Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234302e302f32322d3234203d3e20323638393630.roa
File:                     34352e3137362e3234302e302f32322d3234203d3e20323638393630.roa (raw, json)
Hash identifier:          ya8mu4tNlRkBcV+aMJvVEGhPDtna8zRX4EVs15wGJ20=
Subject key identifier:   EE:C7:0B:3E:26:D2:83:C7:DA:4D:5C:2E:BF:37:FD:69:27:06:A7:0C
Certificate issuer:       /CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
Certificate serial:       6A5A73FC7487F3DF8680B3F5C82F62957ECF7231
Authority key identifier: E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234302e302f32322d3234203d3e20323638393630.roa
Signing time:             Wed 23 Mar 2022 18:04:00 +0000
ROA not before:           Wed 23 Mar 2022 17:59:00 +0000
ROA not after:            Wed 22 Mar 2023 18:04:00 +0000
asID:                     268960
IP address blocks:        45.176.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5a:73:fc:74:87:f3:df:86:80:b3:f5:c8:2f:62:95:7e:cf:72:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
        Validity
            Not Before: Mar 23 17:59:00 2022 GMT
            Not After : Mar 22 18:04:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:1e:24:e1:8e:a5:09:92:33:43:d7:e7:e4:
                    81:af:e0:db:11:cb:08:4a:3e:dd:ef:96:3f:ec:07:
                    24:66:0d:8f:1f:1d:fc:67:3d:dd:db:23:4d:33:80:
                    c1:a8:12:29:39:94:7c:b9:16:18:b7:7c:8f:f0:6d:
                    e3:9b:8f:44:85:0c:04:d1:8b:37:ae:a7:8b:8e:7d:
                    26:7e:36:99:2c:36:e0:54:2e:97:1c:53:0b:a7:f1:
                    40:7e:05:0f:42:9c:8d:ac:49:dc:72:1f:52:17:6c:
                    0a:74:d8:f0:26:e5:f9:ad:11:68:d6:28:cb:82:69:
                    a3:9e:84:de:e5:05:a5:93:f1:8d:9d:fd:14:ca:3d:
                    3f:99:37:b8:3b:e8:4f:27:08:e3:a6:9f:82:26:0d:
                    e3:c1:9b:32:b8:66:28:b1:15:37:ef:f8:8a:a9:b8:
                    71:d4:3b:3e:0d:d9:4c:f0:5d:f1:f5:68:f2:24:6b:
                    6b:41:4f:54:4b:5a:ea:3f:4c:27:88:da:b5:6f:44:
                    1c:ea:62:3e:9c:c4:ec:59:e7:8a:8d:97:24:ae:b0:
                    02:49:81:43:2a:32:4c:29:e0:62:36:43:0a:37:83:
                    c6:a7:de:21:9b:58:81:a6:3a:31:a4:e3:5b:6d:1e:
                    8c:20:ed:23:54:00:f1:81:16:68:a7:50:f9:4e:7c:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:0B:3E:26:D2:83:C7:DA:4D:5C:2E:BF:37:FD:69:27:06:A7:0C
            X509v3 Authority Key Identifier:
                keyid:E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234302e302f32322d3234203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:44:77:1a:3f:c1:33:eb:ee:10:58:f2:65:26:0c:37:88:
         a3:c7:e8:d7:2e:cc:0b:7e:83:9d:a9:4b:87:09:d9:d3:d0:37:
         11:4b:6c:f1:fe:0c:b9:ff:db:48:1b:56:10:d3:07:ab:a5:6c:
         75:06:26:91:d3:ba:ad:1f:84:37:a7:32:52:c2:fd:c3:06:f7:
         8f:ae:fc:a2:78:f6:05:d7:28:99:4e:c1:5c:a6:40:84:a3:d4:
         72:65:25:2d:e9:26:67:49:32:59:49:e7:46:10:9a:fb:55:a6:
         3c:79:3f:fa:0c:2b:e1:89:30:ca:54:b9:30:42:af:3e:8b:5c:
         4c:65:53:d7:78:5d:06:61:64:58:65:7f:c3:cb:93:ea:65:a1:
         42:f3:95:65:2d:33:0c:95:3f:33:e8:40:71:65:99:34:a7:95:
         1f:a3:d7:d1:8e:e0:93:5e:ed:6f:da:e2:9d:94:d4:52:21:25:
         a2:a5:6c:09:43:98:95:64:37:9a:3b:b8:c0:7e:7d:8c:f6:11:
         1f:88:05:5f:ea:4e:52:4c:eb:49:ef:ad:0e:02:d6:25:60:63:
         29:98:36:a8:b7:99:06:33:2e:0d:12:17:18:e9:5b:b5:3c:f7:
         64:b1:2c:e2:6f:10:48:e7:8c:3b:93:63:6b:d4:aa:11:e0:86:
         8e:cd:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org