d3234203d3e20323636353833.roa
File:                     34352e3232382e31322e302f32322d3234203d3e20323636353833.roa (raw, json)
Hash identifier:          9wwHSs9fMPpQmXBiYy6nUx2Gyvv12fSqLJuhXplazqo=
Subject key identifier:   00:42:75:85:D1:E0:80:F1:C8:AA:77:EB:79:D3:58:B9:06:B6:EA:3B
Certificate issuer:       /CN=CACFB04CE41DC1652185A18E41D1795590416E50
Certificate serial:       3A4BAE0AA77696C6A26D36EFA84E731D46E5B815
Authority key identifier: CA:CF:B0:4C:E4:1D:C1:65:21:85:A1:8E:41:D1:79:55:90:41:6E:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CACFB04CE41DC1652185A18E41D1795590416E50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32322d3234203d3e20323636353833.roa
Signing time:             Tue 19 Apr 2022 12:49:04 +0000
ROA not before:           Tue 19 Apr 2022 12:44:04 +0000
ROA not after:            Tue 18 Apr 2023 12:49:04 +0000
asID:                     266583
IP address blocks:        45.228.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4b:ae:0a:a7:76:96:c6:a2:6d:36:ef:a8:4e:73:1d:46:e5:b8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACFB04CE41DC1652185A18E41D1795590416E50
        Validity
            Not Before: Apr 19 12:44:04 2022 GMT
            Not After : Apr 18 12:49:04 2023 GMT
        Subject: CN=00427585D1E080F1C8AA77EB79D358B906B6EA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:80:8f:de:40:fd:b3:f2:13:b7:8c:8b:67:
                    b4:f7:77:bd:fa:cf:86:bb:22:7d:79:cb:94:f6:1f:
                    d8:b8:a3:ef:55:a0:a6:e2:b7:24:81:ca:82:be:93:
                    2a:b8:fc:d8:14:12:5d:83:e8:88:e6:86:c5:39:25:
                    85:a0:53:b5:23:d0:09:d5:9d:76:c7:08:e0:5e:ce:
                    bc:10:09:da:bb:22:5a:fe:b6:e6:8a:41:78:35:e7:
                    a8:37:76:6f:d5:a5:9c:74:17:ba:52:e0:b9:97:18:
                    be:a7:8f:22:3b:c9:b4:da:fc:17:45:3b:ab:13:b3:
                    94:7d:4f:be:c9:24:a0:bb:e3:8a:56:99:d2:be:94:
                    be:05:f5:ca:36:ea:85:fd:80:bc:43:ec:49:c8:06:
                    f1:f5:b3:97:5f:53:01:f1:9c:57:30:94:7c:d5:8d:
                    ff:46:40:2a:4e:b6:81:b8:ce:88:5f:bd:8d:5c:c8:
                    82:d1:57:40:cb:c8:2d:1a:2e:43:22:1a:99:ba:25:
                    5d:ad:14:f5:72:f4:1c:d8:dc:79:1d:50:a9:9a:8f:
                    87:c8:91:6d:02:5a:84:98:41:b6:c4:d3:92:80:20:
                    ae:6d:e1:45:20:1b:70:35:ae:e3:9a:8d:0e:02:3d:
                    71:ce:fd:01:fe:62:5b:a1:a1:81:92:af:00:05:09:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:42:75:85:D1:E0:80:F1:C8:AA:77:EB:79:D3:58:B9:06:B6:EA:3B
            X509v3 Authority Key Identifier:
                keyid:CA:CF:B0:4C:E4:1D:C1:65:21:85:A1:8E:41:D1:79:55:90:41:6E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/CACFB04CE41DC1652185A18E41D1795590416E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CACFB04CE41DC1652185A18E41D1795590416E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32322d3234203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:75:a6:6c:9b:d1:75:d7:fa:74:ff:3c:06:b9:5e:05:05:b0:
         a1:ca:a3:31:db:3e:62:44:60:c1:23:05:d1:bb:8d:63:4d:cd:
         8e:8d:85:9e:fc:45:77:39:9f:82:6b:17:7b:d1:17:b6:3b:c8:
         24:4d:13:c0:53:4c:b8:47:3b:01:ba:28:1e:1c:61:94:a2:ed:
         ff:d6:a9:c7:d0:75:f6:05:2b:46:d7:5e:45:7f:8f:35:61:4e:
         a9:a0:85:ad:c3:95:49:4c:73:46:d1:a0:5b:78:1d:85:c4:12:
         66:c4:03:f8:74:e6:59:b6:95:04:7c:32:e5:fc:c7:7b:a9:f3:
         32:bf:b9:f6:11:32:8c:2d:fe:1b:d1:f6:96:17:27:24:6e:57:
         ad:26:9e:1a:27:90:5e:25:cd:9c:78:4d:f3:95:33:2e:42:1d:
         e8:23:6e:7d:01:4d:b7:4b:29:11:67:20:2c:f6:35:1d:b8:ad:
         d8:04:ad:8d:5a:12:37:9e:55:ad:d5:34:6f:f6:43:03:53:b6:
         7e:38:3d:31:85:b2:f2:eb:8f:b6:8b:f8:c7:3d:68:89:86:0e:
         4a:d3:fb:f9:d7:06:6e:cd:74:9a:88:8c:fb:03:21:7a:61:f7:
         26:cd:5f:4f:7d:6c:81:a8:a5:80:ca:a6:00:44:18:d8:52:0f:
         bf:8f:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org