Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130302e302f32332d3233203d3e20323638353935.roa
File:                     34352e3136332e3130302e302f32332d3233203d3e20323638353935.roa (raw, json)
Hash identifier:          4TJ2akJRVKh9inJclrw4NyZeklKn4Jm0KUuq41JN4fs=
Subject key identifier:   3B:05:0F:9A:04:4F:25:8E:58:02:E7:23:2C:6D:4F:44:15:90:85:1C
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       4F7426F89ED9B1AA3B7BA2CB9B4D0E8C0AD6EEBA
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130302e302f32332d3233203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:37:24 +0000
ROA not before:           Mon 22 Aug 2022 21:32:24 +0000
ROA not after:            Mon 21 Aug 2023 21:37:24 +0000
asID:                     268595
IP address blocks:        45.163.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:74:26:f8:9e:d9:b1:aa:3b:7b:a2:cb:9b:4d:0e:8c:0a:d6:ee:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:32:24 2022 GMT
            Not After : Aug 21 21:37:24 2023 GMT
        Subject: CN=3B050F9A044F258E5802E7232C6D4F441590851C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:50:f7:c8:57:57:69:4a:93:79:b0:71:e9:
                    81:31:7c:84:07:0d:3b:4e:61:41:67:27:0d:a5:8d:
                    69:90:8a:df:ab:af:04:75:1b:58:c2:10:fe:cf:81:
                    5d:85:34:80:ed:8b:c9:06:89:44:cc:b4:2b:dd:97:
                    62:98:35:b9:5a:fd:cb:8d:e9:29:b5:71:6a:7f:5f:
                    00:f7:27:3f:0a:45:aa:59:27:20:7b:f9:00:a5:3f:
                    96:a9:00:6e:05:61:8f:5a:d0:0b:8b:6a:10:e6:fc:
                    91:b0:18:9e:d6:e6:fe:4b:2b:0c:3f:6d:62:45:68:
                    12:20:82:44:b6:ca:85:a4:6c:76:4d:92:97:e3:39:
                    4f:b5:54:d1:a4:49:fe:2e:4c:4c:27:8c:d4:d8:74:
                    2e:2b:3d:ff:d3:34:33:f4:7b:32:95:17:bf:7c:8a:
                    73:96:35:f0:59:11:e6:ad:0f:b8:9a:8e:7a:ef:2c:
                    a6:c2:c3:1c:31:d1:f0:ae:c6:cb:d0:11:72:ad:f0:
                    ab:34:1e:17:da:22:f9:f9:24:27:fa:17:93:a7:4f:
                    e1:d5:82:4d:d9:3d:a6:86:92:db:4a:9d:66:db:64:
                    86:a4:02:e8:c5:78:90:35:9e:8c:9b:58:dc:33:40:
                    e7:85:7d:5e:d2:4e:03:a7:ca:a1:b5:28:dc:54:f5:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:05:0F:9A:04:4F:25:8E:58:02:E7:23:2C:6D:4F:44:15:90:85:1C
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130302e302f32332d3233203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:68:0f:04:55:60:a6:91:90:4c:56:c7:6b:31:f8:d0:99:e8:
         0b:19:65:f5:b9:5c:1f:65:ee:dd:05:6b:96:08:d5:ac:b2:12:
         32:c1:ba:0a:5a:e6:cd:c1:fb:28:06:da:af:46:b9:9a:3d:76:
         01:09:5e:53:64:44:81:53:0a:48:5f:c6:c7:c8:2f:03:7c:d5:
         f3:93:12:d6:bc:d1:14:02:62:18:e7:23:9a:da:49:b8:fa:39:
         86:6b:4e:71:3b:dd:58:d5:38:b6:39:e9:b7:97:b8:5c:10:98:
         59:7b:51:da:33:00:34:a8:38:fc:0d:70:49:4e:db:93:37:b5:
         30:f1:11:66:a4:b3:cc:ab:ae:c6:c1:93:67:f8:a8:a4:c1:5d:
         79:d2:b6:1e:2f:f8:cc:0a:e4:2e:c0:ea:e4:97:5e:3e:1f:5a:
         40:65:23:3a:2b:60:fe:72:8c:81:5c:ea:4f:f2:45:f7:71:c8:
         c3:8d:99:d1:0f:0b:15:15:42:e4:36:b2:f3:de:3e:9f:e8:c9:
         d7:e4:dd:a4:97:7a:14:11:28:9f:fd:f5:b8:1f:d7:6e:89:e7:
         45:16:15:e0:27:20:b6:96:8c:cb:bd:8b:76:71:e4:17:d7:0c:
         7b:43:78:52:04:96:73:bc:9c:55:5a:d7:28:ee:df:0a:dc:98:
         46:0a:e9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org