Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/34352e3136342e31302e302f32342d3234203d3e20323638353835.roa
File:                     34352e3136342e31302e302f32342d3234203d3e20323638353835.roa (raw, json)
Hash identifier:          AcoOWTitqgnN0TF8kpDr8Fkb6YBRI61YoK03DrGvAS0=
Subject key identifier:   D1:42:6A:45:C8:B8:1C:EB:CE:FA:1B:24:26:6A:5E:81:30:34:C6:0F
Certificate issuer:       /CN=56E56C0A6BB9145C47505907F91F128D80240CA8
Certificate serial:       1673C1DC04A32FD5ECFAEEF6E8A1F11208D505F9
Authority key identifier: 56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56E56C0A6BB9145C47505907F91F128D80240CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/34352e3136342e31302e302f32342d3234203d3e20323638353835.roa
Signing time:             Thu 05 Oct 2023 20:10:43 +0000
ROA not before:           Thu 05 Oct 2023 20:05:43 +0000
ROA not after:            Thu 03 Oct 2024 20:10:43 +0000
asID:                     268585
IP address blocks:        45.164.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:73:c1:dc:04:a3:2f:d5:ec:fa:ee:f6:e8:a1:f1:12:08:d5:05:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56E56C0A6BB9145C47505907F91F128D80240CA8
        Validity
            Not Before: Oct  5 20:05:43 2023 GMT
            Not After : Oct  3 20:10:43 2024 GMT
        Subject: CN=D1426A45C8B81CEBCEFA1B24266A5E813034C60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:0a:b3:e2:6e:17:62:66:cd:01:e7:e4:38:
                    3e:4a:4e:3c:e9:00:4b:c9:28:8e:aa:f6:5a:cf:f6:
                    d5:9f:59:71:8e:a1:ee:72:8b:81:f6:de:d9:ff:28:
                    92:9c:56:5f:d2:d6:18:5f:9d:56:6e:b9:3e:d4:5e:
                    07:7a:45:3c:7a:e0:64:a7:a0:c9:4f:11:a4:99:a8:
                    db:8c:9c:dc:ff:14:6a:60:6e:0d:9a:9a:fd:c2:dd:
                    38:1f:14:2e:2a:f9:8a:84:b8:b6:31:43:82:7d:c3:
                    9f:80:36:89:ce:c3:b2:e5:17:8b:e6:ce:68:cc:1d:
                    e5:68:ef:05:6a:c6:43:4c:10:b8:97:c1:af:20:9c:
                    a8:64:e9:77:84:09:81:af:15:f0:19:58:e4:01:8e:
                    0c:e6:95:c5:95:23:50:c4:b6:10:18:aa:76:4d:1b:
                    05:3d:86:b2:33:d4:8f:20:49:ce:e9:8c:2b:11:8e:
                    bf:b7:c4:a5:23:d3:08:25:13:35:20:3f:ed:11:b7:
                    33:33:c1:1e:c7:4f:d4:f0:0b:96:ce:9f:4f:67:52:
                    4e:44:fb:32:5a:29:3f:90:3a:3d:1c:60:a3:89:93:
                    28:78:04:8a:d1:a1:f4:9c:e4:66:b2:72:dc:66:17:
                    de:cf:bf:80:7e:81:88:37:00:ce:82:98:7d:14:3b:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:42:6A:45:C8:B8:1C:EB:CE:FA:1B:24:26:6A:5E:81:30:34:C6:0F
            X509v3 Authority Key Identifier:
                keyid:56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/56E56C0A6BB9145C47505907F91F128D80240CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56E56C0A6BB9145C47505907F91F128D80240CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/34352e3136342e31302e302f32342d3234203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:ee:57:b2:17:01:c5:2b:f8:7f:99:02:ff:fc:a2:8e:ac:
         c3:17:73:8c:1f:ea:a1:51:22:0d:d4:76:ca:83:3b:b4:78:42:
         fc:73:54:99:bf:68:d7:e7:32:3a:f2:fe:82:1e:68:6f:a0:ca:
         41:e0:03:c7:f3:7e:0d:02:2e:a9:de:62:54:5a:63:6b:b8:96:
         29:21:91:b0:1e:e9:c1:6d:c3:ec:bc:e0:e5:db:4c:48:5e:57:
         d8:f1:1e:b2:95:85:41:c9:58:3d:fb:af:51:73:9a:7e:48:98:
         71:3c:6d:55:09:b0:a3:f6:47:2d:2f:2f:4e:d4:c9:4e:40:9f:
         2a:bc:95:41:c5:54:a8:33:e4:81:4e:50:b3:dd:91:bf:05:09:
         9c:2b:58:c9:f6:f1:dd:f7:e2:64:60:7b:e3:21:55:0c:e8:e3:
         93:29:52:97:77:ac:64:13:cd:cf:6f:86:0f:60:25:06:da:5f:
         04:67:69:05:7a:21:3c:f6:53:1f:78:be:e2:b4:5a:98:0b:72:
         c1:4a:94:18:6c:0e:85:7e:c2:d9:58:3a:44:ca:88:47:66:8d:
         cf:ad:3a:ae:fe:06:b4:5c:de:e3:a4:6c:73:4e:49:2f:09:47:
         70:2e:8f:5a:c4:e5:c5:e8:7a:0b:23:53:6c:da:77:30:2f:53:
         7c:fb:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org