Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32332f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e32332f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          RNN0KGH3XJ0ln+L9goIafnxeBCvgtAyMtaUm6LnFK8I=
Subject key identifier:   D7:E9:ED:E0:6F:29:2D:D9:9D:1A:C6:5D:18:04:41:FF:69:8E:51:B1
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       018B766A1A445FD95536C844105A5E4DF3CA5F73
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32332f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:22:03 +0000
ROA not before:           Sun 11 Sep 2022 23:17:03 +0000
ROA not after:            Sun 10 Sep 2023 23:22:03 +0000
asID:                     267256
IP address blocks:        45.232.50.23/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:76:6a:1a:44:5f:d9:55:36:c8:44:10:5a:5e:4d:f3:ca:5f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:17:03 2022 GMT
            Not After : Sep 10 23:22:03 2023 GMT
        Subject: CN=D7E9EDE06F292DD99D1AC65D180441FF698E51B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:e4:cd:27:cb:f0:80:e4:89:07:db:b7:6d:
                    32:67:1c:6f:b7:4f:e8:dc:c1:d7:0d:e0:dd:74:12:
                    7c:fc:a7:d3:bd:d4:c3:25:52:ce:9f:1d:3d:f7:e9:
                    b5:b0:fa:85:9f:51:8b:d8:3a:d3:6d:2f:14:59:9f:
                    cd:aa:d8:50:fb:19:a6:4e:c5:3b:1b:05:4a:59:f8:
                    b4:da:15:8b:63:40:27:f3:4e:73:64:1d:04:b2:af:
                    30:9f:da:a6:31:be:84:ba:19:e0:a4:c4:a2:64:50:
                    95:ac:25:41:97:21:b6:c9:ab:42:86:6f:4d:42:b9:
                    62:ac:0b:c6:e5:e2:ef:ce:45:9f:34:aa:60:e1:c2:
                    31:6e:f6:3f:92:54:70:e2:38:dd:bb:05:9d:bf:e6:
                    f2:2b:c2:79:98:d6:92:3f:a9:49:c4:7e:a4:61:ec:
                    88:b5:d9:2b:04:68:62:ed:95:c3:4f:2b:24:b0:a8:
                    ca:3f:fd:f8:03:46:24:62:72:17:3b:ad:d1:69:1e:
                    12:65:64:09:15:75:6f:3e:4c:46:4f:9f:a5:28:e1:
                    00:a0:5b:df:ad:aa:5c:fd:b6:cb:d0:c3:1b:3d:96:
                    b1:96:29:05:af:0c:e1:51:fb:b0:ff:d3:d5:60:c5:
                    e3:68:78:a9:aa:14:bc:00:80:c0:9c:17:40:58:85:
                    84:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E9:ED:E0:6F:29:2D:D9:9D:1A:C6:5D:18:04:41:FF:69:8E:51:B1
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32332f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.23/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:00:36:b0:fc:5c:26:f7:57:2b:76:8e:39:b7:8b:cb:ef:93:
         27:c8:56:f1:a8:ed:12:30:9f:fd:61:4c:53:f4:bc:d9:ba:a4:
         3c:6e:24:df:c2:03:1a:cb:c4:63:bd:04:4a:1b:59:d3:c8:03:
         56:fc:65:0a:5d:a4:01:1b:be:8c:5e:e2:8a:c4:ee:36:40:29:
         6c:6a:7a:50:24:1f:bf:0b:75:d0:87:d9:ae:2e:77:6a:fb:d3:
         a3:4d:3b:13:66:79:b8:93:ea:d2:72:44:41:aa:1b:72:a8:9b:
         9f:b9:52:3b:d8:86:bb:41:57:e1:32:f7:4a:77:eb:0f:f4:ae:
         bd:60:54:7d:1a:c1:51:cf:1c:8f:66:43:8a:49:7a:d0:66:a2:
         b7:2e:5f:1e:56:ff:fb:a5:f7:cb:1d:b0:2b:f5:12:f0:aa:c8:
         2e:55:c3:32:98:d7:86:61:4d:ba:98:1c:d5:5a:27:a1:0f:d0:
         30:d6:3e:6c:d5:88:31:f4:b2:34:b1:63:89:8e:b7:87:c3:d4:
         e8:71:90:88:26:f9:28:bf:2e:92:b3:54:32:a3:03:1d:89:6c:
         8d:b0:51:6d:96:b0:29:54:fe:46:c8:39:5d:35:f6:ae:ca:c1:
         3d:95:42:c5:7c:f8:43:4d:1f:e2:55:07:ac:30:15:b7:28:99:
         ea:d9:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org