Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/34352e3232382e3232342e302f32342d3234203d3e20323637303830.roa
File:                     34352e3232382e3232342e302f32342d3234203d3e20323637303830.roa (raw, json)
Hash identifier:          GsexWklxjL+E12eLgsvWU1hIaqgjfyP7wg8Sd0aexCg=
Subject key identifier:   55:A1:2F:2F:BF:72:B7:4F:8A:09:DC:B4:7C:6C:65:CD:F1:DA:D3:54
Certificate issuer:       /CN=B853BE29B6BEB55F7E83C4314E352AE87F81760A
Certificate serial:       6388725C1FEBA0C9FDEEEA8D97A011F043C70CE0
Authority key identifier: B8:53:BE:29:B6:BE:B5:5F:7E:83:C4:31:4E:35:2A:E8:7F:81:76:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B853BE29B6BEB55F7E83C4314E352AE87F81760A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/34352e3232382e3232342e302f32342d3234203d3e20323637303830.roa
Signing time:             Wed 09 Nov 2022 12:30:28 +0000
ROA not before:           Wed 09 Nov 2022 12:25:28 +0000
ROA not after:            Wed 08 Nov 2023 12:30:28 +0000
asID:                     267080
IP address blocks:        45.228.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:88:72:5c:1f:eb:a0:c9:fd:ee:ea:8d:97:a0:11:f0:43:c7:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B853BE29B6BEB55F7E83C4314E352AE87F81760A
        Validity
            Not Before: Nov  9 12:25:28 2022 GMT
            Not After : Nov  8 12:30:28 2023 GMT
        Subject: CN=55A12F2FBF72B74F8A09DCB47C6C65CDF1DAD354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:bb:d2:eb:d5:f6:df:c3:d8:20:0b:8d:3b:
                    f7:af:e2:5d:20:74:04:06:65:97:db:ea:70:ea:ee:
                    35:2b:a0:47:6c:c3:23:da:a6:22:d1:96:ae:56:bf:
                    d7:15:d3:f1:1d:84:14:61:9f:76:1e:3a:7c:82:a8:
                    01:16:e4:fc:66:7c:77:c1:b0:19:3a:54:dd:d0:08:
                    69:47:e7:18:34:84:a0:ec:5b:a3:8e:6c:2e:9b:62:
                    0c:1d:c9:d5:89:0a:e4:dc:fc:a0:00:98:6c:ba:d8:
                    a0:0e:3f:c8:09:17:e4:f0:d2:31:cf:f8:6f:ff:db:
                    dc:fd:04:85:69:15:bc:70:b6:2b:5a:bc:4a:57:a3:
                    44:a7:b5:2b:72:fa:92:84:d7:12:10:b5:f0:72:03:
                    ac:e9:cf:eb:f8:2b:73:2a:d5:3c:90:0e:5a:7e:c1:
                    db:5d:23:9c:b7:50:02:49:55:7b:79:46:e7:4c:f1:
                    f3:ee:16:55:09:d9:e2:7c:b9:84:35:3d:aa:29:f7:
                    fa:8b:28:09:1e:ce:e4:95:8d:58:dc:a2:74:88:93:
                    7d:a8:e8:ec:90:32:12:8b:55:9d:5f:1e:17:ad:27:
                    84:47:c5:22:31:d3:c0:13:f6:af:e0:ef:36:b9:1c:
                    0f:66:05:d8:42:7a:ea:a2:2d:dc:40:d1:80:c0:16:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A1:2F:2F:BF:72:B7:4F:8A:09:DC:B4:7C:6C:65:CD:F1:DA:D3:54
            X509v3 Authority Key Identifier:
                keyid:B8:53:BE:29:B6:BE:B5:5F:7E:83:C4:31:4E:35:2A:E8:7F:81:76:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/B853BE29B6BEB55F7E83C4314E352AE87F81760A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B853BE29B6BEB55F7E83C4314E352AE87F81760A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/34352e3232382e3232342e302f32342d3234203d3e20323637303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:5b:03:8c:18:e3:30:b5:4b:30:1b:b6:72:3e:f3:39:a7:74:
         5f:3e:37:f1:67:65:74:31:7b:4a:48:61:06:0b:0f:c6:3a:f8:
         26:ea:85:40:e8:dc:07:14:d1:70:a3:5d:4c:b9:af:38:e2:26:
         9f:b6:40:3c:fa:53:4b:f7:87:c4:bb:35:19:25:ba:dc:a5:03:
         fb:f7:bc:7d:86:dd:31:ac:c8:85:df:52:f6:e4:43:a4:a4:e9:
         60:26:8f:f1:00:57:65:ff:f6:05:d4:ad:b6:a2:a5:cc:60:d7:
         0f:4a:70:1e:65:49:03:c1:8e:38:ad:df:8a:29:b3:60:70:35:
         89:53:fd:d0:7e:50:83:0d:04:e7:c1:3a:24:f6:d7:4b:98:9b:
         65:c7:48:34:e0:90:04:52:61:61:45:48:be:45:62:94:91:95:
         f8:4d:1c:09:89:9b:b1:22:12:5f:ee:43:5c:bb:e1:f4:b2:5d:
         be:78:ba:c2:07:1f:95:32:7c:73:e1:0d:50:9e:79:54:e2:18:
         31:a5:b7:71:fd:a5:b6:d9:be:2d:d7:7c:db:e8:ec:b5:ea:3a:
         2a:b8:fd:67:b1:4d:40:af:92:93:fe:34:40:12:74:83:27:f4:
         db:75:c9:b2:ce:0b:93:50:5d:39:32:66:ee:ab:1b:9e:ca:d0:
         fa:ff:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org