Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31372e302f32342d3234203d3e20323637313931.roa
File:                     34352e3233312e31372e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier:          Tyy1WoVmcLlnU+ykqRN0x3GmvSs2QTmj1amFqr0tuFs=
Subject key identifier:   BC:06:A6:91:78:98:63:DC:8D:31:C4:CA:D9:67:5E:A9:89:8B:A2:17
Certificate issuer:       /CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
Certificate serial:       688B7168DA441087F769257C259D1BB8395BB0DD
Authority key identifier: 48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31372e302f32342d3234203d3e20323637313931.roa
Signing time:             Fri 15 Dec 2023 20:35:30 +0000
ROA not before:           Fri 15 Dec 2023 20:30:30 +0000
ROA not after:            Fri 13 Dec 2024 20:35:30 +0000
asID:                     267191
IP address blocks:        45.231.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8b:71:68:da:44:10:87:f7:69:25:7c:25:9d:1b:b8:39:5b:b0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
        Validity
            Not Before: Dec 15 20:30:30 2023 GMT
            Not After : Dec 13 20:35:30 2024 GMT
        Subject: CN=BC06A691789863DC8D31C4CAD9675EA9898BA217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:95:93:7b:35:da:62:82:99:7d:4b:b4:43:
                    0a:0f:e7:de:e6:e5:db:b4:9a:f0:37:c1:57:bf:06:
                    23:e9:cf:f5:ca:a7:52:dd:f9:51:89:6a:00:33:f8:
                    51:2e:aa:7d:cd:55:2c:77:94:a0:60:78:82:dc:c5:
                    db:2a:5a:a5:92:5a:e6:d2:f8:2c:8e:ad:27:8f:ee:
                    46:c3:bd:aa:9e:e9:ad:ec:9d:8e:cb:78:ce:17:ba:
                    fa:0b:d2:8a:4e:d8:9f:e4:22:7e:a4:f8:b9:35:00:
                    0c:f2:fa:e5:92:8f:f7:33:26:41:06:e3:af:fc:3f:
                    18:12:08:85:b2:99:70:5c:70:9b:c1:94:a1:38:46:
                    f3:86:e8:14:d9:d8:c1:92:34:1e:58:a3:00:0b:01:
                    bb:a4:09:92:a9:f3:23:50:95:7d:5b:66:04:5d:e2:
                    52:37:a6:74:e7:7a:9b:30:39:e9:9b:b6:60:e2:33:
                    f2:60:b2:91:6c:76:4e:97:ee:94:2f:e7:85:99:bc:
                    86:85:40:d8:50:37:97:52:7f:e5:83:1b:be:96:0a:
                    4b:b6:81:2a:1a:89:f4:3f:04:9b:68:49:36:cb:a9:
                    96:c6:96:5c:de:9a:16:2a:67:b7:d3:95:07:2e:fb:
                    9a:8a:fc:b5:35:2c:6c:af:8c:04:da:1a:b6:53:04:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:06:A6:91:78:98:63:DC:8D:31:C4:CA:D9:67:5E:A9:89:8B:A2:17
            X509v3 Authority Key Identifier:
                keyid:48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31372e302f32342d3234203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:a8:ca:77:ad:0e:70:7c:37:7d:bb:d0:55:fd:bd:57:52:
         37:3b:4b:53:fe:f4:2b:50:82:2b:74:44:f6:d1:d9:77:d4:40:
         f2:98:8f:cb:93:f7:be:7d:0a:e6:a6:0b:a0:35:fb:6d:3a:29:
         b8:d9:2c:e6:f5:46:df:f0:10:f8:39:42:71:ec:46:49:13:65:
         cc:b9:fa:3a:bc:17:56:bd:66:31:7d:81:ce:a7:87:2a:c9:4c:
         b9:07:34:aa:44:51:90:02:4d:5f:8e:f8:b6:6a:b1:6e:d9:23:
         cf:ae:84:cb:49:3d:1b:51:2a:32:c5:9a:32:0f:d8:c1:87:92:
         dc:ed:97:72:29:8c:7b:37:e5:18:a4:98:39:68:8b:75:a4:5b:
         7d:60:57:2d:c5:b0:d1:b5:18:a3:cc:e5:42:68:2a:16:30:48:
         5c:90:cd:1f:eb:53:a9:67:83:3e:6c:15:74:43:ed:70:63:f2:
         f0:0d:84:f5:47:39:3a:a2:4f:c3:eb:d8:9f:d2:06:19:2e:f1:
         39:f9:4f:19:b3:91:af:ec:73:b7:25:0b:12:44:48:74:a7:51:
         5a:46:0e:26:69:b9:aa:b4:f0:96:08:04:1b:b6:2f:d3:35:4d:
         8f:e7:d9:62:aa:bd:00:67:8a:f8:71:6c:78:92:66:5f:8d:15:
         70:3d:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org