Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135332e302f32342d3234203d3e20323639303037.roa
File:                     34352e3137362e3135332e302f32342d3234203d3e20323639303037.roa (raw, json)
Hash identifier:          PFCjbEH9wRnlMsuy9hzP9nikWS4mwvfcNAmizYg2bKI=
Subject key identifier:   3B:CE:DB:37:B9:0D:AA:32:20:71:3D:7A:72:69:81:81:AE:89:4B:7C
Certificate issuer:       /CN=DE52C578BC0F9A7B70A231782F69295C2543D000
Certificate serial:       08A40D7DAC2A08A7B92960050FFDD0EFD5371714
Authority key identifier: DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135332e302f32342d3234203d3e20323639303037.roa
Signing time:             Sat 22 Jan 2022 23:31:41 +0000
ROA not before:           Sat 22 Jan 2022 23:26:41 +0000
ROA not after:            Sat 21 Jan 2023 23:31:41 +0000
asID:                     269007
IP address blocks:        45.176.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a4:0d:7d:ac:2a:08:a7:b9:29:60:05:0f:fd:d0:ef:d5:37:17:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52C578BC0F9A7B70A231782F69295C2543D000
        Validity
            Not Before: Jan 22 23:26:41 2022 GMT
            Not After : Jan 21 23:31:41 2023 GMT
        Subject: CN=3BCEDB37B90DAA3220713D7A72698181AE894B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:a8:9c:0a:85:2c:f1:b6:69:33:c5:a8:26:
                    38:18:f6:43:21:e3:26:93:cd:69:d5:9d:35:7e:62:
                    d3:7a:71:c6:44:31:12:1c:9f:ce:a8:b5:d0:cd:b9:
                    a8:29:10:07:5d:5a:e4:60:72:d6:87:56:9e:93:22:
                    bb:9b:8d:ee:b5:5c:85:75:fd:5d:e1:06:05:5a:b7:
                    17:1a:7f:45:13:e2:17:c1:f9:02:40:fa:5e:83:f6:
                    e4:fb:d2:8e:c5:32:ba:53:9a:61:51:79:14:82:e4:
                    66:75:69:4a:7a:9b:0d:57:07:86:9e:84:ce:3e:9b:
                    bf:cf:58:79:19:e6:b4:a3:02:cd:4a:aa:26:05:a9:
                    b9:ec:73:3c:91:b9:65:80:7f:a3:09:13:c6:0c:a0:
                    a8:50:72:a2:e6:0b:75:4a:d8:20:cf:c6:00:dc:f8:
                    de:f2:e8:a8:90:9b:28:8a:1e:e9:ed:f2:cd:7c:3c:
                    c8:b2:41:8c:f8:16:27:68:f5:28:08:4b:17:95:c1:
                    98:3e:81:f7:6e:19:c0:5b:80:5c:02:c5:07:09:66:
                    ee:61:ea:94:de:0f:f1:46:80:a2:53:f2:8f:e3:fe:
                    86:41:8d:d9:9e:82:ca:2d:5f:51:cf:13:8e:11:84:
                    1f:34:7c:01:18:9d:a1:a4:92:46:19:12:82:f1:0d:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CE:DB:37:B9:0D:AA:32:20:71:3D:7A:72:69:81:81:AE:89:4B:7C
            X509v3 Authority Key Identifier:
                keyid:DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135332e302f32342d3234203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:79:42:bc:91:8f:5c:d6:30:a2:3e:a1:be:bf:90:15:8a:4b:
         d6:a4:d9:1b:d1:4c:b1:43:75:42:8f:4a:3b:b5:94:e1:f4:dd:
         da:5b:62:7f:c9:16:92:39:97:68:a8:53:bb:92:32:e8:ca:f5:
         72:be:0e:7c:cb:5d:c9:84:4c:05:b8:2e:02:2e:5a:fb:cb:ed:
         15:ef:67:23:4a:0a:87:cf:ad:7d:9a:37:3b:e2:ec:3b:8e:57:
         41:d0:66:ff:6b:dc:99:39:61:7f:37:db:4d:f6:3c:7e:7d:c0:
         fc:b8:e4:65:89:5c:f8:0e:d1:2e:7b:a9:cc:06:c9:a4:81:8f:
         1e:10:e9:12:a6:35:90:e0:ca:7c:b4:01:ad:14:ad:69:63:78:
         39:93:c9:fb:18:65:3d:bc:20:7b:64:b7:86:58:72:f2:00:dc:
         9b:0d:76:f3:68:cb:13:21:25:9f:13:c7:b6:3f:63:ca:61:36:
         46:b6:8e:63:2a:d9:46:25:a4:08:ff:62:5f:ea:69:48:e4:ff:
         1a:60:4c:16:84:1f:7e:be:ab:53:66:f7:49:f0:8c:cd:ce:0a:
         17:01:4d:05:a2:2e:13:ec:70:49:90:02:42:38:cf:b9:23:17:
         6f:0e:ad:32:36:70:86:89:20:1a:35:7d:80:53:28:22:7b:bb:
         ff:b5:21:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org