Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa
File:                     34352e3137382e32302e302f32322d3232203d3e20323639303135.roa (raw, json)
Hash identifier:          IQw+VLN0IxozAydxshI0iciwSm2qsykemJuZJN0wIUA=
Subject key identifier:   37:03:0E:D1:86:59:25:9C:26:17:0A:6D:8B:61:B8:07:1F:82:66:E6
Certificate issuer:       /CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
Certificate serial:       4C44BD2B889FF7034484498DA07030FC4D053651
Authority key identifier: 5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa
Signing time:             Thu 10 Nov 2022 13:01:31 +0000
ROA not before:           Thu 10 Nov 2022 12:56:31 +0000
ROA not after:            Thu 09 Nov 2023 13:01:31 +0000
asID:                     269015
IP address blocks:        45.178.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:44:bd:2b:88:9f:f7:03:44:84:49:8d:a0:70:30:fc:4d:05:36:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
        Validity
            Not Before: Nov 10 12:56:31 2022 GMT
            Not After : Nov  9 13:01:31 2023 GMT
        Subject: CN=37030ED18659259C26170A6D8B61B8071F8266E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:31:9b:8d:00:78:1b:72:c5:2b:1c:5f:8b:
                    68:43:c9:b0:66:5e:ec:d6:90:f9:79:3c:9b:44:19:
                    68:4a:4d:75:ed:37:06:1b:08:37:eb:09:6c:10:2b:
                    93:dc:2c:2f:42:0d:56:a3:59:30:e6:d1:24:72:91:
                    d1:57:cc:b7:99:dc:da:fc:bf:6b:bb:fe:ca:7e:a0:
                    0a:c6:03:b8:3f:7b:cf:af:08:b5:dc:df:64:7e:80:
                    29:ff:40:ae:e8:ee:59:20:f0:cd:7a:bb:31:0e:61:
                    82:5e:a2:1b:01:a9:42:ab:56:09:80:89:c1:5a:01:
                    59:e3:2a:56:0c:62:88:0d:2a:2a:32:7e:1f:07:34:
                    c9:99:df:fd:be:87:9a:83:45:21:51:57:8b:c8:fc:
                    39:db:f8:5d:33:88:be:f8:6f:4e:ef:c9:a8:79:ba:
                    06:83:aa:36:72:56:c9:5e:fc:06:8e:0f:2d:03:6c:
                    8f:ae:5f:61:54:8c:1e:86:d0:48:56:c5:04:d6:da:
                    bc:2b:a1:18:8b:75:66:12:e4:05:68:f7:18:04:b4:
                    50:01:e8:33:0c:2a:0a:fe:8e:b8:62:37:b6:7e:eb:
                    f8:8c:f3:6d:b0:59:e6:dd:23:96:96:64:ca:2f:34:
                    c0:46:4c:f2:8e:f4:2f:ed:b0:50:ed:e2:4c:21:4c:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:03:0E:D1:86:59:25:9C:26:17:0A:6D:8B:61:B8:07:1F:82:66:E6
            X509v3 Authority Key Identifier:
                keyid:5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:9b:bd:fe:51:95:33:23:6b:04:50:73:8f:96:4c:08:4c:dd:
         cc:e9:b9:56:00:b8:0b:10:cb:53:0b:db:70:3f:3d:79:5f:dc:
         86:6e:ee:a5:83:0b:6f:15:a9:5c:44:97:27:3a:46:74:25:24:
         aa:83:3b:6b:0f:78:ab:28:01:87:21:1b:87:37:8e:87:f9:46:
         79:70:a4:87:99:7b:15:fb:94:97:07:2a:47:cb:15:33:bb:8e:
         1e:ec:b2:46:05:53:e9:03:65:f0:f6:19:27:23:51:4d:5c:71:
         e5:37:bb:d9:0d:f2:61:e3:7e:33:b6:2f:53:cc:08:a8:08:4a:
         0d:16:86:6e:fd:b0:5a:32:1f:f0:ed:e6:0a:32:63:13:7a:24:
         e1:9f:f9:0a:70:42:81:1e:bf:be:54:74:8e:eb:db:6d:be:57:
         8d:84:89:a8:c1:e0:5e:61:4f:1a:e8:8c:b8:f7:2d:71:57:03:
         e1:49:91:8c:3b:86:88:c7:87:cc:e9:5e:81:39:81:e9:1d:7a:
         95:30:27:06:f6:db:14:73:f9:23:2e:4b:69:5c:9b:f0:cf:0c:
         b4:ce:92:04:c8:4f:00:52:fa:c4:5a:99:f5:69:ba:d1:6e:fb:
         86:f4:79:a4:34:2b:a1:9f:d0:84:fc:c4:f6:fc:16:bd:1d:df:
         f8:4f:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org