Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230342e302f32322d3232203d3e20323637363635.roa
File:                     34352e3232342e3230342e302f32322d3232203d3e20323637363635.roa (raw, json)
Hash identifier:          Db4qxk2gHwPi+wo+I74f+jBm+mpIdyW88KvI4+ZwIN8=
Subject key identifier:   B3:02:2B:A1:8C:5A:AF:CF:B9:EA:CD:2A:CE:52:BA:C6:5A:91:89:E4
Certificate issuer:       /CN=2ACF040B0315E2967A7D30E1A3047CCBB7A56867
Certificate serial:       536B1ED20FF30DA9E557866D26E8BF8E97F967BD
Authority key identifier: 2A:CF:04:0B:03:15:E2:96:7A:7D:30:E1:A3:04:7C:CB:B7:A5:68:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ACF040B0315E2967A7D30E1A3047CCBB7A56867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230342e302f32322d3232203d3e20323637363635.roa
Signing time:             Mon 21 Mar 2022 19:13:00 +0000
ROA not before:           Mon 21 Mar 2022 19:08:00 +0000
ROA not after:            Mon 20 Mar 2023 19:13:00 +0000
asID:                     267665
IP address blocks:        45.224.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6b:1e:d2:0f:f3:0d:a9:e5:57:86:6d:26:e8:bf:8e:97:f9:67:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACF040B0315E2967A7D30E1A3047CCBB7A56867
        Validity
            Not Before: Mar 21 19:08:00 2022 GMT
            Not After : Mar 20 19:13:00 2023 GMT
        Subject: CN=B3022BA18C5AAFCFB9EACD2ACE52BAC65A9189E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:16:e6:59:21:e8:c5:53:64:f0:a4:86:5d:f5:
                    2a:7a:c8:79:7f:32:49:cf:4c:ce:3b:a4:24:77:8c:
                    5c:ff:ff:3c:4a:21:60:d3:a5:e2:34:c9:a6:f3:d8:
                    4d:50:c9:cb:9e:4e:8a:e4:69:01:62:7c:d6:0e:76:
                    83:3f:7c:56:26:7b:aa:f5:3b:27:12:91:a4:5d:97:
                    2a:8f:7b:f7:a2:77:c0:0b:74:77:a3:11:0b:c7:03:
                    56:2a:57:25:26:fb:9b:68:d5:5f:40:f5:0f:db:03:
                    61:a2:9a:91:f9:63:f2:84:ee:ca:7b:81:3e:0c:0d:
                    6f:0c:8e:32:ae:4a:62:61:a2:7c:e5:01:55:1f:a8:
                    eb:fd:93:bc:69:b6:20:1d:dc:ea:56:1b:b1:a3:68:
                    8c:f9:ad:43:37:cc:0e:2b:10:56:d9:bc:36:fe:f4:
                    7d:07:ec:4f:66:23:ea:ec:e0:e1:d4:e0:73:6d:4f:
                    1d:fc:3e:c1:19:81:bb:f9:00:cd:b9:0e:46:da:63:
                    99:df:77:e5:93:30:87:fb:3b:05:21:3a:c7:be:5a:
                    9b:91:ff:f8:5b:8b:97:50:4a:38:0c:f9:e7:bb:0e:
                    59:ad:8f:7a:3a:51:f8:d2:42:70:a7:dc:b0:e0:09:
                    12:85:a6:e3:b9:f1:99:16:42:14:ec:4c:21:c0:4b:
                    7b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:2B:A1:8C:5A:AF:CF:B9:EA:CD:2A:CE:52:BA:C6:5A:91:89:E4
            X509v3 Authority Key Identifier:
                keyid:2A:CF:04:0B:03:15:E2:96:7A:7D:30:E1:A3:04:7C:CB:B7:A5:68:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2ACF040B0315E2967A7D30E1A3047CCBB7A56867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ACF040B0315E2967A7D30E1A3047CCBB7A56867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230342e302f32322d3232203d3e20323637363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:58:c0:98:ab:d8:12:5e:61:71:ef:02:c8:6e:a9:26:ba:55:
         bb:1a:3a:b9:b2:aa:0b:53:19:65:be:00:6e:92:d6:4f:ae:91:
         1d:51:a7:aa:54:fd:18:1d:db:c7:38:e3:de:8a:3e:cd:2e:5e:
         31:f1:07:83:de:66:cd:60:f4:b4:00:91:3f:ad:56:90:52:27:
         14:81:f0:e5:55:ab:9c:f2:ee:59:57:bb:a3:6d:c5:7c:91:70:
         88:8a:36:9d:72:d8:ff:00:05:82:c7:32:e2:3a:0a:80:70:67:
         cf:0f:fe:e0:75:7a:c3:7f:bd:d8:ab:90:2f:5f:db:01:a0:12:
         b2:3b:54:87:13:25:1a:0c:a5:44:ae:b3:51:1d:76:ca:50:94:
         ca:09:75:57:35:0b:b1:1c:fd:83:2d:4b:84:ce:fd:9d:84:57:
         86:9d:15:6b:9a:8f:69:73:62:1c:16:af:b7:4f:cd:08:93:2d:
         03:0f:5a:ba:18:f2:13:cf:99:9f:56:17:16:e2:7a:89:07:02:
         ff:6c:d8:d1:51:6a:8e:47:3d:84:88:d0:7f:14:aa:33:21:08:
         31:f9:07:64:60:bc:3d:ff:67:5a:0f:bc:53:a0:d9:f1:a3:2a:
         4f:8c:1d:d1:e1:72:05:ad:7d:fb:2e:82:1a:14:43:a0:03:c6:
         b6:f6:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org