Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32322d3234203d3e20323637303637.roa
File:                     34352e3232382e38342e302f32322d3234203d3e20323637303637.roa (raw, json)
Hash identifier:          JeFi44zuG6w2g2HYaBzL6USfJ9cUzoYquIdF22ae4Ww=
Subject key identifier:   91:58:69:1A:63:BF:1C:4A:93:FD:A1:87:3E:55:8E:D2:19:D6:5F:D0
Certificate issuer:       /CN=ABE2B87282296266F69CE04223629CFC8BFD6354
Certificate serial:       024620BD6D2F024DAAE622F55EE641DB7F608832
Authority key identifier: AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32322d3234203d3e20323637303637.roa
Signing time:             Thu 02 Dec 2021 18:00:02 +0000
ROA not before:           Thu 02 Dec 2021 17:55:02 +0000
ROA not after:            Fri 02 Dec 2022 18:00:02 +0000
asID:                     267067
IP address blocks:        45.228.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:46:20:bd:6d:2f:02:4d:aa:e6:22:f5:5e:e6:41:db:7f:60:88:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE2B87282296266F69CE04223629CFC8BFD6354
        Validity
            Not Before: Dec  2 17:55:02 2021 GMT
            Not After : Dec  2 18:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:30:a8:b1:24:f1:e4:29:5f:3f:3e:b5:18:
                    c8:00:c5:52:6c:4b:8d:64:e1:a7:8a:ff:5b:65:7b:
                    4b:bb:a2:bf:e1:09:f3:8c:92:47:a4:5a:2e:db:1c:
                    ea:5c:54:f8:aa:0f:4b:4c:f5:35:eb:11:83:99:e3:
                    86:ec:65:eb:ca:45:92:46:86:dc:46:be:50:c6:6b:
                    e8:e2:42:87:72:78:20:69:d8:be:ce:52:0f:be:ce:
                    e6:6f:95:4a:56:b6:28:0b:bc:c1:09:e7:9c:df:ef:
                    e6:ed:3d:f6:05:29:08:3f:dd:4e:01:a1:33:9c:2f:
                    f6:76:c6:4f:ef:f6:83:62:a4:f5:12:b0:26:69:25:
                    82:4b:ce:31:2a:05:dd:52:dd:d8:9d:98:95:9e:a6:
                    5a:c2:3e:bf:b9:74:b1:1d:89:d5:cb:26:4a:ac:47:
                    54:a1:1c:71:a4:40:3a:63:9c:c7:be:5b:a5:dc:d8:
                    4d:2f:4c:cb:60:57:1d:d3:bd:7b:75:46:14:9e:9e:
                    da:5f:78:bb:2a:17:e9:be:06:f1:4d:8c:30:0a:47:
                    5c:22:b0:52:3e:bd:ae:ac:02:a7:8e:8d:47:28:bc:
                    fe:70:78:cd:10:f2:a7:f5:37:cb:5d:c4:4d:e7:54:
                    80:a6:81:cf:fa:66:39:82:eb:11:35:64:b8:da:07:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:58:69:1A:63:BF:1C:4A:93:FD:A1:87:3E:55:8E:D2:19:D6:5F:D0
            X509v3 Authority Key Identifier:
                keyid:AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/ABE2B87282296266F69CE04223629CFC8BFD6354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32322d3234203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:86:68:53:b7:8d:84:3c:1c:a3:a6:10:7a:29:63:9a:f2:
         3c:09:f4:e9:2e:61:d3:73:1d:8a:a0:a0:a5:73:be:96:4e:25:
         a0:1a:60:c9:c5:43:1c:6a:5e:28:86:09:15:ad:85:d9:06:6a:
         98:b2:36:79:78:4a:7b:7d:69:ce:e2:34:17:89:59:bc:82:d5:
         1f:58:0a:15:72:d8:11:04:0a:58:20:e8:92:a4:4d:b7:02:91:
         41:ab:22:b4:02:9c:3b:e8:ab:35:88:61:23:26:7d:a8:3b:43:
         7e:28:24:29:b0:20:92:12:0d:8a:97:21:17:0f:8d:cc:d1:61:
         95:7a:ed:47:83:12:d8:ba:69:70:2b:7a:b5:a5:1f:90:ce:75:
         8e:53:87:a6:30:62:db:21:dc:0c:63:82:80:56:94:81:db:44:
         37:2d:bc:02:c9:d3:31:ee:32:76:92:24:bd:59:9e:1c:a3:02:
         45:55:b6:d7:de:e0:82:9d:be:f9:54:7b:f8:e6:16:c9:20:38:
         5a:38:94:8b:f3:d4:8b:0c:e5:4d:77:f3:f4:8b:39:36:1d:70:
         d2:6a:44:89:05:81:58:a8:c1:22:6b:f1:86:ba:86:35:cc:1f:
         2b:f8:ac:7f:58:56:18:8f:40:ee:70:c3:87:c5:0b:bb:f3:cf:
         dc:10:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org