Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e33322f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e33322f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          /sYXCU2AcVx0NvQOiDzwBB8gBuK8zcv4BPh4fS4Ll0I=
Subject key identifier:   C0:A4:67:9F:57:28:A3:25:F0:3B:B5:4F:3B:93:1A:F7:3E:22:3A:09
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       4554251F78694383620E1E1F19A10339464085A0
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e33322f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:10:53 +0000
ROA not before:           Sun 11 Sep 2022 23:05:53 +0000
ROA not after:            Sun 10 Sep 2023 23:10:53 +0000
asID:                     267256
IP address blocks:        45.232.50.32/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:54:25:1f:78:69:43:83:62:0e:1e:1f:19:a1:03:39:46:40:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:05:53 2022 GMT
            Not After : Sep 10 23:10:53 2023 GMT
        Subject: CN=C0A4679F5728A325F03BB54F3B931AF73E223A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:d5:fe:e4:96:6f:94:00:a3:33:2b:4d:a9:
                    b4:1b:5d:3a:41:ee:59:de:40:28:80:77:0b:bc:17:
                    73:09:3f:48:48:e5:bf:c7:55:f0:f9:b4:93:0a:93:
                    c6:91:29:b8:ff:5b:b3:e9:06:3a:53:eb:99:de:9a:
                    9c:ed:9e:65:cb:6d:23:6e:dc:e0:27:18:49:2a:9e:
                    0e:7a:41:e4:c7:97:46:74:31:34:98:d1:d0:e5:56:
                    33:d1:62:64:14:08:92:6b:d0:28:f0:27:ef:03:e1:
                    18:9a:7b:6e:78:ce:22:bc:65:1a:f1:d8:4f:48:7b:
                    94:45:ee:78:2b:ba:9d:67:5f:eb:03:60:ba:d2:4e:
                    3f:56:a9:15:4b:16:64:f8:fc:c7:e8:f0:ad:a9:8e:
                    51:6f:bc:f6:4c:fe:d4:b7:4e:dd:d6:00:ef:99:da:
                    0e:b1:cd:46:c8:e6:84:fe:79:82:77:7c:82:8e:e4:
                    10:91:55:01:be:00:9e:5e:a7:bf:81:b7:ca:45:dc:
                    15:f9:2a:1a:98:00:10:1f:1c:00:34:1b:83:ca:cb:
                    54:9f:ec:4b:d4:31:79:70:34:5c:1a:3b:0e:03:86:
                    06:a2:9f:62:35:f7:c2:2e:50:ca:c0:0b:d1:0e:5a:
                    d1:98:11:3f:0a:4b:6d:bf:4a:33:eb:d6:d7:35:82:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A4:67:9F:57:28:A3:25:F0:3B:B5:4F:3B:93:1A:F7:3E:22:3A:09
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e33322f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.32/32

    Signature Algorithm: sha256WithRSAEncryption
         57:9f:ce:ef:5b:20:ba:cc:a5:88:25:60:8d:7b:6d:ec:69:05:
         7a:68:3e:9e:e0:49:6c:36:9e:75:f8:de:00:2a:f4:3c:51:15:
         0e:d0:af:83:97:91:16:72:fa:a3:b4:46:45:9e:7b:ed:dc:e2:
         47:00:15:68:e4:24:eb:9d:1f:d3:ef:f0:de:ce:17:16:bd:4a:
         ca:7c:bb:e2:a4:00:7d:cc:0f:09:ea:5e:ef:3e:b9:47:e3:fc:
         bd:0b:49:27:60:58:32:74:58:e4:b6:48:52:cd:b1:8f:b3:f2:
         8a:76:2b:af:72:e2:34:df:d8:39:c3:86:f6:43:d5:0f:ad:ae:
         60:05:2b:76:16:de:b7:1b:71:bf:4c:ad:6f:3f:04:5f:07:14:
         e6:93:e3:4b:4c:8d:d4:5c:9f:44:90:97:e1:f1:bb:ea:34:07:
         6c:47:1a:92:ad:93:c6:e6:91:f2:0c:36:7b:05:29:47:96:fe:
         87:26:56:4c:32:14:a2:bb:b4:ca:2f:9f:96:28:34:52:ce:84:
         77:27:6c:dc:75:1b:92:e1:ff:61:a0:5f:04:01:e7:7a:63:ff:
         72:54:26:9f:c3:62:e9:e9:f7:6e:fc:a8:2a:5c:85:b2:20:df:
         8e:89:5d:6d:ae:94:de:e3:49:6e:93:87:e3:2e:06:6a:a8:b9:
         f8:5b:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org