Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e332e302f32342d3234203d3e20323638343330.roa
File:                     34352e3136312e332e302f32342d3234203d3e20323638343330.roa (raw, json)
Hash identifier:          108TAvYeJX4yKE8keym3KqDsaPG6D3QDVrkdWy6WcpU=
Subject key identifier:   D2:3D:8B:FA:1C:04:DC:F1:A7:F8:98:38:24:A2:3F:D0:35:03:09:71
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       4BC9D99A2AC3F8C2C57587C1941AC3608D9D688F
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e332e302f32342d3234203d3e20323638343330.roa
Signing time:             Tue 15 Mar 2022 16:28:01 +0000
ROA not before:           Tue 15 Mar 2022 16:23:01 +0000
ROA not after:            Tue 14 Mar 2023 16:28:01 +0000
asID:                     268430
IP address blocks:        45.161.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c9:d9:9a:2a:c3:f8:c2:c5:75:87:c1:94:1a:c3:60:8d:9d:68:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Mar 15 16:23:01 2022 GMT
            Not After : Mar 14 16:28:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:72:8c:49:17:29:3f:e7:e0:67:12:b6:6f:
                    26:61:a4:d6:e9:c1:20:70:f5:2c:6d:dd:af:2b:f1:
                    40:75:8a:b9:34:75:81:f3:90:8a:c0:9a:17:bc:dc:
                    65:d9:4d:af:0f:23:4d:dd:36:a7:7f:e2:53:c8:6c:
                    b0:b8:a5:b5:40:5f:a9:9d:ce:e7:8f:58:76:e1:2c:
                    cf:f6:13:68:45:90:12:f9:6e:4d:c4:23:b3:01:2a:
                    25:4b:1f:af:42:6f:ef:e2:19:b0:43:4f:69:18:da:
                    9f:9f:a5:f7:aa:2b:ba:29:30:a4:f7:09:f5:ea:dc:
                    dc:b4:46:bc:c0:00:30:cc:9f:d8:ae:f6:bd:6e:24:
                    8e:72:1d:f4:43:ce:de:60:f8:a1:42:cc:d4:74:6f:
                    de:07:ea:96:b5:32:00:31:9f:c7:d5:aa:9a:65:29:
                    7e:74:c7:e8:23:31:f9:cb:6e:98:e6:10:7d:9d:1a:
                    99:53:bb:da:c5:db:08:fa:55:df:83:77:f0:91:fa:
                    cd:da:f7:32:0b:f6:6e:a0:0d:06:0b:9e:47:38:43:
                    98:a5:ff:8a:40:0d:c6:10:cf:39:fb:64:ea:9c:1b:
                    92:b9:52:80:06:ca:47:67:25:07:41:f4:aa:68:95:
                    85:d6:82:7f:a9:95:55:d2:b1:6a:84:c7:e5:eb:6e:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3D:8B:FA:1C:04:DC:F1:A7:F8:98:38:24:A2:3F:D0:35:03:09:71
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/34352e3136312e332e302f32342d3234203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:c1:2c:8c:53:08:94:28:a2:00:62:8a:03:79:86:a4:53:
         1d:6e:fc:5f:4d:fe:ac:0e:b2:21:cd:fa:5b:6a:1e:a3:ec:ed:
         55:ae:6e:45:2e:bf:a1:0c:6f:23:0d:84:8b:98:53:04:e6:5e:
         b6:1a:40:02:70:a0:62:38:74:dd:6b:fe:fe:d9:0c:2b:cc:b3:
         fd:13:d1:fe:ce:bf:83:b8:14:5f:5b:bb:f5:74:94:0e:db:3d:
         ad:e9:fc:f8:a1:9f:a8:8d:6a:eb:fb:4c:91:16:62:e6:bd:62:
         5b:c5:e9:56:f8:4c:b3:ce:6f:21:c7:40:40:7c:5f:4e:24:c4:
         b7:ca:04:63:ed:87:17:a7:c7:0a:06:91:a9:ec:56:07:05:c2:
         f4:b5:18:4b:d5:b2:27:51:60:c0:37:67:23:3b:83:e1:b7:40:
         f4:65:0c:81:e9:b2:05:7c:64:3e:b2:81:9d:e1:56:2d:21:c9:
         5d:d4:66:50:d2:04:f7:4f:76:63:df:f9:66:b0:d2:ea:98:c4:
         e2:c5:1b:58:9d:5d:15:68:66:36:90:b4:bf:83:bd:86:b4:5b:
         7e:de:6f:3e:bb:03:d1:09:89:da:1c:5f:c3:a5:a4:3e:53:64:
         0d:1d:cb:2f:9e:20:fa:01:98:ce:42:7a:7e:db:6a:78:9a:ae:
         95:e1:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org