Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31372f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e31372f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          Xo6im5Mm5hv69zAv+ole29Huj8hIHMEc++Rb5GOReK0=
Subject key identifier:   0A:E9:10:49:4C:22:ED:56:2B:04:9B:4B:F0:E4:D7:BB:1B:46:60:D8
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       3A6E89BCC9822863C176FDF8E377996012EFD2F0
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31372f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:28:43 +0000
ROA not before:           Sun 11 Sep 2022 23:23:43 +0000
ROA not after:            Sun 10 Sep 2023 23:28:43 +0000
asID:                     267256
IP address blocks:        45.232.50.17/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6e:89:bc:c9:82:28:63:c1:76:fd:f8:e3:77:99:60:12:ef:d2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:23:43 2022 GMT
            Not After : Sep 10 23:28:43 2023 GMT
        Subject: CN=0AE910494C22ED562B049B4BF0E4D7BB1B4660D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c2:46:a1:46:8d:36:f8:8f:70:f0:22:25:92:
                    55:a1:0b:8c:d7:a2:b8:3f:0f:b3:85:01:40:cc:77:
                    8a:c4:99:07:0e:26:e1:dc:bd:04:eb:dd:79:23:ef:
                    aa:46:b6:ec:46:b7:7c:cc:25:22:01:62:6d:cf:b0:
                    17:ab:8f:ed:6f:db:33:1b:ac:ff:bb:c0:34:0a:c2:
                    ab:05:24:8a:82:12:12:1d:d0:9c:ed:3f:5c:b2:67:
                    7d:94:d6:19:51:02:5e:ef:66:96:49:f0:fb:9a:29:
                    3f:23:b3:0b:c9:9d:0c:e4:82:58:7e:74:cc:22:64:
                    ae:f5:81:f2:98:98:4d:fc:fa:de:33:c6:ca:7e:47:
                    12:56:9b:20:29:1a:3f:d9:49:b3:f8:8a:09:3c:77:
                    4f:33:8a:ae:a2:ca:b3:28:8d:5b:62:7f:a3:d5:f0:
                    57:4e:e5:ed:17:23:4a:57:0e:57:05:e1:01:ff:39:
                    7d:3e:a1:ab:48:e4:29:b1:d1:83:19:55:75:8c:c7:
                    e6:86:b6:04:6c:b0:20:19:62:0d:be:41:f9:bf:65:
                    fb:72:a7:1e:b4:dd:34:61:a2:ec:95:63:47:a7:c4:
                    5f:9d:a4:3c:11:54:45:7c:97:01:63:9a:87:43:b3:
                    03:e0:7b:8a:26:86:18:00:eb:60:c6:5f:54:01:0d:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E9:10:49:4C:22:ED:56:2B:04:9B:4B:F0:E4:D7:BB:1B:46:60:D8
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31372f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.17/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:ae:9c:7b:50:95:af:8d:20:9e:22:43:45:ec:43:a9:c8:64:
         3f:41:d7:3f:67:66:aa:8e:24:e6:c5:ec:da:07:93:f1:f4:13:
         98:94:c1:a9:e8:2a:88:29:26:e4:77:56:48:dc:4e:2f:b4:b5:
         16:5a:7d:cc:cf:0f:b4:92:b1:99:93:ee:c2:87:f4:7c:d7:93:
         f9:2e:10:c6:a1:da:c1:c8:ed:b8:41:0a:f2:d2:5e:eb:00:96:
         40:28:70:d4:40:6b:46:f0:3a:8a:71:44:f1:10:7d:c4:e2:23:
         d8:e3:eb:24:2b:98:e0:46:3f:28:bc:8b:ae:22:11:2d:c3:68:
         40:6c:9d:72:d2:bf:5f:89:5c:37:4c:fa:c3:90:d9:7f:e0:0a:
         f6:5e:71:7a:92:f6:d9:d1:78:ff:d1:80:c1:2d:5d:68:2d:0f:
         e5:22:7f:cf:96:86:55:1b:47:04:86:e7:90:23:26:15:ad:08:
         25:e7:49:35:6e:56:af:c4:36:9f:2f:ac:40:9a:19:ca:49:c2:
         f4:24:c5:d3:c2:9c:e1:6e:b1:6e:8e:b5:e0:4a:3b:cc:d7:8c:
         98:74:36:0f:dd:e0:82:ad:70:9a:dc:ef:65:71:04:71:6d:52:
         f6:cd:a0:f5:1b:ab:d0:c8:46:25:4e:22:16:cf:af:f0:5e:89:
         5e:82:aa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org