Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32312e302f32342d3234203d3e20323639303135.roa
File:                     34352e3137382e32312e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier:          jG6XdnSXdMY9iV5ZEcgx7AzvHiiP81HiUdZ1sVp+yhc=
Subject key identifier:   AC:1E:F6:70:D5:AB:CC:1A:4D:87:49:C6:A1:27:84:61:16:C7:39:83
Certificate issuer:       /CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
Certificate serial:       520DFF3456AFC5EF7085DAE818FFF8948F12C718
Authority key identifier: 5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32312e302f32342d3234203d3e20323639303135.roa
Signing time:             Thu 10 Nov 2022 13:01:30 +0000
ROA not before:           Thu 10 Nov 2022 12:56:30 +0000
ROA not after:            Thu 09 Nov 2023 13:01:30 +0000
asID:                     269015
IP address blocks:        45.178.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0d:ff:34:56:af:c5:ef:70:85:da:e8:18:ff:f8:94:8f:12:c7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
        Validity
            Not Before: Nov 10 12:56:30 2022 GMT
            Not After : Nov  9 13:01:30 2023 GMT
        Subject: CN=AC1EF670D5ABCC1A4D8749C6A127846116C73983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:3b:b7:e4:c7:b1:b7:1f:d9:92:fb:22:64:
                    56:6c:09:e5:7f:74:9c:79:b7:c4:39:c3:9a:ea:34:
                    18:d7:a7:56:53:9c:1f:98:ae:e5:f0:64:cb:82:57:
                    ed:8b:d4:b2:65:70:46:a2:cb:9e:d8:9f:4f:d1:5b:
                    cb:41:95:f8:7e:f1:be:3b:6a:3c:d6:a9:43:41:8c:
                    36:49:48:a9:cb:27:4a:e3:ee:57:85:9f:b1:33:d5:
                    3e:c9:81:54:40:1d:03:e0:7d:3e:6a:4e:97:5c:28:
                    47:e8:d3:73:2b:f9:aa:e8:ee:87:ef:da:da:5e:64:
                    df:3a:e0:39:2d:7c:4a:17:74:b1:fc:a4:7d:f3:3b:
                    38:12:62:c8:43:42:4a:b1:40:bd:52:78:46:08:69:
                    6c:9e:a6:f3:cb:b5:86:ba:ce:51:9c:c0:a5:7f:e1:
                    4f:d4:0b:ff:18:a1:24:ac:92:88:a8:c0:21:10:b2:
                    4d:cc:6e:1a:dd:b2:25:8f:37:e7:18:cb:56:e7:be:
                    9b:07:ff:ac:b2:ee:c8:e3:42:6e:55:db:71:be:f0:
                    51:04:24:1d:d3:22:4e:44:f6:f6:b3:23:a2:3c:c5:
                    23:d5:5c:dc:aa:f1:59:c2:4e:58:01:6e:0a:0a:3c:
                    7d:a9:bb:c1:f5:bc:d7:c1:53:4d:a9:c9:a4:14:1a:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1E:F6:70:D5:AB:CC:1A:4D:87:49:C6:A1:27:84:61:16:C7:39:83
            X509v3 Authority Key Identifier:
                keyid:5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32312e302f32342d3234203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:98:1d:cb:9c:dd:e4:12:60:80:08:99:47:74:29:20:e7:
         98:21:aa:67:46:f6:92:2f:ca:2c:6b:34:ea:50:4e:e9:47:eb:
         e7:cd:a0:9d:43:f4:da:82:2f:8e:2d:d6:5b:9c:57:b5:18:08:
         64:c6:af:95:47:36:0a:ab:ac:eb:2d:e6:ff:bf:3d:a7:1b:dc:
         7b:cd:e4:b8:57:21:94:27:e8:f9:0a:0a:55:1f:56:78:f0:85:
         22:4d:90:dd:d1:2f:fa:70:ca:c3:c5:91:89:0b:46:09:f4:fb:
         2f:07:e7:00:6c:00:e8:c8:be:ea:2c:90:fa:94:e9:af:07:5d:
         03:62:93:63:98:09:ad:d7:f2:d3:44:40:c7:e5:57:c1:c2:af:
         64:c5:dd:96:82:d2:fd:2b:cf:3e:6d:0b:ca:03:80:fd:80:3a:
         dc:2e:48:4f:ed:9b:49:fd:7f:51:e7:57:1d:1d:cf:2e:23:d8:
         67:0e:ef:4b:51:dc:4e:78:bd:17:4b:9f:f9:bb:9e:2d:42:5e:
         f0:80:34:3a:16:be:ea:9c:e4:0f:98:28:35:f0:5a:02:68:54:
         aa:4e:e7:1d:bc:4a:ed:bb:00:a1:4f:8b:84:37:96:c0:1b:49:
         93:60:8d:5d:26:74:a2:37:f9:22:33:2f:69:4d:86:e9:00:6c:
         c7:0f:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org