Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/34352e342e36342e302f32322d3232203d3e203238323230.roa
File:                     34352e342e36342e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          bcjyMIgRHNgMNJShmvsM3D2V0sXI9DxMA7L8m1QATEA=
Subject key identifier:   15:C5:57:32:3E:F8:D7:8A:81:0F:09:7C:98:04:08:A0:0B:5F:DE:3E
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       5007AB03679A4B1D5E3AB3E3F42B2D3D0462C880
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/34352e342e36342e302f32322d3232203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:16 +0000
ROA not before:           Tue 12 Mar 2024 19:46:16 +0000
ROA not after:            Tue 11 Mar 2025 19:51:16 +0000
asID:                     28220
IP address blocks:        45.4.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:07:ab:03:67:9a:4b:1d:5e:3a:b3:e3:f4:2b:2d:3d:04:62:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:16 2024 GMT
            Not After : Mar 11 19:51:16 2025 GMT
        Subject: CN=15C557323EF8D78A810F097C980408A00B5FDE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:88:67:32:ed:c7:e0:83:e5:f2:0c:15:b7:
                    b3:2e:8d:03:4d:73:e5:ef:82:f8:3d:73:d1:12:25:
                    65:f3:3a:1c:6a:fc:0b:76:fb:9c:62:2f:83:b5:98:
                    ed:87:12:fc:62:aa:fc:8a:1e:fe:e2:f5:ff:f9:df:
                    29:6d:64:a7:01:ac:bb:84:aa:0a:a3:44:2d:e9:29:
                    b1:aa:fe:7a:6b:5f:87:be:ba:0e:3e:8f:08:07:f6:
                    b3:13:7a:2d:4d:e1:86:2f:88:0f:79:10:e5:0c:00:
                    dc:ad:7f:72:54:b1:f4:42:0e:10:fe:00:18:4c:cb:
                    07:f5:fe:0b:e8:9a:a7:e3:cd:26:ed:1e:8c:0a:f6:
                    40:a8:c0:e2:ab:7a:08:f0:6d:93:71:0e:c4:5c:86:
                    3a:cf:8b:8a:fa:15:8d:0f:fb:ed:c6:fe:30:50:c9:
                    e5:47:93:a0:bc:d4:f9:cc:e9:63:10:db:2e:ac:89:
                    28:dc:f8:1c:3f:1a:a7:8b:64:7e:89:3d:0e:11:8a:
                    ee:ff:f9:fc:f0:55:7c:82:af:59:90:77:e3:7a:f1:
                    c6:72:01:d2:4e:05:41:27:14:27:7a:f6:f4:d4:b4:
                    de:43:5a:01:22:ba:d2:81:fa:2c:04:b2:37:5e:a2:
                    28:e6:ff:89:86:ec:ec:12:a6:7e:b8:87:41:e1:ec:
                    61:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:57:32:3E:F8:D7:8A:81:0F:09:7C:98:04:08:A0:0B:5F:DE:3E
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/34352e342e36342e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:9f:f3:4f:93:77:ae:b7:c9:e0:4b:02:80:8d:0b:a3:72:83:
         c0:c7:27:2a:76:0c:4b:2f:75:b4:a1:54:2c:28:dc:ef:13:5e:
         0b:12:d1:6a:79:0f:bd:e3:e7:6b:84:d8:76:c2:67:99:13:33:
         92:96:72:f6:ea:33:3d:9b:67:19:67:da:5f:94:50:02:80:f9:
         58:76:cd:d5:03:7e:b9:d5:d8:93:04:5c:ce:b4:12:a0:77:46:
         97:9a:75:54:7a:05:49:85:d0:24:35:23:15:68:74:a6:35:7c:
         a5:b0:55:a1:c0:71:3e:df:eb:b6:ca:3c:80:61:54:61:3c:18:
         86:18:ac:fb:24:e6:dc:4c:b0:25:11:51:90:fe:51:0e:b2:64:
         16:8e:8f:5c:2a:9a:fc:3f:98:c6:60:4b:04:7d:6a:55:8e:44:
         94:8a:b8:7a:f6:55:c4:d0:c2:ae:b3:79:ab:97:e6:f5:8a:42:
         b3:94:d5:0c:fb:38:b5:ad:c0:2d:39:91:a9:e2:cc:93:6d:d0:
         a9:3a:b8:e5:b4:fe:03:aa:a7:f8:de:08:9c:9b:43:40:89:e6:
         c3:56:bc:30:14:2b:59:fe:ba:c3:e8:b4:ff:5b:c1:8f:6e:d3:
         29:75:9d:dd:91:bc:38:13:90:d7:f7:53:11:75:58:a4:9d:04:
         a0:a8:03:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org