Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e312e302f32342d3234203d3e20323638343330.roa
File:                     34352e3136312e312e302f32342d3234203d3e20323638343330.roa (raw, json)
Hash identifier:          PhXiwvxy9m8pS9tr6AhmIPxUg+Y310VB7uEVMOf7n44=
Subject key identifier:   F7:AC:3F:37:3F:18:30:C0:58:5A:DA:AF:31:69:20:E0:17:D1:17:D6
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       4AF84F44E566274CFD683A922EFCB071FE6EE323
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e312e302f32342d3234203d3e20323638343330.roa
Signing time:             Tue 15 Mar 2022 16:28:00 +0000
ROA not before:           Tue 15 Mar 2022 16:23:00 +0000
ROA not after:            Tue 14 Mar 2023 16:28:00 +0000
asID:                     268430
IP address blocks:        45.161.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f8:4f:44:e5:66:27:4c:fd:68:3a:92:2e:fc:b0:71:fe:6e:e3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Mar 15 16:23:00 2022 GMT
            Not After : Mar 14 16:28:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:3b:31:4a:e8:8a:b6:00:66:ff:90:e2:ad:
                    d9:53:e5:f7:21:52:a2:99:4c:68:90:92:04:ba:16:
                    0b:20:b6:fb:a8:d5:8c:35:b6:43:35:c6:f6:55:55:
                    19:d9:73:5c:a9:93:19:46:4e:5c:4b:9d:ef:ba:67:
                    6e:ec:97:a3:9f:bb:c2:1f:f6:e5:db:fd:4e:f1:7e:
                    07:e7:08:41:a9:eb:af:6f:7c:5f:3f:30:79:d6:23:
                    69:c0:e8:34:ef:e2:24:fb:0f:4e:bd:b0:8d:27:5d:
                    61:33:1b:b0:88:42:4a:9a:2f:55:4e:e7:2f:32:ea:
                    1b:ce:9f:a8:74:3b:a7:4e:f7:65:2e:55:d3:71:8b:
                    29:35:90:21:5f:05:5c:e2:1e:02:80:65:f0:e3:78:
                    fc:47:f6:6f:aa:ea:f5:0a:48:76:df:19:20:29:a8:
                    ad:4f:13:65:ec:52:07:7f:cc:d3:99:3e:97:89:27:
                    56:66:1e:f8:5f:dc:3f:d4:c5:8b:3f:ae:61:2c:20:
                    ff:8a:4f:24:48:fc:ab:c0:9d:7e:16:54:fe:ab:71:
                    74:3e:d5:60:25:09:e3:7f:76:94:67:2c:07:98:bd:
                    6c:d5:eb:71:58:f4:39:35:c5:82:cd:69:c0:a6:52:
                    61:8f:20:16:0b:4b:96:ff:cd:26:df:ae:0d:e8:85:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AC:3F:37:3F:18:30:C0:58:5A:DA:AF:31:69:20:E0:17:D1:17:D6
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e312e302f32342d3234203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2f:79:70:14:40:ad:9d:a1:24:5e:22:7e:1c:a6:74:5b:35:
         14:4d:e0:45:6b:29:e2:23:1d:a9:66:3a:f0:74:9f:94:ca:c4:
         69:ec:9f:c0:a2:5f:78:7e:62:41:e8:ee:39:37:e5:36:7e:32:
         75:9e:5a:1f:71:58:58:a0:12:18:b3:e1:4d:77:8c:09:32:92:
         85:00:6b:37:65:52:56:44:05:84:0a:09:8c:be:39:cf:19:de:
         6c:42:df:f2:f9:98:5c:5f:de:b5:97:9c:fd:be:03:8e:ed:2b:
         ac:7d:26:6b:9f:d6:94:e2:43:f1:23:f9:83:3e:fe:d3:cd:7a:
         30:8c:78:cb:4e:11:ba:7b:52:bf:15:02:0b:84:9a:d8:49:7a:
         63:d0:b4:cd:ea:67:4a:c7:96:60:62:aa:f8:14:cf:48:ae:bf:
         8e:f2:5e:53:28:20:18:c3:c6:26:d5:dc:38:f4:61:99:9e:9c:
         00:09:21:76:87:b7:7e:59:da:6c:12:45:3f:a4:43:8f:eb:d5:
         8d:27:8a:c8:76:55:4b:8a:16:aa:55:db:ee:21:bd:08:2c:a1:
         cf:89:67:94:8d:4c:f8:ee:eb:77:0c:d6:02:cd:36:c1:67:29:
         90:9b:d0:0c:4d:61:d0:c3:1b:f6:6b:27:2f:a1:35:72:44:9c:
         e0:a6:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org