Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e302e302f32342d3234203d3e20323638343330.roa
File:                     34352e3136312e302e302f32342d3234203d3e20323638343330.roa (raw, json)
Hash identifier:          PYRYFq4tJZb+OiNe7//hzsaNCB8jqRVtrxgnULPRBKc=
Subject key identifier:   2E:65:CF:80:95:6E:11:A8:F5:14:C8:DA:27:8B:27:05:E4:05:70:C1
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       2600073DAE072B98A85DD336BC09D96F1C7177E8
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e302e302f32342d3234203d3e20323638343330.roa
Signing time:             Tue 15 Mar 2022 16:26:00 +0000
ROA not before:           Tue 15 Mar 2022 16:21:00 +0000
ROA not after:            Tue 14 Mar 2023 16:26:00 +0000
asID:                     268430
IP address blocks:        45.161.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:00:07:3d:ae:07:2b:98:a8:5d:d3:36:bc:09:d9:6f:1c:71:77:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Mar 15 16:21:00 2022 GMT
            Not After : Mar 14 16:26:00 2023 GMT
        Subject: CN=3082010A0282010100DEAAA00A9E0561CE0EB92B7A4CE0FD637B84961F58EC2F8ABC4058B7F9527E56CCA2ED017208A157033A0087270517191DD42FD58A53800C35854F0F68E3CB54DF7A56AA88D6158166A4CBF83104A2CC6901C73CE358EBE6805722811598E5767853539F84D2DEC72AB105D11B013C15E075869AD257438050D55910F58932B810E66EDD3387987F6EA6FD04CCD15BA8B6295608442FAD3AAD3B9BA2B78150EF07292165610E74611EAAF232A379F8A635BFE576C093C4B28520EA541006789F127A90576766919AFBB8D28E7B6DB79C71C12991ABE34C6418885CA6F4836BD3E04A4E321E908473E83D84087E817098934D0B92BD18C1EA4FA536F213D1806D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:aa:a0:0a:9e:05:61:ce:0e:b9:2b:7a:4c:e0:
                    fd:63:7b:84:96:1f:58:ec:2f:8a:bc:40:58:b7:f9:
                    52:7e:56:cc:a2:ed:01:72:08:a1:57:03:3a:00:87:
                    27:05:17:19:1d:d4:2f:d5:8a:53:80:0c:35:85:4f:
                    0f:68:e3:cb:54:df:7a:56:aa:88:d6:15:81:66:a4:
                    cb:f8:31:04:a2:cc:69:01:c7:3c:e3:58:eb:e6:80:
                    57:22:81:15:98:e5:76:78:53:53:9f:84:d2:de:c7:
                    2a:b1:05:d1:1b:01:3c:15:e0:75:86:9a:d2:57:43:
                    80:50:d5:59:10:f5:89:32:b8:10:e6:6e:dd:33:87:
                    98:7f:6e:a6:fd:04:cc:d1:5b:a8:b6:29:56:08:44:
                    2f:ad:3a:ad:3b:9b:a2:b7:81:50:ef:07:29:21:65:
                    61:0e:74:61:1e:aa:f2:32:a3:79:f8:a6:35:bf:e5:
                    76:c0:93:c4:b2:85:20:ea:54:10:06:78:9f:12:7a:
                    90:57:67:66:91:9a:fb:b8:d2:8e:7b:6d:b7:9c:71:
                    c1:29:91:ab:e3:4c:64:18:88:5c:a6:f4:83:6b:d3:
                    e0:4a:4e:32:1e:90:84:73:e8:3d:84:08:7e:81:70:
                    98:93:4d:0b:92:bd:18:c1:ea:4f:a5:36:f2:13:d1:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:65:CF:80:95:6E:11:A8:F5:14:C8:DA:27:8B:27:05:E4:05:70:C1
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e302e302f32342d3234203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:ef:cb:9e:ae:e9:86:d7:dc:2e:8c:a1:94:6d:59:ec:32:05:
         cf:9f:c9:4b:e5:b1:db:28:7c:0a:a3:86:7d:21:6e:7a:a4:dd:
         2c:f9:6a:89:ef:82:16:af:65:18:ee:43:e2:37:b6:11:aa:05:
         ea:4c:c2:9a:5d:f0:6e:d4:f1:fc:17:e3:26:45:79:bb:23:38:
         4d:26:dd:45:b8:a2:b2:5f:4c:30:3d:38:eb:a5:34:a8:3a:e8:
         e6:a6:2c:b4:96:9e:25:37:7d:a8:0c:d3:4f:42:42:d0:64:5e:
         7f:a2:f7:c6:1e:2e:a7:8d:44:68:78:f7:a5:84:fe:b4:aa:cf:
         2f:b0:3c:c8:98:31:62:c8:c5:43:6e:53:6d:22:0a:06:08:76:
         c9:ac:70:b0:52:5c:34:5c:40:26:a1:f7:bc:19:ea:86:56:24:
         f1:04:81:02:89:0a:46:b9:49:f9:7f:72:86:5e:23:4a:83:37:
         dc:10:89:a9:e6:af:49:f2:73:0e:90:2a:f9:5d:3b:e0:42:47:
         83:27:1c:8d:c5:be:74:20:48:cb:b8:ee:c5:4a:94:08:ad:b8:
         ff:99:96:84:22:80:b7:5b:6b:d1:c4:14:48:21:3b:fe:98:c9:
         ad:8b:01:95:9f:0c:0a:8e:57:c0:63:f8:89:1d:ac:1c:84:23:
         f2:ab:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org