Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa
File:                     34352e3137382e32332e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier:          6AfWKNND1c4R8Buq10EVajRaWOmGpylK0p+5T51hbVs=
Subject key identifier:   99:1E:31:8A:A2:BE:08:C4:39:A0:58:6E:FE:71:9F:D0:66:37:2A:59
Certificate issuer:       /CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
Certificate serial:       2D9EDA2B73744414028469A41D8482EE5655A15C
Authority key identifier: 5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa
Signing time:             Thu 10 Nov 2022 13:01:30 +0000
ROA not before:           Thu 10 Nov 2022 12:56:30 +0000
ROA not after:            Thu 09 Nov 2023 13:01:30 +0000
asID:                     269015
IP address blocks:        45.178.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9e:da:2b:73:74:44:14:02:84:69:a4:1d:84:82:ee:56:55:a1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
        Validity
            Not Before: Nov 10 12:56:30 2022 GMT
            Not After : Nov  9 13:01:30 2023 GMT
        Subject: CN=991E318AA2BE08C439A0586EFE719FD066372A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:f3:00:97:7c:ac:2b:37:f9:cc:e7:43:6a:
                    fc:d2:a5:fe:60:6c:c2:19:dc:ee:ea:cb:db:a9:5b:
                    31:4b:9e:49:3a:8a:08:68:d2:b3:2e:ac:67:42:9f:
                    59:b7:ce:66:a6:2d:2b:e9:6d:50:8c:80:77:e0:b3:
                    74:c7:c9:0d:4f:e8:53:ce:e3:b6:c5:44:33:da:f8:
                    1c:93:eb:53:bf:9a:a8:c4:b5:fb:e5:b4:0f:15:40:
                    1b:d1:d5:35:84:18:05:31:d7:c2:79:23:11:e2:98:
                    69:1e:43:3b:67:6a:21:99:b9:0e:d4:e0:9a:a5:74:
                    00:33:8c:d4:f0:22:ae:28:ea:cd:0f:0d:3e:45:a2:
                    6b:ea:ee:48:d9:69:3b:4a:9d:82:ce:08:76:80:cb:
                    a3:9f:bc:70:e4:1e:dd:77:77:b4:36:ad:66:00:57:
                    c5:f5:9f:7c:fd:14:1e:03:39:b4:6f:05:d5:d7:a3:
                    80:bf:3e:13:6e:a0:7e:12:ce:74:9a:fa:6d:3d:0c:
                    e6:ed:4a:15:be:40:7c:88:06:ea:14:cd:6a:c9:ab:
                    07:ed:0b:de:0c:6d:dc:58:09:18:27:02:28:2b:a4:
                    11:58:61:3a:9b:54:c6:5f:09:b8:34:82:ce:45:fa:
                    7d:87:68:73:76:c4:20:00:b6:35:87:f4:c7:a6:79:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1E:31:8A:A2:BE:08:C4:39:A0:58:6E:FE:71:9F:D0:66:37:2A:59
            X509v3 Authority Key Identifier:
                keyid:5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:4b:8d:36:10:73:31:18:fc:e7:55:e5:2a:01:b0:07:fe:d2:
         c3:3f:23:c6:a6:55:a4:f7:e5:a3:ca:7c:c0:f2:96:9b:27:39:
         4c:ec:22:39:e7:5b:25:be:15:db:52:45:b4:51:34:2e:b4:4d:
         75:fe:40:e0:59:0d:b7:e9:cf:04:3d:66:16:28:11:93:30:54:
         c9:92:7f:93:ed:ad:94:d7:d4:3a:63:74:f0:54:e0:e2:a8:a3:
         35:b6:a0:73:1e:4d:b3:80:b1:b2:ae:4e:63:bc:ac:71:8b:86:
         95:36:31:9a:af:51:79:0a:fd:6f:be:a6:3b:07:3b:23:bb:8f:
         9c:10:dc:19:7b:9d:7d:7d:ea:46:e5:ed:e5:19:94:66:80:4c:
         c2:c5:93:8c:83:ab:e2:1d:44:be:21:cc:f3:96:93:57:4a:20:
         83:30:d4:a5:72:51:7e:4f:d2:d2:56:db:12:11:b7:a0:ba:17:
         e4:73:82:07:19:1d:89:43:dd:f6:23:13:a5:83:a6:2d:e3:a8:
         9c:19:cc:77:1a:e0:10:12:ab:b4:0f:3a:35:c7:90:12:c4:2d:
         1d:80:f8:f4:93:af:ec:ce:5a:e3:b8:6b:54:e8:9a:14:99:7b:
         c7:71:c6:6d:3a:3c:ce:f9:51:57:33:fe:b3:11:8b:48:1d:6b:
         50:d3:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org