Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32322d3232203d3e20323637393939.roa
File:                     34352e3136372e3130382e302f32322d3232203d3e20323637393939.roa (raw, json)
Hash identifier:          6e8pAgU/+iLe5lWM/d0lOAskq1aDgGUVhYIpSUS2PPk=
Subject key identifier:   54:C2:F4:5D:7D:56:DB:28:B4:56:3E:74:47:DE:24:D1:3E:66:7A:8F
Certificate issuer:       /CN=968E5CAEACB1D4F34255AEBF51A78C194056E1DC
Certificate serial:       3BFB4F37E2ECFCB9098D4957884AE7432763E853
Authority key identifier: 96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32322d3232203d3e20323637393939.roa
Signing time:             Wed 28 Sep 2022 18:50:36 +0000
ROA not before:           Wed 28 Sep 2022 18:45:36 +0000
ROA not after:            Wed 27 Sep 2023 18:50:36 +0000
asID:                     267999
IP address blocks:        45.167.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fb:4f:37:e2:ec:fc:b9:09:8d:49:57:88:4a:e7:43:27:63:e8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968E5CAEACB1D4F34255AEBF51A78C194056E1DC
        Validity
            Not Before: Sep 28 18:45:36 2022 GMT
            Not After : Sep 27 18:50:36 2023 GMT
        Subject: CN=54C2F45D7D56DB28B4563E7447DE24D13E667A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:8f:b3:88:d1:69:d5:bf:b9:9e:5e:53:84:
                    74:fc:5a:9f:57:2d:f4:96:8d:71:77:6d:f2:78:8b:
                    a2:9d:3e:f1:94:d0:36:c4:1d:f2:42:45:87:ec:1c:
                    ec:75:2a:d9:8f:d8:50:55:92:6d:cd:89:b8:0d:c3:
                    99:a3:6d:f4:ef:92:e1:04:0a:6e:a2:db:9d:82:06:
                    53:fd:ab:c2:bb:8b:d4:68:a7:1a:be:7a:7e:51:46:
                    65:cd:9d:d3:f9:a0:55:d9:1f:ab:b1:64:c6:42:c6:
                    10:b0:8b:4e:5b:c3:d0:23:68:6c:51:77:09:2b:89:
                    23:b2:53:d9:4b:50:70:4a:6a:7d:36:ea:2e:39:a7:
                    73:11:0e:24:c5:df:63:ca:ff:65:6b:ae:a2:bb:6f:
                    50:e1:fa:2b:32:41:d8:00:4d:5b:04:fe:7c:3a:90:
                    e6:84:12:a4:bc:01:76:dc:ca:51:76:c1:cc:ff:99:
                    ad:5f:7a:83:69:30:12:89:a6:93:53:6c:15:31:23:
                    37:4e:b4:86:23:9e:5f:50:af:4b:26:55:2a:72:dc:
                    81:f8:2e:43:58:ed:df:62:25:88:50:76:39:0e:db:
                    a2:3a:d5:71:5c:17:60:a1:a6:64:f8:2d:0c:fa:99:
                    70:2c:26:f6:6a:bb:72:d2:b8:c0:65:2a:f8:b2:4c:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C2:F4:5D:7D:56:DB:28:B4:56:3E:74:47:DE:24:D1:3E:66:7A:8F
            X509v3 Authority Key Identifier:
                keyid:96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32322d3232203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:7c:26:30:53:bb:83:2a:aa:c1:df:8f:b7:2f:4f:76:aa:1e:
         ac:2e:e0:c9:1e:3b:dd:1f:0b:16:31:19:e1:d3:5e:40:49:78:
         92:0c:71:8c:2f:14:02:93:0c:54:2c:6e:6f:b5:d5:08:c2:fd:
         e8:82:9b:ca:e4:f2:ee:e5:27:84:51:d5:a2:23:51:6f:f1:dc:
         e4:f3:b2:8c:7b:d4:30:d7:64:8e:74:71:b6:9c:53:15:e3:2a:
         06:b2:4f:6e:ab:c4:f3:07:ce:32:bb:9a:21:81:59:de:79:07:
         f7:9c:6c:8a:fc:60:4f:7e:b7:d9:d6:97:17:c1:cd:92:56:4d:
         11:54:6b:4b:1a:36:87:09:ba:7a:23:33:b6:a5:ad:d0:3e:86:
         71:49:cb:ac:78:82:6a:ec:86:49:6b:e5:d2:57:73:6f:c8:78:
         4b:93:9e:ce:a5:06:34:a1:fd:27:52:f0:74:1f:2b:f9:b2:be:
         41:11:28:61:39:3f:16:14:a6:10:02:b3:65:16:28:53:91:8d:
         c4:48:10:8e:1c:2c:ac:2b:29:52:53:f7:e0:9d:ae:9b:0d:5a:
         7b:99:f9:e6:70:33:6b:1f:5a:94:16:12:20:75:8b:06:dc:5b:
         83:d9:b9:92:4a:61:0c:9f:30:f2:4b:8c:e7:ce:d5:4a:ac:8d:
         af:b6:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org