Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e322e302f32342d3234203d3e20323638343330.roa
File:                     34352e3136312e322e302f32342d3234203d3e20323638343330.roa (raw, json)
Hash identifier:          8IGHJDizk1P+V+eA8Oagf15uF4+Su70QK9/Tfz5pSMI=
Subject key identifier:   0D:E6:E1:5F:F5:F1:64:E1:04:FA:81:EE:AC:35:A7:12:F0:14:2B:10
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       3C57E6B2ED2CD0815E87475906EC8F878C825FE8
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e322e302f32342d3234203d3e20323638343330.roa
Signing time:             Tue 15 Mar 2022 16:28:01 +0000
ROA not before:           Tue 15 Mar 2022 16:23:01 +0000
ROA not after:            Tue 14 Mar 2023 16:28:01 +0000
asID:                     268430
IP address blocks:        45.161.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:57:e6:b2:ed:2c:d0:81:5e:87:47:59:06:ec:8f:87:8c:82:5f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Mar 15 16:23:01 2022 GMT
            Not After : Mar 14 16:28:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:44:ba:96:88:08:6e:af:cc:bb:c5:56:26:
                    95:33:a3:7f:d1:e5:9b:60:9f:5a:27:af:f7:fe:94:
                    7b:ad:a4:13:d1:87:34:de:43:fd:fc:15:9e:df:7e:
                    7c:fa:38:2b:46:18:b7:10:f9:5c:64:a2:e1:8a:c6:
                    66:64:81:4d:c1:f7:19:b1:88:63:96:f1:b3:af:d6:
                    d0:ba:69:6c:1a:30:17:4b:38:61:24:67:bc:16:2b:
                    b4:8b:16:e2:ce:0f:23:28:dd:31:54:21:5d:63:97:
                    28:c5:5a:23:ff:3c:b6:f3:40:3d:64:ed:bf:bc:7c:
                    76:1a:80:d1:59:60:be:bd:ae:f8:b5:4a:e4:99:35:
                    dc:74:67:2b:2e:1b:5f:4b:23:ad:b6:a8:57:25:78:
                    89:5a:13:d9:0c:14:a1:c9:4f:d1:a1:19:30:46:75:
                    ea:c2:cf:ca:f2:1b:81:96:6d:b1:4c:bc:20:ff:95:
                    a7:99:97:fc:04:9a:51:7b:a1:08:99:a2:9c:12:75:
                    c7:df:29:0e:ab:e2:b0:9f:a2:70:ae:a5:c1:bd:20:
                    12:a5:b9:7d:74:ad:35:ab:f6:b9:dc:ea:b7:2c:be:
                    b0:09:72:65:da:06:e3:6c:dd:dc:ae:75:c7:1d:a8:
                    77:91:8b:fb:45:6c:7b:8a:23:ee:63:2f:6f:ca:6b:
                    3f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:E1:5F:F5:F1:64:E1:04:FA:81:EE:AC:35:A7:12:F0:14:2B:10
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e322e302f32342d3234203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:be:34:17:93:43:a4:0e:b5:1f:d6:61:79:e9:19:2a:09:44:
         ab:69:00:8e:e7:00:61:7d:11:ac:b2:7a:99:62:58:5c:25:c9:
         1f:fb:5c:28:2d:b0:af:c6:2a:8b:40:a0:b4:7f:2b:f8:3d:b1:
         ff:c7:d4:63:bb:0d:6c:c2:41:87:97:da:d4:d5:fb:78:35:d2:
         a0:40:11:4c:97:59:af:d1:bd:70:55:7f:cb:15:76:34:fa:90:
         a2:db:92:41:3f:1c:8f:0b:65:fb:3e:2f:ca:fd:f7:c3:f6:45:
         e4:1d:c9:ec:2d:8a:a5:fc:ea:b3:8c:88:64:9c:fc:19:0f:79:
         49:a5:29:e4:0b:f8:49:1a:f6:0f:bb:51:88:36:c9:e0:a4:29:
         9e:b9:24:99:f5:84:5f:2f:71:28:eb:62:66:7f:b8:f0:89:64:
         e9:6e:ec:c0:90:b3:85:48:6b:74:87:1f:bb:97:90:02:62:27:
         0c:91:16:93:30:f5:15:01:1e:d4:8f:3f:bc:d8:3a:2d:53:05:
         49:73:f9:3a:3e:73:cf:e3:ee:87:38:c5:c8:7f:99:dc:91:6d:
         c2:d7:39:a4:2f:1e:a0:24:9b:4f:11:79:2a:a9:f5:2f:36:bf:
         b7:6e:0d:a3:2c:e9:07:5c:96:1e:c3:88:81:af:53:ea:70:8b:
         7d:85:33:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org