Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ChJ8aVaghMC7xHZB3mbnBnaNHLB2ugEwKryLdahg4wWt/0/34352e3136382e34342e302f32322d3234203d3e20323638303234.roa
File:                     34352e3136382e34342e302f32322d3234203d3e20323638303234.roa (raw, json)
Hash identifier:          YIFNmZoteDb6QPSsHwV45vCE7GaoBsE0+WMDbysD+EI=
Subject key identifier:   81:B1:F4:88:07:4C:25:1A:CC:04:B2:38:A1:62:C6:FC:E1:0E:69:24
Certificate issuer:       /CN=A637FAEB95B31FE816AC246B49FED485490D80B5
Certificate serial:       530E812BA0B547F9343DEFB527941415E7FD33B5
Authority key identifier: A6:37:FA:EB:95:B3:1F:E8:16:AC:24:6B:49:FE:D4:85:49:0D:80:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A637FAEB95B31FE816AC246B49FED485490D80B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ChJ8aVaghMC7xHZB3mbnBnaNHLB2ugEwKryLdahg4wWt/0/34352e3136382e34342e302f32322d3234203d3e20323638303234.roa
Signing time:             Fri 30 Jul 2021 16:46:00 +0000
ROA not before:           Fri 30 Jul 2021 16:41:00 +0000
ROA not after:            Fri 29 Jul 2022 16:46:00 +0000
asID:                     268024
IP address blocks:        45.168.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0e:81:2b:a0:b5:47:f9:34:3d:ef:b5:27:94:14:15:e7:fd:33:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A637FAEB95B31FE816AC246B49FED485490D80B5
        Validity
            Not Before: Jul 30 16:41:00 2021 GMT
            Not After : Jul 29 16:46:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:9e:b0:4c:91:ac:c7:0e:25:6e:f3:21:8a:
                    f4:09:e2:a9:c1:19:83:e7:17:42:3f:34:7a:3e:b0:
                    70:79:3b:c4:2f:24:45:4d:aa:e4:2f:84:d6:08:5b:
                    e9:fe:87:8e:aa:26:ec:fa:6a:bd:94:1e:d1:28:91:
                    2c:b5:18:6d:6e:0e:65:0c:27:2d:64:04:86:58:a1:
                    e2:7d:3c:f4:8d:e3:fb:74:46:e8:be:5c:73:42:4f:
                    80:d2:58:62:cf:90:ab:71:e2:7e:06:39:13:63:bf:
                    f7:c5:0e:57:e1:28:2e:bf:de:8b:fd:2a:3d:8a:08:
                    21:9e:28:fe:b6:2e:4a:74:68:83:2c:5f:be:4e:db:
                    97:28:bd:20:64:3b:35:fb:31:cc:64:9c:b4:ac:6d:
                    47:d9:8f:65:cd:be:db:11:0d:62:4e:c4:92:77:a7:
                    5b:87:84:b9:22:f3:da:79:1f:02:f0:1a:7a:34:36:
                    1a:92:b5:07:80:9b:95:e7:b0:bb:4b:1e:a1:b6:64:
                    d1:b0:29:30:81:bc:56:9f:93:8b:82:b3:09:b0:bc:
                    0a:fc:5f:1e:c1:44:ee:f6:19:11:c0:13:78:0b:da:
                    d3:b7:b9:16:e4:10:b7:37:43:77:1b:d6:97:b2:eb:
                    cb:05:87:d6:81:09:1d:45:56:2a:aa:f7:3f:cb:dd:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B1:F4:88:07:4C:25:1A:CC:04:B2:38:A1:62:C6:FC:E1:0E:69:24
            X509v3 Authority Key Identifier:
                keyid:A6:37:FA:EB:95:B3:1F:E8:16:AC:24:6B:49:FE:D4:85:49:0D:80:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ChJ8aVaghMC7xHZB3mbnBnaNHLB2ugEwKryLdahg4wWt/0/A637FAEB95B31FE816AC246B49FED485490D80B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A637FAEB95B31FE816AC246B49FED485490D80B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChJ8aVaghMC7xHZB3mbnBnaNHLB2ugEwKryLdahg4wWt/0/34352e3136382e34342e302f32322d3234203d3e20323638303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:83:c9:81:86:8b:6d:3f:e3:3e:96:32:b2:11:53:e8:74:74:
         93:ab:cc:e6:13:99:e6:3e:72:92:e5:91:52:2d:a7:bb:34:62:
         3e:ef:6a:20:5e:5c:1b:8a:0d:3a:d7:de:18:ff:b3:2e:f6:13:
         7d:10:81:2d:d0:c5:4c:c9:bd:fd:14:e7:fe:3b:de:e7:05:e3:
         ca:cf:4c:77:66:18:84:4c:ef:18:a6:34:39:3a:13:d4:4f:c1:
         b1:b0:44:f7:7b:c0:11:5f:d9:9c:43:79:19:20:b7:66:3c:93:
         44:b7:77:54:72:d3:42:90:af:58:c8:3a:8e:9d:b8:4f:e3:ce:
         08:43:a2:fe:b0:a6:fe:78:e7:c1:6c:8b:68:48:7e:81:4a:c6:
         61:99:7a:a0:d4:f7:28:4f:b5:cc:4a:19:fe:9f:35:c6:ec:37:
         39:3f:b0:16:56:74:f8:96:00:22:28:6b:db:73:40:a7:0c:69:
         31:7a:b4:51:1c:77:5e:b6:8a:e1:d1:66:a9:ad:11:02:5a:5f:
         e3:38:5f:6f:14:3b:e5:c1:12:dd:98:37:bf:5d:14:37:a0:ca:
         0a:aa:99:3c:be:82:42:7d:6b:3f:1e:42:06:2e:d9:9c:99:61:
         9b:27:5e:a1:4e:b0:81:b8:10:71:f6:8c:b8:cc:c3:29:ef:ab:
         75:5f:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org