Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135322e302f32342d3234203d3e20323639303037.roa
File:                     34352e3137362e3135322e302f32342d3234203d3e20323639303037.roa (raw, json)
Hash identifier:          7pilyiWBlJXT6vabMAn0fSIc4pvPhSVrLILm5l1KvGI=
Subject key identifier:   2B:95:53:5D:9F:2C:68:74:57:98:FB:DC:52:AC:89:69:EB:22:D0:D8
Certificate issuer:       /CN=DE52C578BC0F9A7B70A231782F69295C2543D000
Certificate serial:       24F540AE72642026A4B89A5AED984FFFBB4A7A1B
Authority key identifier: DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135322e302f32342d3234203d3e20323639303037.roa
Signing time:             Sat 22 Jan 2022 23:31:41 +0000
ROA not before:           Sat 22 Jan 2022 23:26:41 +0000
ROA not after:            Sat 21 Jan 2023 23:31:41 +0000
asID:                     269007
IP address blocks:        45.176.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f5:40:ae:72:64:20:26:a4:b8:9a:5a:ed:98:4f:ff:bb:4a:7a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52C578BC0F9A7B70A231782F69295C2543D000
        Validity
            Not Before: Jan 22 23:26:41 2022 GMT
            Not After : Jan 21 23:31:41 2023 GMT
        Subject: CN=2B95535D9F2C68745798FBDC52AC8969EB22D0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:60:54:73:cb:3b:c5:ac:63:eb:e2:ab:c1:
                    d9:aa:65:dc:d5:a8:7b:bc:94:e5:65:80:82:fa:0a:
                    a4:1c:d9:8c:24:fa:5b:d2:9e:85:b4:8d:19:56:15:
                    ae:bf:8e:59:6d:c3:3d:07:d5:22:9b:55:47:31:8b:
                    dc:96:3b:01:47:3c:f8:c8:0a:5f:2f:e4:48:6c:9d:
                    0d:2b:0b:60:c2:91:ec:33:b3:05:ad:e0:1f:7c:ba:
                    4c:d8:ed:d2:39:b7:2c:e6:65:ec:68:19:14:05:01:
                    ff:4c:35:cc:cd:47:f0:11:4e:26:9c:13:c2:f2:28:
                    33:41:dd:80:6d:ff:06:48:fd:33:2c:96:b8:09:ba:
                    60:e0:8e:61:2a:07:2c:20:1f:b6:54:39:61:01:c7:
                    18:3e:a9:0c:4b:47:52:59:13:f9:15:1f:e1:2e:4f:
                    99:b4:a9:8e:74:ff:41:38:27:3e:26:5d:f5:01:49:
                    ef:6f:e4:60:b9:7b:26:dd:45:48:02:21:90:33:37:
                    45:27:70:cf:1c:3b:86:78:66:61:c9:5e:76:f6:ba:
                    88:24:7f:a9:01:3f:a0:5e:6d:a5:c6:04:51:9a:30:
                    fb:61:f3:27:c2:11:62:09:a9:54:f5:5b:d0:28:5c:
                    78:1d:c5:09:f2:cd:c7:b1:8f:ea:18:28:6c:bd:b8:
                    72:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:95:53:5D:9F:2C:68:74:57:98:FB:DC:52:AC:89:69:EB:22:D0:D8
            X509v3 Authority Key Identifier:
                keyid:DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135322e302f32342d3234203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:f9:f2:ef:b9:bd:37:58:50:22:c8:30:ab:8b:28:e3:70:75:
         4d:ea:ba:67:4f:8b:9c:24:62:61:03:b8:d7:b2:51:f8:e9:ae:
         9e:66:3a:c0:2b:96:22:1b:32:9b:61:ba:be:91:23:46:0f:b1:
         65:c3:75:47:ea:94:03:5d:af:bb:26:bc:3e:67:60:55:0e:8e:
         9f:f8:44:20:84:be:e1:71:0c:d1:b6:c2:87:12:2c:29:0d:1d:
         78:15:cb:0d:3c:a7:b4:4e:ac:3a:f9:cc:ff:cf:32:eb:04:08:
         07:d9:ef:fb:a6:93:2f:01:9d:81:e8:a5:8c:17:7d:ca:38:30:
         19:b0:ab:87:52:79:97:25:6d:d0:95:75:b9:e0:5c:9e:35:67:
         78:74:5b:0d:0b:ea:4b:59:3c:35:21:01:3a:ec:e3:81:1f:65:
         f2:8b:b7:ff:10:45:76:86:49:1e:2d:a6:b2:ae:ab:23:5d:a5:
         8c:f1:63:b0:71:2d:40:cd:8a:af:09:cb:75:db:d4:ca:4b:2c:
         ff:8f:45:d2:3f:e8:b9:4f:06:11:26:b3:1d:8e:0e:83:e9:31:
         f6:99:8c:44:5f:33:4a:76:f6:bd:05:a2:da:a5:bf:31:e6:c7:
         7c:a2:e5:e8:db:30:4b:ef:44:a7:4f:d3:ab:9e:0b:a5:2c:a9:
         1a:bb:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org