Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132322e302f32342d3234203d3e20323637303132.roa
File:                     34352e3232372e3132322e302f32342d3234203d3e20323637303132.roa (raw, json)
Hash identifier:          fKqHPinOZ1u/Et8gUTJTqTUrVnmsLduC0kWchr8qbmg=
Subject key identifier:   72:2C:53:CA:0A:4F:38:21:23:BB:F2:0E:B4:D5:E4:B2:13:E3:01:74
Certificate issuer:       /CN=524903D80649F057B87931C5F6D861489C4593B7
Certificate serial:       192C6D21FC94218862513CB88BE034102AB1B1E4
Authority key identifier: 52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132322e302f32342d3234203d3e20323637303132.roa
Signing time:             Mon 24 Jan 2022 16:10:19 +0000
ROA not before:           Mon 24 Jan 2022 16:05:19 +0000
ROA not after:            Mon 23 Jan 2023 16:10:19 +0000
asID:                     267012
IP address blocks:        45.227.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2c:6d:21:fc:94:21:88:62:51:3c:b8:8b:e0:34:10:2a:b1:b1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524903D80649F057B87931C5F6D861489C4593B7
        Validity
            Not Before: Jan 24 16:05:19 2022 GMT
            Not After : Jan 23 16:10:19 2023 GMT
        Subject: CN=722C53CA0A4F382123BBF20EB4D5E4B213E30174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:77:d5:67:4f:eb:ca:10:de:bf:27:86:d1:
                    2a:f8:18:48:84:9a:6f:90:fd:a2:69:ad:61:c8:06:
                    4a:70:74:cf:e7:65:6a:b8:a3:f2:6a:de:3d:0a:92:
                    a2:41:4f:96:17:34:ef:0a:94:02:73:08:ef:2f:60:
                    ad:4a:5d:4c:97:f1:76:7d:11:c0:50:6e:9f:51:7e:
                    da:0f:d0:55:b0:33:c0:be:35:79:c7:ba:ef:ce:e3:
                    d2:b4:a2:65:28:e4:6b:6f:e5:61:b5:1b:c2:9c:76:
                    2a:02:63:ff:a6:69:d9:96:9b:d0:35:92:b2:27:67:
                    e0:be:d0:ac:f0:08:6d:8c:6a:23:8a:97:dd:33:bd:
                    99:b5:15:cf:6e:c9:2d:99:92:d5:31:95:56:96:02:
                    5a:ed:58:2e:86:65:37:f7:21:b0:e6:2f:22:3b:c9:
                    a5:59:26:3a:f4:91:ff:64:c5:9a:37:7e:f2:5f:23:
                    50:fc:84:fa:c5:ed:d8:cd:c0:08:c7:01:03:8c:38:
                    2e:8d:3d:d7:14:bd:0b:14:95:3d:11:d2:83:3c:71:
                    45:64:d5:3b:23:0d:1d:75:d5:f6:a7:e8:c6:b6:0c:
                    11:cb:78:33:f1:60:59:e2:4e:ed:65:5b:d5:9b:3b:
                    7f:25:a6:d5:d9:3b:62:6e:13:d7:19:ac:59:14:73:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:53:CA:0A:4F:38:21:23:BB:F2:0E:B4:D5:E4:B2:13:E3:01:74
            X509v3 Authority Key Identifier:
                keyid:52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/524903D80649F057B87931C5F6D861489C4593B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132322e302f32342d3234203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:90:e4:27:e6:94:ee:ca:bd:ed:f5:2e:5e:0d:a1:fe:db:31:
         9c:b2:1a:1c:90:ff:47:ce:91:7a:88:87:60:e0:ca:3e:2e:b2:
         ca:b6:b3:8e:5b:f7:f3:3e:94:a8:ea:74:15:35:f1:11:05:7b:
         a0:18:72:6f:eb:88:ec:56:18:9d:b8:13:49:39:7d:85:d8:77:
         5c:2b:b0:ad:1f:20:0a:25:a1:bd:b5:44:e8:0b:71:50:38:3b:
         b9:83:fc:8a:cf:b1:2f:be:e9:7e:9a:be:72:66:0e:28:02:b0:
         82:a4:cd:2a:1b:ec:2b:a9:4a:02:6f:c9:0f:de:97:3c:a5:dc:
         b1:4b:18:ac:fa:6d:98:f2:3f:7c:e6:c6:49:07:be:31:8c:bf:
         a2:5f:7b:80:cd:f8:24:d5:e4:a4:a6:a4:fc:85:ac:97:ae:00:
         1b:61:5f:5e:23:9c:04:ae:17:c3:46:a9:75:79:a9:23:c4:48:
         b3:6b:2b:0f:f0:62:9c:7f:e7:a2:2c:d4:0b:fc:0f:7b:1e:49:
         2f:7c:23:cb:4d:8c:9e:06:e2:df:81:0a:d4:9e:95:5e:a6:48:
         5f:2b:31:65:b5:25:f4:72:2a:ee:c3:88:0c:96:5e:2f:62:79:
         59:0c:0c:45:5a:74:44:52:c8:c3:50:27:f3:04:b5:c9:df:b7:
         b1:81:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org