Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/34352e3136332e37322e302f32322d3234203d3e20323638353733.roa
File:                     34352e3136332e37322e302f32322d3234203d3e20323638353733.roa (raw, json)
Hash identifier:          9Bj9mE3TbNMarEpcfnwQe4wF/exQ2gRcAT/TkEwnc3Q=
Subject key identifier:   13:FA:E8:4F:B3:EC:6A:F9:20:D9:D4:F6:6A:59:1C:5B:A7:6D:BB:C2
Certificate issuer:       /CN=64EDF843BB58DCBE2014E8820AB744C627698B80
Certificate serial:       7102DA630096CF10FE92C80B62D5A82F8853524D
Authority key identifier: 64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/34352e3136332e37322e302f32322d3234203d3e20323638353733.roa
Signing time:             Thu 04 Apr 2024 23:32:53 +0000
ROA not before:           Thu 04 Apr 2024 23:27:53 +0000
ROA not after:            Thu 03 Apr 2025 23:32:53 +0000
asID:                     268573
IP address blocks:        45.163.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:02:da:63:00:96:cf:10:fe:92:c8:0b:62:d5:a8:2f:88:53:52:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EDF843BB58DCBE2014E8820AB744C627698B80
        Validity
            Not Before: Apr  4 23:27:53 2024 GMT
            Not After : Apr  3 23:32:53 2025 GMT
        Subject: CN=13FAE84FB3EC6AF920D9D4F66A591C5BA76DBBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:12:45:5b:59:ba:a0:e0:3a:92:9e:dc:1e:ee:
                    f9:54:9b:68:bc:8d:12:05:a5:b3:59:a3:ca:ba:f5:
                    8f:14:48:62:cb:54:54:0e:d6:41:03:46:aa:86:1d:
                    9f:03:bf:98:c9:fa:fd:25:0a:54:38:32:51:a4:e2:
                    d8:8c:41:62:02:46:a9:25:37:9a:28:6b:92:5a:04:
                    53:31:ed:ee:18:68:00:e1:03:e5:c3:08:50:26:d0:
                    95:73:02:b5:e0:40:11:bc:51:aa:bb:2d:b6:27:5c:
                    76:97:d2:b5:2b:da:09:08:c1:6f:a8:4a:e8:17:17:
                    48:cf:fd:b8:df:26:71:82:40:58:28:74:1b:05:fa:
                    1e:4c:03:31:9d:02:b3:4b:69:05:e8:a9:82:93:a4:
                    53:f3:03:4b:9b:ab:18:d5:29:04:e0:50:73:4c:f1:
                    a4:f5:7f:b8:ea:b0:74:5f:a4:b3:91:ef:06:a4:4d:
                    a4:82:fb:02:e3:aa:5c:1f:77:26:fe:97:53:f6:1e:
                    8e:26:a2:64:ca:ca:50:76:1f:55:8c:16:99:bf:b2:
                    df:53:30:f8:68:f0:1c:b8:22:b5:85:36:07:0b:4f:
                    c6:11:20:79:65:56:34:eb:19:77:bf:cf:41:57:04:
                    97:98:87:45:f0:a5:0f:f4:57:f4:12:32:0b:aa:7a:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:E8:4F:B3:EC:6A:F9:20:D9:D4:F6:6A:59:1C:5B:A7:6D:BB:C2
            X509v3 Authority Key Identifier:
                keyid:64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/34352e3136332e37322e302f32322d3234203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:e8:d6:e4:c8:b5:87:34:af:06:2d:92:83:67:9b:27:ed:81:
         44:34:d1:16:4f:69:78:0b:cf:5c:3d:e5:a6:de:c9:b6:15:4a:
         c0:cd:f5:8f:1b:4d:20:77:a1:06:60:45:b2:a8:6e:c2:e4:1d:
         46:13:b3:c2:4c:b7:4a:22:c8:af:85:87:fc:12:3d:7d:55:67:
         7d:7c:99:c9:2d:3c:01:d6:1d:43:ec:c8:94:9a:ef:a3:a8:70:
         2e:ce:83:08:b9:d3:9a:b1:c0:bc:9f:9e:bc:56:25:eb:5c:fd:
         17:9b:90:cb:a6:a4:bf:b3:2e:22:f4:f9:cb:54:03:e4:55:9a:
         c8:09:82:7f:d6:d4:fc:f4:c0:99:5d:33:e4:7e:69:cc:f8:8b:
         55:98:c1:1d:aa:18:94:68:f0:61:76:07:58:f7:26:1a:6e:4c:
         6b:fa:4c:ed:e1:67:04:d6:a9:f7:96:d3:76:90:24:79:0f:8d:
         f4:c7:fc:5c:b6:50:74:ab:57:d4:0e:65:0e:60:58:3d:fa:7d:
         52:6f:81:f5:c5:61:d9:13:4b:49:b6:09:e7:6f:24:a9:80:8b:
         fb:a3:dc:cc:ec:1f:46:1e:78:0e:c2:75:c8:9a:18:e3:14:c2:
         e4:35:b0:04:33:55:09:af:7e:74:b0:13:37:38:ce:fc:44:ed:
         ef:4c:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org