Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/34352e3138302e34302e302f32322d3332203d3e20323639313330.roa
File:                     34352e3138302e34302e302f32322d3332203d3e20323639313330.roa (raw, json)
Hash identifier:          0aUwYShMVTt2XHsGNgkjFPhKs0pRFh56rRjcJ4aq5SY=
Subject key identifier:   2A:C7:64:A8:49:DC:45:B6:08:D7:6F:27:4A:1D:45:5F:6E:EC:08:3C
Certificate issuer:       /CN=F62CADCD970D895C2B4D0ED12085ED68CB251904
Certificate serial:       2CF746F97AB4D14FE8934278111601A4430D1095
Authority key identifier: F6:2C:AD:CD:97:0D:89:5C:2B:4D:0E:D1:20:85:ED:68:CB:25:19:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F62CADCD970D895C2B4D0ED12085ED68CB251904.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/34352e3138302e34302e302f32322d3332203d3e20323639313330.roa
Signing time:             Fri 20 Oct 2023 17:14:50 +0000
ROA not before:           Fri 20 Oct 2023 17:09:50 +0000
ROA not after:            Fri 18 Oct 2024 17:14:50 +0000
asID:                     269130
IP address blocks:        45.180.40.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f7:46:f9:7a:b4:d1:4f:e8:93:42:78:11:16:01:a4:43:0d:10:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62CADCD970D895C2B4D0ED12085ED68CB251904
        Validity
            Not Before: Oct 20 17:09:50 2023 GMT
            Not After : Oct 18 17:14:50 2024 GMT
        Subject: CN=2AC764A849DC45B608D76F274A1D455F6EEC083C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:1c:ca:11:c8:77:e1:f5:e3:83:f5:68:e8:
                    4e:25:09:2f:cd:e9:71:1b:bd:5e:59:59:10:bc:75:
                    0a:15:1c:62:5d:a7:4f:fc:77:df:e5:ec:8d:77:6f:
                    53:00:d9:7d:86:e5:78:8c:f0:24:07:78:13:bf:b6:
                    8d:45:b2:5b:00:b0:32:86:5e:0f:dc:07:6c:0b:9f:
                    c3:98:02:e5:88:d5:6f:8c:0a:17:3c:3d:25:3d:24:
                    c4:14:e4:29:02:4c:7a:bd:9a:49:75:93:de:9d:77:
                    91:52:7a:93:5d:19:95:40:1b:d0:94:12:35:22:dc:
                    dc:c2:66:fd:2d:26:3a:a9:b4:9d:1b:29:5c:d5:bd:
                    e8:e9:08:10:ad:71:04:41:0b:e4:e9:4c:da:28:57:
                    b9:e6:c5:cc:07:ba:ff:3c:04:e2:ca:3b:cf:dc:48:
                    28:83:73:6b:ad:31:5e:ef:ad:17:18:98:62:48:94:
                    82:5e:23:fc:48:9b:ca:22:a5:cf:21:f4:86:26:68:
                    e3:d9:62:7b:db:d0:d9:7f:ad:63:03:3b:83:67:6b:
                    04:5f:3e:24:89:29:a0:cf:83:33:58:ba:24:6f:65:
                    1b:59:36:31:50:d2:2e:b9:0c:97:26:f6:42:f8:0e:
                    da:4f:70:0e:6d:99:b8:a7:23:09:d5:ec:22:49:54:
                    95:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C7:64:A8:49:DC:45:B6:08:D7:6F:27:4A:1D:45:5F:6E:EC:08:3C
            X509v3 Authority Key Identifier:
                keyid:F6:2C:AD:CD:97:0D:89:5C:2B:4D:0E:D1:20:85:ED:68:CB:25:19:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/F62CADCD970D895C2B4D0ED12085ED68CB251904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F62CADCD970D895C2B4D0ED12085ED68CB251904.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/34352e3138302e34302e302f32322d3332203d3e20323639313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:e2:2a:37:4d:c4:ef:27:e0:cd:6c:44:58:0a:24:03:c8:94:
         31:4b:7a:39:02:9c:c7:7d:9a:56:df:79:f3:29:81:33:2e:a6:
         fd:9f:c4:75:11:eb:e9:bd:e7:1c:4d:37:00:f3:58:87:79:69:
         04:6b:56:2f:dd:ec:12:d5:43:1c:12:87:17:8d:49:29:1a:9f:
         67:ee:17:b3:78:29:40:48:a0:01:bc:71:5c:a6:14:9a:e5:3d:
         a3:31:2f:d8:40:3e:2e:1f:37:76:f4:3d:2a:47:04:44:ac:e0:
         52:62:0e:33:25:59:19:c9:49:45:f8:b6:ca:aa:c7:d1:a4:19:
         7f:4d:67:3d:08:9f:5e:1b:c8:7f:f0:f8:c7:aa:66:7c:d6:c0:
         2c:47:41:d2:cf:73:94:b8:22:0d:85:f0:4c:79:89:30:74:2f:
         29:fa:49:d7:86:19:d5:a7:d4:3b:c1:35:56:67:8b:f8:88:87:
         cc:8b:46:8e:56:2b:a6:98:c2:66:d9:12:a7:bb:f0:fc:a2:3c:
         15:50:0e:43:72:aa:34:87:f9:86:e7:5b:8d:78:25:d9:57:84:
         6d:50:4e:dd:c3:55:25:a3:a2:5e:29:00:84:4a:25:2a:c7:7a:
         6d:2d:e1:17:d1:41:3a:8a:0b:cf:db:43:71:f1:a9:7b:d0:e2:
         aa:81:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org