Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/34352e3232382e3230302e302f32332d3234203d3e20323731313038.roa
File:                     34352e3232382e3230302e302f32332d3234203d3e20323731313038.roa (raw, json)
Hash identifier:          7umYcrDSBFU1ACYiumVJVUY+vosQnYOXOUVT3vjQNjM=
Subject key identifier:   03:09:F4:F7:AE:91:23:10:B3:71:34:A8:75:C1:B6:62:4B:9A:19:03
Certificate issuer:       /CN=CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37
Certificate serial:       6D072FBEA36ABAF38A9AB942D0EE1729A1E4EDA4
Authority key identifier: CA:C3:91:54:F7:C0:9F:9C:6E:FF:D4:CC:4E:7E:96:F6:0C:99:CD:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/34352e3232382e3230302e302f32332d3234203d3e20323731313038.roa
Signing time:             Fri 10 Dec 2021 17:32:00 +0000
ROA not before:           Fri 10 Dec 2021 17:27:00 +0000
ROA not after:            Fri 09 Dec 2022 17:32:00 +0000
asID:                     271108
IP address blocks:        45.228.200.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:07:2f:be:a3:6a:ba:f3:8a:9a:b9:42:d0:ee:17:29:a1:e4:ed:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37
        Validity
            Not Before: Dec 10 17:27:00 2021 GMT
            Not After : Dec  9 17:32:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:1c:6a:ea:de:6c:55:ea:5d:5c:cf:62:ff:
                    2b:94:03:a5:bb:ef:ce:02:0c:b2:8d:fd:66:da:34:
                    d5:a0:19:dc:eb:42:8e:6b:55:93:c9:5c:ac:8c:5c:
                    14:26:3f:10:52:d8:82:21:f4:b0:c0:62:7a:dd:77:
                    d7:1f:cf:7a:eb:05:cb:93:29:07:f3:e1:74:c3:29:
                    ad:81:b0:e2:40:81:d5:f7:a3:8e:dc:80:d3:47:05:
                    b9:4e:d5:79:10:23:79:86:4a:37:6f:6e:7e:3f:2f:
                    e1:87:e3:72:96:31:19:d9:92:30:52:0f:5f:a4:f2:
                    1d:5b:6b:f4:08:07:ad:9b:1c:04:fb:b4:e3:2c:9e:
                    e9:f1:5c:27:cb:bd:4f:50:06:db:b5:73:e5:f6:24:
                    17:98:a4:ad:27:43:79:40:54:24:35:0c:48:a9:b0:
                    91:62:fe:a8:44:2e:af:da:f4:3c:1d:dc:50:09:bd:
                    83:48:a0:1b:94:9b:23:89:28:28:ba:63:dc:db:69:
                    0b:63:0f:98:62:67:5a:a9:1d:bf:7e:b8:1c:56:f7:
                    75:59:55:84:45:8e:fc:8e:0f:3c:a8:17:e4:eb:27:
                    18:be:bb:00:8c:d4:07:63:f1:95:06:18:a3:b4:c1:
                    17:21:0c:e7:1b:c0:fd:d3:f0:87:48:fe:08:a1:ae:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:F4:F7:AE:91:23:10:B3:71:34:A8:75:C1:B6:62:4B:9A:19:03
            X509v3 Authority Key Identifier:
                keyid:CA:C3:91:54:F7:C0:9F:9C:6E:FF:D4:CC:4E:7E:96:F6:0C:99:CD:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/34352e3232382e3230302e302f32332d3234203d3e20323731313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:de:6f:a6:4a:a1:e0:fa:d5:5d:90:3b:0a:2f:a0:6b:30:de:
         62:6e:27:23:cb:e2:22:d8:68:f1:42:29:15:4f:5f:6e:ef:0a:
         cb:e9:d2:ef:c6:1f:20:3c:96:8e:82:1a:ac:56:8f:10:50:2f:
         4f:20:9e:dd:b0:9b:23:fb:f2:69:36:e5:5a:5e:0c:36:b8:a0:
         9a:98:f7:2d:63:82:73:44:d3:89:ef:bc:03:a2:3a:24:49:78:
         73:8a:5d:b0:f5:14:00:4f:c5:8b:64:08:14:58:42:cd:95:3a:
         87:c9:87:ee:c8:08:c8:96:d8:51:bf:3e:43:d9:b2:66:40:41:
         bd:52:fe:51:f6:9d:eb:7e:e2:2e:8d:37:0f:a6:b7:7c:90:dc:
         58:96:6b:cc:54:1f:66:98:11:fa:0c:c0:65:46:7a:13:05:16:
         71:e8:dd:a6:11:aa:5d:30:aa:00:fd:55:88:bd:94:31:42:ff:
         a0:77:fb:1f:12:7d:46:63:84:29:f1:54:d1:21:7b:8c:5e:5e:
         65:a8:af:32:8c:ca:57:d7:b3:16:d0:6d:85:42:78:84:ee:fe:
         c1:bf:20:82:23:21:99:db:8b:2e:34:6c:22:20:e6:b7:35:3d:
         58:86:0b:29:d2:fb:72:25:20:f5:04:7d:93:17:11:90:4b:cf:
         e1:88:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org