Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32342d3234203d3e20323639303135.roa
File:                     34352e3137382e32322e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier:          iGTup1z0OXbIdG6tW4FfJct40XopsDEA117l2u4esYM=
Subject key identifier:   4A:0B:26:5B:7A:42:50:62:55:6E:0C:EB:70:D3:93:C1:BF:85:FF:A2
Certificate issuer:       /CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
Certificate serial:       2814D3E826384C9F3BB50C6BE12BDB5197B62A87
Authority key identifier: 5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32342d3234203d3e20323639303135.roa
Signing time:             Thu 10 Nov 2022 13:01:31 +0000
ROA not before:           Thu 10 Nov 2022 12:56:31 +0000
ROA not after:            Thu 09 Nov 2023 13:01:31 +0000
asID:                     269015
IP address blocks:        45.178.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:14:d3:e8:26:38:4c:9f:3b:b5:0c:6b:e1:2b:db:51:97:b6:2a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
        Validity
            Not Before: Nov 10 12:56:31 2022 GMT
            Not After : Nov  9 13:01:31 2023 GMT
        Subject: CN=4A0B265B7A425062556E0CEB70D393C1BF85FFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:be:97:17:2f:d2:a7:cb:40:a3:b7:ca:81:
                    32:61:bf:42:62:09:34:d3:8e:40:a1:0e:83:00:9c:
                    70:16:9b:ef:e3:a7:1f:a8:a6:37:f6:0e:53:0f:a0:
                    c5:f5:5b:e8:7b:cd:a6:65:c6:a5:bf:a4:23:fe:60:
                    e1:69:e4:7f:50:fa:b1:5f:26:25:7e:81:97:23:91:
                    ee:55:3a:fd:6a:58:ca:95:fb:88:4a:c5:05:96:da:
                    65:87:85:5d:b9:4e:83:06:fc:cc:7a:c7:16:90:07:
                    63:39:35:67:5b:d8:76:3b:42:8a:fa:ef:83:8d:74:
                    dd:44:2b:8a:ea:2f:67:d8:60:21:2c:d1:1b:94:cc:
                    c4:76:8d:b1:bf:8e:56:b6:0f:b9:0c:88:1e:fe:09:
                    c3:38:c8:d6:92:34:37:0a:5e:e6:fc:88:fd:7b:17:
                    72:90:25:01:e6:7b:b7:3d:b0:12:8e:07:7d:96:12:
                    ec:cb:c8:06:e8:1a:7c:10:7c:fd:8c:14:cc:9f:82:
                    20:76:e5:8a:5b:92:ba:6b:00:2b:c3:b9:ea:eb:9d:
                    62:8d:f8:f6:53:bc:9c:b4:f1:6f:4a:1d:f2:9e:a3:
                    01:f9:e4:b0:4f:22:dd:0f:b2:40:74:4c:85:1b:03:
                    35:28:91:fe:d4:32:22:c4:c1:be:1b:1a:c8:e9:23:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0B:26:5B:7A:42:50:62:55:6E:0C:EB:70:D3:93:C1:BF:85:FF:A2
            X509v3 Authority Key Identifier:
                keyid:5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32342d3234203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:1e:07:65:0f:f5:d3:8e:27:41:78:57:1e:80:8c:58:d8:
         63:e9:06:68:e2:bc:cb:a4:12:95:0a:a5:ac:e8:7b:ca:3c:53:
         1a:8a:7a:7a:b4:32:04:a7:8f:d4:57:2f:aa:f0:c7:a1:20:34:
         60:6b:d9:fe:6b:17:a3:d4:4d:28:9b:45:e2:62:ee:6d:b5:d7:
         23:36:7a:ce:ac:38:55:a8:e4:2a:81:84:02:8d:68:8c:3b:53:
         c6:c3:a6:ef:70:d9:fd:87:1c:42:22:82:25:8a:0a:e1:2f:24:
         ed:23:95:16:5f:57:d5:bb:fd:49:db:86:29:aa:67:5f:b3:e3:
         61:28:da:c1:54:70:26:6f:36:48:53:a8:31:d1:45:b4:38:26:
         f5:28:38:a4:0b:36:1d:57:90:e6:34:60:06:fd:2c:9a:48:f4:
         95:1e:0b:3c:5e:a0:c7:e0:e2:62:7a:b0:f9:cc:8e:bd:92:7f:
         0e:52:bf:2b:71:e6:61:c4:1e:47:c5:1b:9f:43:3f:ec:22:ca:
         81:9e:0b:63:60:3d:2c:41:f8:12:3f:48:18:5f:66:46:11:d8:
         b6:ff:b2:36:31:44:57:95:91:00:86:5f:b0:90:f3:e8:5f:1e:
         e4:a2:98:1a:01:fd:b0:6c:4d:7e:3c:6d:1a:64:a5:e8:2e:b7:
         63:ac:eb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org