Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3332203d3e20323637393931.roa
File:                     34352e3136372e35322e302f32322d3332203d3e20323637393931.roa (raw, json)
Hash identifier:          Y0SrXglHeZO0CMnP60ngwW5+ytvY+DTBc4NZ4RkA6Gs=
Subject key identifier:   7A:8C:74:9F:1B:E7:85:36:28:23:1B:B3:12:33:C0:07:E1:5F:C0:1A
Certificate issuer:       /CN=1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56
Certificate serial:       2187696BA7982951405FE329B0DB05D9CA380545
Authority key identifier: 1B:DF:FD:C9:E6:2C:A5:8F:E7:D6:BC:AB:0C:4F:21:8A:40:0A:5D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3332203d3e20323637393931.roa
Signing time:             Sat 20 Apr 2024 23:57:09 +0000
ROA not before:           Sat 20 Apr 2024 23:52:09 +0000
ROA not after:            Sat 19 Apr 2025 23:57:09 +0000
asID:                     267991
IP address blocks:        45.167.52.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:87:69:6b:a7:98:29:51:40:5f:e3:29:b0:db:05:d9:ca:38:05:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56
        Validity
            Not Before: Apr 20 23:52:09 2024 GMT
            Not After : Apr 19 23:57:09 2025 GMT
        Subject: CN=7A8C749F1BE7853628231BB31233C007E15FC01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:55:00:b2:18:56:0f:01:00:19:d5:7d:03:
                    40:5e:fd:4a:d8:e5:34:47:03:3e:d3:2a:d1:93:55:
                    54:b3:f4:63:53:43:53:33:64:33:7d:6f:72:17:db:
                    0c:61:8b:e5:ca:2f:b9:54:50:9a:d6:aa:76:b6:65:
                    d1:2c:1a:9a:b8:b3:ea:31:e2:5a:23:61:b5:db:81:
                    63:18:a2:82:c2:a4:13:ed:1a:33:b4:e1:4a:b6:e2:
                    26:0f:9c:44:a8:ef:a3:9b:1d:06:59:3f:10:fd:09:
                    23:94:56:7c:3b:70:8d:3e:66:b8:2d:67:3c:13:30:
                    5f:47:2c:ff:d4:3f:2f:78:9b:ce:d5:e2:2d:aa:6e:
                    08:eb:0c:bf:7d:c3:a0:65:15:ce:9b:42:6d:bf:c7:
                    a6:90:ac:bc:a4:d6:23:13:70:9e:14:80:8f:50:75:
                    87:70:41:0f:40:3a:63:57:06:f6:b7:a7:d1:34:d2:
                    d2:a5:a0:2f:c0:29:6c:60:f5:74:f5:0e:49:a0:e7:
                    3f:9b:6f:45:ae:aa:27:39:7c:56:3c:a6:99:f1:56:
                    bd:94:a8:3e:e0:9b:26:59:79:de:ca:c5:1f:94:c9:
                    fd:97:48:cf:dd:91:d2:4f:d5:1b:34:2d:18:7b:35:
                    40:15:18:ec:1c:c3:8e:81:8d:1a:a8:df:47:7b:22:
                    5e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8C:74:9F:1B:E7:85:36:28:23:1B:B3:12:33:C0:07:E1:5F:C0:1A
            X509v3 Authority Key Identifier:
                keyid:1B:DF:FD:C9:E6:2C:A5:8F:E7:D6:BC:AB:0C:4F:21:8A:40:0A:5D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3332203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:09:58:f7:2f:1b:5e:77:35:e5:f7:69:af:b0:23:97:54:e3:
         d2:6b:74:5b:61:8d:cc:03:44:6e:3a:3c:0a:55:83:1b:a4:ed:
         ae:e0:57:82:45:0c:1c:59:58:30:44:f3:b7:85:17:e7:97:5d:
         bb:7f:14:1e:8f:8b:fd:b4:51:f0:5b:38:4f:67:fb:61:d5:7e:
         c6:01:d2:e7:ff:f4:d6:d0:fd:fc:97:a7:07:40:0c:4e:48:b8:
         be:7a:40:03:aa:68:a2:08:f7:3e:6d:05:01:ef:b0:a2:1b:d5:
         a3:a2:b7:e2:b3:90:47:50:c6:3f:69:0f:66:e1:b6:e1:b0:0d:
         e6:3d:88:79:70:22:1f:cb:1d:49:2d:82:16:3b:42:b9:ee:6c:
         80:f2:05:0c:95:1f:df:78:52:e4:ed:b2:d0:dc:53:69:49:10:
         4b:1e:ca:35:70:ff:e2:47:a4:e5:db:89:29:b4:84:8a:d8:b4:
         4c:b5:ea:55:e1:ec:cf:21:bc:c2:d3:56:9e:93:c7:16:d2:86:
         5f:10:f1:30:d6:69:b7:b2:a7:85:c3:1b:af:e6:d4:6f:c1:ea:
         de:82:1f:73:46:84:bd:d0:8e:2f:ef:95:19:6d:1b:63:da:61:
         ed:48:f0:06:36:cb:be:0f:7e:00:d3:b3:1e:fc:5b:40:f9:b2:
         65:92:0d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org