Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32342d3234203d3e20323636393238.roa
File:                     34352e3232352e33322e302f32342d3234203d3e20323636393238.roa (raw, json)
Hash identifier:          kV8/d6duA7LbIiTwlQ+erYBW2vjXl61PJeVtBkXV+uI=
Subject key identifier:   7E:67:09:C0:9F:AA:EC:98:19:78:FF:8B:C8:8A:AE:4F:48:91:2F:9A
Certificate issuer:       /CN=3CA7B50C9761C3D5278E34F848A83124161D5747
Certificate serial:       0C6AF4A3AAC25B741D76501EB85D34D09ED2F9E9
Authority key identifier: 3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32342d3234203d3e20323636393238.roa
Signing time:             Mon 10 Oct 2022 16:00:04 +0000
ROA not before:           Mon 10 Oct 2022 15:55:04 +0000
ROA not after:            Mon 09 Oct 2023 16:00:04 +0000
asID:                     266928
IP address blocks:        45.225.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6a:f4:a3:aa:c2:5b:74:1d:76:50:1e:b8:5d:34:d0:9e:d2:f9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA7B50C9761C3D5278E34F848A83124161D5747
        Validity
            Not Before: Oct 10 15:55:04 2022 GMT
            Not After : Oct  9 16:00:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5a:78:a1:c3:79:8a:b5:01:97:bc:4b:05:55:
                    cb:8f:38:73:52:14:c3:c4:e4:b8:c7:78:a6:a5:11:
                    41:71:91:35:7e:18:5c:96:20:ad:62:06:c3:b0:51:
                    69:b3:90:fa:70:3e:49:87:c3:8a:18:dd:35:45:d8:
                    48:32:0f:f5:e4:2f:fb:25:74:23:2a:d8:4d:a2:83:
                    b1:e9:89:c7:d7:9a:84:87:38:c0:7b:5e:f1:0a:83:
                    ee:b2:cd:4c:77:6f:a4:67:8d:96:5a:bf:81:dc:fb:
                    dd:a8:d8:31:10:47:f1:a0:3b:3c:eb:3c:39:6f:ae:
                    70:b2:d5:2e:33:10:c7:97:81:ee:41:8f:03:77:3a:
                    a2:0a:88:db:7a:c8:c1:7b:2e:ad:db:2d:48:1f:46:
                    6f:67:e2:fe:ce:ba:51:5a:d1:68:f6:81:dd:45:d8:
                    ee:a7:bb:26:dd:43:51:6f:78:e0:26:92:fa:4e:75:
                    e0:5a:50:4e:df:70:ef:d2:e1:8f:ca:17:0b:2f:d7:
                    a1:24:9f:81:b9:7b:2f:2c:85:37:ce:66:77:7d:94:
                    1c:d6:ef:a4:e6:87:33:1d:15:53:56:19:fe:76:9d:
                    c5:35:a3:95:fd:38:07:b1:a5:80:aa:26:6f:52:47:
                    a4:4c:8e:59:fd:90:11:c6:45:4a:40:7c:d7:b8:1a:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:67:09:C0:9F:AA:EC:98:19:78:FF:8B:C8:8A:AE:4F:48:91:2F:9A
            X509v3 Authority Key Identifier:
                keyid:3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/3CA7B50C9761C3D5278E34F848A83124161D5747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32342d3234203d3e20323636393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:d3:56:8d:27:80:7d:40:d3:27:04:a0:95:18:0b:ca:ca:
         79:fe:09:b7:3b:be:a9:35:64:f3:b2:fb:7b:eb:4e:e5:20:6c:
         e8:5e:7b:1f:e3:9a:bf:73:c2:f1:09:01:7c:be:fa:9b:d4:af:
         5f:1e:cd:7f:70:13:ab:bd:3f:15:12:51:46:7c:85:9e:41:7e:
         58:fb:75:fa:6e:28:81:04:b9:fb:34:ef:ac:49:37:d0:7e:21:
         96:e6:79:65:ad:40:78:97:ce:0f:34:5e:6b:97:3f:e5:65:37:
         b3:56:fc:09:10:8a:06:31:94:eb:ff:6b:39:29:6a:e9:ff:49:
         7a:be:60:61:32:89:0d:39:b2:bd:46:ba:ab:7b:7c:af:6c:ed:
         08:ae:39:c4:20:64:44:7b:6a:c3:7f:8f:b1:a8:25:aa:7d:a3:
         af:2b:ea:bb:98:e0:7f:67:e5:ae:e4:fb:76:36:eb:81:6e:82:
         e5:a1:83:74:90:e4:0a:b7:3c:27:a7:4f:38:2c:b7:9a:a3:e4:
         7f:1d:16:dc:6a:2e:12:33:0d:41:f1:7c:e5:89:bf:5f:70:fc:
         5e:2c:1a:3c:ec:e5:7b:bf:74:ac:a9:d6:01:c0:aa:cd:8a:fb:
         84:60:87:9a:a9:b0:d1:2f:f2:bb:7e:d7:7a:ea:2e:3e:1a:e1:
         dc:91:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org