Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39342e3133322f33322d3332203d3e20323636393932.roa
File:                     34352e3232362e39342e3133322f33322d3332203d3e20323636393932.roa (raw, json)
Hash identifier:          JSNqnKIYi6V+0NNLlVmhvDa6L16YJy8WAjhWQr7pElo=
Subject key identifier:   C5:F2:10:34:4D:5D:80:CB:2A:F9:2B:EF:51:A6:C9:A2:6D:89:97:D5
Certificate issuer:       /CN=4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9
Certificate serial:       49470F7FB4F053E38C49AC84299DA3266D77BAD9
Authority key identifier: 4B:32:F7:C9:FF:0F:3B:6E:67:EC:94:88:DB:28:59:92:D0:B8:29:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39342e3133322f33322d3332203d3e20323636393932.roa
Signing time:             Thu 08 Sep 2022 19:44:00 +0000
ROA not before:           Thu 08 Sep 2022 19:39:00 +0000
ROA not after:            Thu 07 Sep 2023 19:44:00 +0000
asID:                     266992
IP address blocks:        45.226.94.132/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:47:0f:7f:b4:f0:53:e3:8c:49:ac:84:29:9d:a3:26:6d:77:ba:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9
        Validity
            Not Before: Sep  8 19:39:00 2022 GMT
            Not After : Sep  7 19:44:00 2023 GMT
        Subject: CN=3082010A0282010100B64309895EA8F7461277A1D08FCA2430CA35E0B65AA4763144388C194F2E8851D2E479AAF9DDC347F8FD6C61F644E51F71B295BEEA06C02FC532703B0A7839AEF1A5D3EEA115BB13D0B89C37429EB495B40BC6288ADCB8EC58E49344675A951ADB605621D390F5EBF45D87A6DAC434BED031AA2C2339292898C10460F70AEDE1F2D4D3DDA17DD4100E1F832FD31922AEC346EE730FC3F8D9BE333E9A181D8C4861826BB7B6CD1CBEBCEF6EC0717B472013F7549EB4D3126960A1DEDC0C3DEDE0BFA2E8AFD0CCF5EFD6030E861D98167BC9BA191D8B4148C41C1FFFD12500F48E9C206BEB2B971772C55B25E7A9D23C73E4BB983605D12F9503D9D75209564CC50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:09:89:5e:a8:f7:46:12:77:a1:d0:8f:ca:
                    24:30:ca:35:e0:b6:5a:a4:76:31:44:38:8c:19:4f:
                    2e:88:51:d2:e4:79:aa:f9:dd:c3:47:f8:fd:6c:61:
                    f6:44:e5:1f:71:b2:95:be:ea:06:c0:2f:c5:32:70:
                    3b:0a:78:39:ae:f1:a5:d3:ee:a1:15:bb:13:d0:b8:
                    9c:37:42:9e:b4:95:b4:0b:c6:28:8a:dc:b8:ec:58:
                    e4:93:44:67:5a:95:1a:db:60:56:21:d3:90:f5:eb:
                    f4:5d:87:a6:da:c4:34:be:d0:31:aa:2c:23:39:29:
                    28:98:c1:04:60:f7:0a:ed:e1:f2:d4:d3:dd:a1:7d:
                    d4:10:0e:1f:83:2f:d3:19:22:ae:c3:46:ee:73:0f:
                    c3:f8:d9:be:33:3e:9a:18:1d:8c:48:61:82:6b:b7:
                    b6:cd:1c:be:bc:ef:6e:c0:71:7b:47:20:13:f7:54:
                    9e:b4:d3:12:69:60:a1:de:dc:0c:3d:ed:e0:bf:a2:
                    e8:af:d0:cc:f5:ef:d6:03:0e:86:1d:98:16:7b:c9:
                    ba:19:1d:8b:41:48:c4:1c:1f:ff:d1:25:00:f4:8e:
                    9c:20:6b:eb:2b:97:17:72:c5:5b:25:e7:a9:d2:3c:
                    73:e4:bb:98:36:05:d1:2f:95:03:d9:d7:52:09:56:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F2:10:34:4D:5D:80:CB:2A:F9:2B:EF:51:A6:C9:A2:6D:89:97:D5
            X509v3 Authority Key Identifier:
                keyid:4B:32:F7:C9:FF:0F:3B:6E:67:EC:94:88:DB:28:59:92:D0:B8:29:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39342e3133322f33322d3332203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.94.132/32

    Signature Algorithm: sha256WithRSAEncryption
         55:50:48:e0:01:93:45:0d:ca:0a:f4:32:74:63:48:ad:f8:57:
         f7:51:b3:89:57:e4:a4:99:e2:79:c4:87:82:b7:7f:c5:a9:82:
         74:c6:f3:5b:16:e2:46:68:36:9b:41:c7:2b:fa:d9:c9:40:bf:
         87:f5:a4:de:0f:ef:ae:2d:52:79:db:ee:f0:f0:5e:e4:ee:e6:
         c9:d1:97:bd:22:21:62:35:2d:72:18:7c:11:da:54:8e:a1:8d:
         af:a2:ac:1f:06:09:df:9e:fa:7e:26:e4:0e:72:b3:fb:e2:f7:
         13:eb:00:59:8d:70:69:2d:4f:6b:cf:1e:cd:e9:af:37:12:d5:
         72:88:01:f5:cb:dd:50:0a:c6:5a:fd:a2:76:3a:1f:e9:e7:79:
         eb:a6:57:40:fb:dd:4f:df:ad:24:04:b0:9c:ab:d9:1f:4a:03:
         f4:a6:d0:2a:c1:2c:1a:47:9c:86:df:9e:17:18:9e:56:af:f8:
         16:c1:ac:36:40:01:32:47:d4:a8:20:64:76:d4:1e:1b:77:26:
         70:33:2e:3e:8f:23:36:bf:e3:bc:35:d5:19:61:3b:13:7c:97:
         ce:6e:6a:4f:20:c3:69:8a:6a:3f:52:41:6f:5b:b4:e4:fc:35:
         b9:87:b8:34:db:b7:28:5e:05:d4:71:02:ff:b1:8f:df:8d:12:
         03:94:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org