Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235322e302f32322d3232203d3e20323638383437.roa
File:                     34352e3137332e3235322e302f32322d3232203d3e20323638383437.roa (raw, json)
Hash identifier:          en9x8rREXmJ+ZjfVS8lL/bpEL+O1fZvukSMscmxLJ4Y=
Subject key identifier:   A4:16:20:9C:FD:6D:4D:69:0F:00:56:91:53:1F:9D:02:5A:A7:44:7B
Certificate issuer:       /CN=AB42D964E5098F72C8A0F7319CB3924F4BE2B03A
Certificate serial:       3FB3E3972FEBB4327E4BD2B17381423E7EDA6264
Authority key identifier: AB:42:D9:64:E5:09:8F:72:C8:A0:F7:31:9C:B3:92:4F:4B:E2:B0:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB42D964E5098F72C8A0F7319CB3924F4BE2B03A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235322e302f32322d3232203d3e20323638383437.roa
Signing time:             Tue 19 Jul 2022 18:34:49 +0000
ROA not before:           Tue 19 Jul 2022 18:29:49 +0000
ROA not after:            Tue 18 Jul 2023 18:34:49 +0000
asID:                     268847
IP address blocks:        45.173.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b3:e3:97:2f:eb:b4:32:7e:4b:d2:b1:73:81:42:3e:7e:da:62:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB42D964E5098F72C8A0F7319CB3924F4BE2B03A
        Validity
            Not Before: Jul 19 18:29:49 2022 GMT
            Not After : Jul 18 18:34:49 2023 GMT
        Subject: CN=A416209CFD6D4D690F005691531F9D025AA7447B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:9b:85:b4:98:1c:12:d4:4f:eb:48:6c:28:
                    e2:05:8d:42:b5:1d:b5:29:b9:52:f2:7b:5b:c9:8f:
                    3f:4b:f1:37:28:79:6e:6e:ab:9d:d8:48:f5:9f:e3:
                    87:c8:b7:fb:ab:ff:67:2a:b7:e9:b4:b7:1a:bb:38:
                    4f:67:6f:5a:7e:62:ef:cf:62:fa:6f:04:d3:be:ff:
                    0a:97:dd:37:fc:04:0f:10:77:5e:77:c3:76:fc:c1:
                    ab:56:b8:bc:05:5c:0d:9f:6e:0f:46:92:c8:f7:e4:
                    c4:39:6c:b1:d2:bd:bc:b1:5f:99:f8:1d:a9:07:f1:
                    b4:53:0d:d5:33:85:c5:17:3c:58:be:72:42:1b:0b:
                    46:22:a1:74:8a:3e:a4:d3:d7:dc:db:46:84:e8:cf:
                    50:ca:a7:29:89:94:f4:e4:65:f5:02:a4:60:ed:16:
                    bb:19:35:be:5f:9c:13:b6:26:63:2b:5c:b1:23:15:
                    95:84:ac:e0:7c:62:87:5e:71:9c:88:d5:ce:5e:05:
                    18:dc:5a:40:2c:93:20:96:ea:46:42:b7:94:2e:ab:
                    6b:ea:79:fc:10:25:1e:71:c8:6b:94:36:fe:f2:67:
                    f5:1d:12:fd:85:82:51:27:06:f7:d0:cc:c0:32:06:
                    7d:2c:ab:13:17:2f:16:d5:9f:b5:51:45:f4:fa:70:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:16:20:9C:FD:6D:4D:69:0F:00:56:91:53:1F:9D:02:5A:A7:44:7B
            X509v3 Authority Key Identifier:
                keyid:AB:42:D9:64:E5:09:8F:72:C8:A0:F7:31:9C:B3:92:4F:4B:E2:B0:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/AB42D964E5098F72C8A0F7319CB3924F4BE2B03A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB42D964E5098F72C8A0F7319CB3924F4BE2B03A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235322e302f32322d3232203d3e20323638383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:7a:28:56:b3:4a:78:79:75:80:64:d6:71:c7:d3:a5:8d:ee:
         a6:49:9d:65:e6:98:db:c7:de:ef:9d:01:f4:4c:01:09:1f:7b:
         77:4e:7b:ee:5b:6a:41:51:3e:ec:0a:0f:b6:bd:f2:2a:0d:0d:
         e9:8d:b7:23:12:7b:91:9d:3e:b1:bd:d8:67:ad:98:49:42:af:
         32:89:0e:85:75:bc:26:6c:45:ab:75:92:04:31:c8:b3:61:31:
         1c:e0:64:de:ed:92:19:8c:9a:27:ea:ec:3b:89:d9:31:98:fe:
         49:95:a4:90:52:16:9c:72:eb:8d:18:d9:5f:58:a0:a3:7b:17:
         96:9d:c6:f8:96:37:2d:10:76:f1:4e:ad:1e:3a:0f:83:ef:9d:
         41:c4:13:67:e5:c1:a9:10:1f:50:3f:81:65:04:60:c5:76:d4:
         fb:0c:8d:7c:d3:a2:02:f0:52:c5:94:1f:43:9b:15:e7:91:e0:
         fe:23:89:55:d9:9a:58:29:a1:42:60:a2:62:ad:62:05:f8:d5:
         94:13:99:20:64:b1:97:35:34:16:bb:d0:27:8c:76:19:ff:61:
         5c:00:c1:1e:81:a8:4e:03:1e:10:6f:55:1a:b8:98:22:bd:43:
         ef:70:3b:e0:c3:f6:cf:ac:11:09:7f:1d:6f:86:82:c7:c1:79:
         fb:dd:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org