Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e322e302f32332d3233203d3e20323638343330.roa
File:                     34352e3136312e322e302f32332d3233203d3e20323638343330.roa (raw, json)
Hash identifier:          nose4BSLhX7NfZLPK3a1o9Rq3iT0fNQ7JbNDR1RWDxQ=
Subject key identifier:   4C:54:6B:1D:CD:53:DB:AA:39:9F:76:F8:0D:E2:CF:9B:13:1D:65:88
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       3F93D32805723321A240E79CAA89C8FDB86A44F0
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e322e302f32332d3233203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:24:08 +0000
ROA not before:           Thu 17 Nov 2022 18:19:08 +0000
ROA not after:            Thu 16 Nov 2023 18:24:08 +0000
asID:                     268430
IP address blocks:        45.161.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:93:d3:28:05:72:33:21:a2:40:e7:9c:aa:89:c8:fd:b8:6a:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:19:08 2022 GMT
            Not After : Nov 16 18:24:08 2023 GMT
        Subject: CN=3082010A0282010100ACB6CA03452FF2DC00E9178C68D7D6016B4897773380A77C17E030CFBCCE6823B86117266AE606A50D3892CDD7A977FB155B775403981DC072E963C4F3A042B61323846F817D912A94F969BF1E22B40F923C2B3B4C9D0B66FD4744F99E02F971FB613EFF63B796F273213AC1B9C3C985E828C20DB028F838F66F689D083B133FBBAA9BB01B5DBA4F709F0470B308E07B2E75811A1C07AD6249D4B5B7CC11C52507CC2C3CDEFDAF335B938793337735F0905B4B89C17E46EC9F9B01CB0251975B5C5B6EF52716E737A89EC5DED3ABEB523D8C7D7138A07CE69B19E35FC5A33A438B10988DE6F7953E44D9A6EA9DDEB3FF531E8D10C2439577BD116AD7B3F349070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:ca:03:45:2f:f2:dc:00:e9:17:8c:68:d7:
                    d6:01:6b:48:97:77:33:80:a7:7c:17:e0:30:cf:bc:
                    ce:68:23:b8:61:17:26:6a:e6:06:a5:0d:38:92:cd:
                    d7:a9:77:fb:15:5b:77:54:03:98:1d:c0:72:e9:63:
                    c4:f3:a0:42:b6:13:23:84:6f:81:7d:91:2a:94:f9:
                    69:bf:1e:22:b4:0f:92:3c:2b:3b:4c:9d:0b:66:fd:
                    47:44:f9:9e:02:f9:71:fb:61:3e:ff:63:b7:96:f2:
                    73:21:3a:c1:b9:c3:c9:85:e8:28:c2:0d:b0:28:f8:
                    38:f6:6f:68:9d:08:3b:13:3f:bb:aa:9b:b0:1b:5d:
                    ba:4f:70:9f:04:70:b3:08:e0:7b:2e:75:81:1a:1c:
                    07:ad:62:49:d4:b5:b7:cc:11:c5:25:07:cc:2c:3c:
                    de:fd:af:33:5b:93:87:93:33:77:35:f0:90:5b:4b:
                    89:c1:7e:46:ec:9f:9b:01:cb:02:51:97:5b:5c:5b:
                    6e:f5:27:16:e7:37:a8:9e:c5:de:d3:ab:eb:52:3d:
                    8c:7d:71:38:a0:7c:e6:9b:19:e3:5f:c5:a3:3a:43:
                    8b:10:98:8d:e6:f7:95:3e:44:d9:a6:ea:9d:de:b3:
                    ff:53:1e:8d:10:c2:43:95:77:bd:11:6a:d7:b3:f3:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:54:6B:1D:CD:53:DB:AA:39:9F:76:F8:0D:E2:CF:9B:13:1D:65:88
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e322e302f32332d3233203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:16:1a:46:9a:75:ba:b0:c9:e9:bb:40:ce:4d:43:2c:2b:a7:
         4b:8b:cf:0f:f1:81:aa:51:bc:ce:bc:c1:db:62:16:e8:8a:45:
         38:ef:e5:b4:c0:7e:3b:93:18:82:18:11:6c:9b:80:37:2d:52:
         eb:18:50:2b:a6:19:bd:d6:ef:ac:e2:cd:ef:ce:df:57:04:ba:
         90:60:f0:74:26:c3:73:23:72:c7:03:fd:db:c0:4d:c5:45:f1:
         26:4c:2b:c8:f4:13:5f:fb:8b:31:3d:15:0a:87:7f:06:c7:ad:
         fd:81:a1:e5:0e:15:72:ff:2e:4b:4f:eb:94:c0:96:84:9c:ad:
         be:89:89:06:0e:e3:66:02:53:ed:de:16:3e:81:d5:66:59:d5:
         40:81:2a:38:61:13:6a:c5:04:05:4f:05:62:df:37:97:7e:ed:
         88:76:f0:df:9c:70:08:6b:f4:bc:c1:87:a2:da:c2:d9:20:c9:
         8a:a3:ab:52:c6:0f:3d:99:ec:4a:e1:52:fd:75:37:e7:6e:54:
         21:4a:3e:24:53:87:b0:6e:6d:75:f0:8a:9a:64:a4:08:2c:59:
         08:2b:98:9e:03:4d:2c:49:e1:2e:ff:30:74:94:07:0d:fb:ef:
         3e:33:79:17:73:a2:c2:cc:ae:81:33:83:00:73:c6:56:46:2e:
         72:58:4d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org