Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234302e302f32332d3233203d3e20323639313434.roa
File:                     34352e3137392e3234302e302f32332d3233203d3e20323639313434.roa (raw, json)
Hash identifier:          yBjEw2QZF5Xhq+IztaSILJ6mddHM6CGIAWICn/5V8zs=
Subject key identifier:   7C:F2:71:7F:9D:28:55:17:54:CD:40:5D:08:29:0D:89:A7:02:0E:F9
Certificate issuer:       /CN=8C4619446B0DD301CFFD8161680B4DD030227E6E
Certificate serial:       2FC17051D3769DC95A14D083A6D071F13A29EE90
Authority key identifier: 8C:46:19:44:6B:0D:D3:01:CF:FD:81:61:68:0B:4D:D0:30:22:7E:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4619446B0DD301CFFD8161680B4DD030227E6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234302e302f32332d3233203d3e20323639313434.roa
Signing time:             Mon 07 Feb 2022 12:09:30 +0000
ROA not before:           Mon 07 Feb 2022 12:04:30 +0000
ROA not after:            Mon 06 Feb 2023 12:09:30 +0000
asID:                     269144
IP address blocks:        45.179.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c1:70:51:d3:76:9d:c9:5a:14:d0:83:a6:d0:71:f1:3a:29:ee:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4619446B0DD301CFFD8161680B4DD030227E6E
        Validity
            Not Before: Feb  7 12:04:30 2022 GMT
            Not After : Feb  6 12:09:30 2023 GMT
        Subject: CN=7CF2717F9D28551754CD405D08290D89A7020EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:84:f4:83:48:2e:25:c1:b6:88:93:c1:06:
                    80:f8:ae:5c:dd:8f:80:0b:1f:b1:a8:f5:d0:59:a2:
                    a0:47:2e:69:34:bc:eb:d0:fb:36:13:9e:7e:4d:98:
                    77:e8:2e:ff:8f:3a:4a:7f:2e:c4:42:39:1b:66:bb:
                    b1:f5:1a:45:b0:eb:13:44:5b:34:43:89:36:e5:23:
                    67:c7:33:f0:5e:02:21:d1:e2:6f:fe:99:1a:5c:b6:
                    b0:21:1b:7b:af:ab:6b:b1:1e:85:37:40:d6:f3:0f:
                    bd:6f:b1:cc:b7:a0:73:0b:a3:aa:bf:7c:98:fe:3e:
                    60:a2:05:90:81:6d:74:69:61:ca:47:34:c0:46:66:
                    52:db:7e:25:1f:58:e9:ef:19:75:9b:75:97:36:13:
                    4c:01:30:98:50:6b:55:da:79:95:33:fc:53:24:96:
                    44:ab:2a:68:b7:e5:74:ec:41:70:a9:9d:d7:bc:7d:
                    61:fd:a0:73:30:34:b3:fe:2d:e6:b0:b5:f0:17:e6:
                    e3:a8:b0:21:ac:1b:3b:e4:56:da:72:0f:07:b4:c3:
                    7c:35:e6:e6:78:5d:2e:0e:1e:ee:64:8a:f7:9c:07:
                    f8:78:14:74:17:7b:ec:6f:03:f1:c3:2a:08:c7:57:
                    1a:20:e6:69:3c:7f:61:23:56:34:27:44:66:ad:34:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F2:71:7F:9D:28:55:17:54:CD:40:5D:08:29:0D:89:A7:02:0E:F9
            X509v3 Authority Key Identifier:
                keyid:8C:46:19:44:6B:0D:D3:01:CF:FD:81:61:68:0B:4D:D0:30:22:7E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/8C4619446B0DD301CFFD8161680B4DD030227E6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4619446B0DD301CFFD8161680B4DD030227E6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234302e302f32332d3233203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:41:9f:f3:5a:79:e4:b2:25:03:45:65:78:2a:4f:70:cd:fc:
         ca:06:55:31:89:c7:11:f6:04:82:71:6f:d9:5b:cd:3a:f6:6e:
         8a:00:be:b4:82:21:36:46:35:48:13:89:b4:fe:80:93:3a:06:
         d9:0f:28:ce:a8:c5:1c:9a:d5:47:5c:59:1b:c9:df:f9:ce:b6:
         7f:8f:57:42:16:99:b9:f2:d3:22:74:72:d0:ee:49:fe:06:31:
         83:c8:dc:ee:ed:ce:c2:29:38:92:76:21:5c:b3:8d:e5:94:52:
         b1:97:77:c9:98:a1:c7:50:24:5b:7c:9c:31:18:77:25:6a:7b:
         f5:0f:d9:d8:fb:83:0a:a8:db:ff:a8:1a:36:d7:06:f1:8f:ab:
         6d:b3:41:8a:a4:ef:60:c8:fa:b0:c1:29:ba:e6:f4:ec:d5:41:
         1e:e5:5d:35:42:3c:fc:9f:24:90:ca:a7:19:ef:34:fe:ef:27:
         91:02:0e:9f:27:61:ce:52:42:a6:eb:82:be:25:ad:cf:2d:f6:
         e1:3a:c2:4e:2c:32:63:71:b9:d9:2b:8e:c7:94:92:98:54:77:
         cd:d4:9f:73:b7:d2:ea:51:d3:45:a4:0d:c8:cb:84:fb:3a:66:
         5b:6e:5d:89:d5:aa:8a:11:7e:3d:df:ea:de:72:fe:cd:ae:22:
         53:11:2f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org