Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e302e302f32322d3232203d3e20323638343330.roa
File:                     34352e3136312e302e302f32322d3232203d3e20323638343330.roa (raw, json)
Hash identifier:          Hh3Dd52dpAonUsTKGQ1hBSI6ddoV1OnyBDJsFHN2Ha4=
Subject key identifier:   77:B9:12:2C:CC:72:38:26:B8:A8:09:8A:62:B5:66:00:F5:DF:9E:DF
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       75FDA6CE50F6DF69265935D9C04D90FDE032B10E
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e302e302f32322d3232203d3e20323638343330.roa
Signing time:             Tue 15 Mar 2022 16:26:01 +0000
ROA not before:           Tue 15 Mar 2022 16:21:01 +0000
ROA not after:            Tue 14 Mar 2023 16:26:01 +0000
asID:                     268430
IP address blocks:        45.161.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fd:a6:ce:50:f6:df:69:26:59:35:d9:c0:4d:90:fd:e0:32:b1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Mar 15 16:21:01 2022 GMT
            Not After : Mar 14 16:26:01 2023 GMT
        Subject: CN=3082010A0282010100E980FC646E452C14DD423C7817BF09B000EC1C2E5999E459ADA9CCE14D6B1655BCB4642C0FAFB19B58302FC1D049B606BF9DD67FF2C01601520AA57DF4545CD51B0681F7AF69C9FB3343B2013D0421BC4C801C576BE4BB9A6035DAFAF84D2564F6968DB59178CC8FE9C2933274B001107CD969DDE9CD5D93E5201279C7521B1A7A8E87FDA51F270FD2B13C316C0152AD4AD83F1BB29F88C31B0EB62FDEE9AA58B2E6910493A555F361F9F6C988E1D4701054D1FC27CDA7B16F02D5572DA09B64880A5CB6D4C15584FD06CAE470F61A43B46F72BF0E0239B8EE6A417955D8FC829C93645548FDEA0FF6C613CBC6422DBA933EEAA53921EC26BF79CCF3AC9ED2A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:fc:64:6e:45:2c:14:dd:42:3c:78:17:bf:
                    09:b0:00:ec:1c:2e:59:99:e4:59:ad:a9:cc:e1:4d:
                    6b:16:55:bc:b4:64:2c:0f:af:b1:9b:58:30:2f:c1:
                    d0:49:b6:06:bf:9d:d6:7f:f2:c0:16:01:52:0a:a5:
                    7d:f4:54:5c:d5:1b:06:81:f7:af:69:c9:fb:33:43:
                    b2:01:3d:04:21:bc:4c:80:1c:57:6b:e4:bb:9a:60:
                    35:da:fa:f8:4d:25:64:f6:96:8d:b5:91:78:cc:8f:
                    e9:c2:93:32:74:b0:01:10:7c:d9:69:dd:e9:cd:5d:
                    93:e5:20:12:79:c7:52:1b:1a:7a:8e:87:fd:a5:1f:
                    27:0f:d2:b1:3c:31:6c:01:52:ad:4a:d8:3f:1b:b2:
                    9f:88:c3:1b:0e:b6:2f:de:e9:aa:58:b2:e6:91:04:
                    93:a5:55:f3:61:f9:f6:c9:88:e1:d4:70:10:54:d1:
                    fc:27:cd:a7:b1:6f:02:d5:57:2d:a0:9b:64:88:0a:
                    5c:b6:d4:c1:55:84:fd:06:ca:e4:70:f6:1a:43:b4:
                    6f:72:bf:0e:02:39:b8:ee:6a:41:79:55:d8:fc:82:
                    9c:93:64:55:48:fd:ea:0f:f6:c6:13:cb:c6:42:2d:
                    ba:93:3e:ea:a5:39:21:ec:26:bf:79:cc:f3:ac:9e:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:12:2C:CC:72:38:26:B8:A8:09:8A:62:B5:66:00:F5:DF:9E:DF
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e302e302f32322d3232203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:1b:22:d9:1d:26:9d:7e:f6:df:8b:da:0e:ae:7c:5b:1e:19:
         d8:a4:83:bb:f1:26:ab:ea:8a:7f:88:63:86:da:4d:2a:d1:fb:
         09:65:b1:0f:88:5d:3c:6c:c2:84:95:3d:87:19:24:ff:e0:0e:
         30:12:de:ce:1f:76:df:0c:f4:54:94:de:04:86:f4:78:4d:d0:
         b6:38:db:06:36:49:d2:70:5b:d0:77:e0:84:96:2e:80:a6:9d:
         a8:b7:61:2f:a4:c5:a1:09:b1:1f:cc:a6:6e:33:5c:4e:86:36:
         2b:0b:05:d9:b6:3a:c1:6d:ca:b1:19:32:b6:c5:57:55:75:a6:
         93:82:7f:52:51:41:3c:4a:7b:c8:be:6c:56:30:4b:85:3f:78:
         00:a2:c3:79:d0:99:9b:c9:99:a3:f3:56:c7:18:4d:00:1f:54:
         a5:5e:60:89:83:e1:4b:21:5a:c9:87:3d:2a:2e:95:bc:7d:98:
         be:8d:69:9a:4d:0b:6a:dc:87:98:e7:9a:c8:bf:1f:e2:0d:48:
         b7:48:e1:2e:12:c2:9a:01:3a:20:6e:77:79:e2:fa:0c:03:dc:
         62:da:c9:43:7a:f6:91:22:d1:e0:e3:82:ca:bb:87:24:11:85:
         a0:c6:23:d2:5a:1d:53:15:e9:49:db:26:96:a4:90:70:72:64:
         c2:4b:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org