Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37362e302f32322d3232203d3e20323639323334.roa
File:                     34352e3138322e37362e302f32322d3232203d3e20323639323334.roa (raw, json)
Hash identifier:          IoN/9aEIUpyhqJ4HczOKORTxcUv3jvxsBwh1wBUgpgE=
Subject key identifier:   9C:5B:E5:E6:D3:6C:50:8E:15:0D:42:5C:ED:62:BC:B8:21:97:76:D3
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       589AB8E23CAB3D3F8C2E42AB7C1B31EFB3A3435D
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37362e302f32322d3232203d3e20323639323334.roa
Signing time:             Tue 14 Jun 2022 18:29:44 +0000
ROA not before:           Tue 14 Jun 2022 18:24:44 +0000
ROA not after:            Tue 13 Jun 2023 18:29:44 +0000
asID:                     269234
IP address blocks:        45.182.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9a:b8:e2:3c:ab:3d:3f:8c:2e:42:ab:7c:1b:31:ef:b3:a3:43:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jun 14 18:24:44 2022 GMT
            Not After : Jun 13 18:29:44 2023 GMT
        Subject: CN=9C5BE5E6D36C508E150D425CED62BCB8219776D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:68:fb:50:df:32:f7:74:e8:ee:e1:1f:f6:
                    2f:8f:ad:d2:65:5c:3d:49:0f:f0:28:51:93:9c:c8:
                    4e:26:c8:19:59:35:6f:44:23:4a:16:c9:e7:81:50:
                    11:d8:43:c4:fa:86:4e:95:35:07:6a:21:c2:65:b5:
                    e8:65:7f:1a:31:c2:7b:98:ef:da:7b:0f:b6:49:cf:
                    6b:1d:07:bb:92:94:57:a6:9a:c7:d3:96:99:3a:d0:
                    fb:71:6b:5b:bd:23:e9:8b:1d:1a:1e:20:8f:1b:a4:
                    84:0d:95:51:80:2d:07:29:cf:77:94:d5:91:8a:60:
                    d3:89:c6:ec:49:ba:df:86:ea:1f:57:bd:1a:d8:49:
                    17:a3:c4:fd:69:e4:5a:6e:72:ef:24:4f:28:49:d6:
                    aa:9e:85:4e:92:67:f9:f0:91:0c:99:c3:8f:44:52:
                    df:96:4e:69:51:46:0b:5c:60:c3:a6:c0:4b:fd:5e:
                    ff:b5:e5:58:69:59:a1:fe:70:46:6b:f0:14:b3:2b:
                    e5:28:95:88:55:9c:ab:5e:f2:ba:a7:0c:cd:8a:98:
                    47:02:9e:b8:a3:fa:93:5d:ca:32:fd:19:31:4b:21:
                    81:e3:09:95:94:37:23:0c:28:4e:b0:f9:36:d1:ee:
                    b4:bf:b4:74:08:16:2e:12:05:dd:83:7e:44:e4:71:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:E5:E6:D3:6C:50:8E:15:0D:42:5C:ED:62:BC:B8:21:97:76:D3
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37362e302f32322d3232203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:02:16:70:1d:08:b5:fe:c5:22:ac:b5:f2:14:53:48:8b:d6:
         c1:9d:af:9d:51:f2:5f:b1:eb:ad:3c:02:8f:0f:04:19:a5:4b:
         72:03:63:53:6e:39:2b:86:fe:c4:f4:1e:56:3b:3b:91:50:28:
         85:06:10:f1:08:10:ef:d8:f3:ec:19:72:5d:e9:af:d9:cf:56:
         03:24:11:e5:08:aa:9f:d3:25:41:41:33:b1:c4:dd:76:f0:18:
         7c:5f:b5:f0:dd:d9:53:02:26:be:dc:26:24:fe:6b:8c:ee:12:
         15:32:ad:03:90:04:d0:0e:a1:f0:9a:7e:03:3d:22:e2:be:ed:
         2b:f6:1a:a1:cb:dc:58:ff:7f:43:04:1c:6c:1f:23:7b:3d:2b:
         2f:75:ee:82:4b:27:2a:11:ae:f8:68:86:be:0d:f4:cd:5b:71:
         f4:b3:41:a0:e1:21:b7:83:fa:7c:13:3b:3b:ae:50:c6:09:4a:
         68:53:d6:67:0e:2d:d9:2d:85:ec:21:ad:31:a3:ce:cd:20:c9:
         b0:89:d2:4e:b8:a1:14:69:17:36:dd:2a:d4:74:c1:35:25:ea:
         0f:f7:45:c2:88:a7:4f:03:1b:62:7c:5f:67:b8:6f:e0:5c:9a:
         59:94:ca:92:a0:f0:da:49:9a:28:70:0c:49:9f:74:2e:77:df:
         c5:c3:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org