Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/34352e342e36302e302f32322d3232203d3e20323636303339.roa
File:                     34352e342e36302e302f32322d3232203d3e20323636303339.roa (raw, json)
Hash identifier:          wRyHl0gLNlyQkq5P2Tj0CjHYQ1eui04BGORBb0GR3A4=
Subject key identifier:   FF:4B:7F:29:5F:DB:49:C9:2A:7E:69:39:EB:C4:E8:5E:BA:44:D2:57
Certificate issuer:       /CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
Certificate serial:       58DD8A01633182A6884AF723E00F13D08DD09284
Authority key identifier: 10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/34352e342e36302e302f32322d3232203d3e20323636303339.roa
Signing time:             Mon 04 Jul 2022 14:26:10 +0000
ROA not before:           Mon 04 Jul 2022 14:21:10 +0000
ROA not after:            Mon 03 Jul 2023 14:26:10 +0000
asID:                     266039
IP address blocks:        45.4.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:dd:8a:01:63:31:82:a6:88:4a:f7:23:e0:0f:13:d0:8d:d0:92:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
        Validity
            Not Before: Jul  4 14:21:10 2022 GMT
            Not After : Jul  3 14:26:10 2023 GMT
        Subject: CN=FF4B7F295FDB49C92A7E6939EBC4E85EBA44D257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:63:c9:ca:fe:48:36:8b:76:76:36:2a:f7:
                    66:4d:fa:2c:a4:3d:43:ee:5a:2f:bc:f7:ef:d1:35:
                    6b:03:84:bd:3a:a6:e3:c6:4a:6e:2c:cc:07:80:0c:
                    63:44:21:2f:a9:ec:b4:a5:9d:58:1d:24:56:fc:cc:
                    95:b8:e3:1a:56:d1:5c:33:55:96:a8:69:8f:cc:42:
                    be:25:23:e8:bb:84:b8:4e:3b:f9:26:8f:ca:9f:36:
                    7e:14:5a:ac:18:a7:1e:50:1c:18:72:35:eb:e8:d1:
                    47:40:c5:ea:0a:15:62:17:77:ec:fd:a7:e5:02:c0:
                    95:a5:5b:f2:cf:59:84:a0:8a:a7:32:c4:e1:83:cd:
                    2a:a8:7c:67:ed:3d:b1:76:75:9a:76:c8:85:6a:d1:
                    51:5a:5b:fd:d7:2e:97:c6:21:cc:9c:34:5b:9a:05:
                    18:cc:bb:94:ab:49:04:78:f5:32:7e:30:e5:af:5b:
                    eb:06:57:fc:45:11:af:e6:3b:2c:5c:4b:ba:0b:44:
                    48:86:20:39:07:ce:80:71:93:c7:14:94:c8:e5:d2:
                    5b:90:4a:1e:32:2c:65:ee:23:94:a1:74:c9:d7:5c:
                    cd:9e:2f:3f:9d:63:88:4a:45:ec:23:4f:e5:e3:0a:
                    89:92:b9:18:7b:00:d2:67:54:27:e0:91:b8:e5:7f:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4B:7F:29:5F:DB:49:C9:2A:7E:69:39:EB:C4:E8:5E:BA:44:D2:57
            X509v3 Authority Key Identifier:
                keyid:10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/34352e342e36302e302f32322d3232203d3e20323636303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:d6:0c:73:32:74:82:6d:6e:06:8d:c6:1a:6c:4c:b0:a5:
         d2:66:2d:70:7a:01:d1:d7:98:44:76:f0:49:26:92:43:74:65:
         ce:25:4e:b1:5b:12:f6:f4:c9:24:fc:bf:c8:6e:bf:69:a2:43:
         df:c8:c9:04:20:e9:9b:fe:f3:32:a8:5a:4a:1c:9d:99:1a:4b:
         6e:b8:aa:38:8d:ef:ea:b4:2b:c5:2c:a2:ac:21:1f:5a:65:61:
         82:53:14:f9:84:0f:04:37:ce:e0:bc:85:8e:59:e5:76:d5:45:
         80:d8:9b:0c:cf:0d:10:d2:3b:71:37:51:69:cc:78:b8:2a:b0:
         d6:e2:4d:dd:b4:6b:48:51:96:c7:a2:8a:56:ac:73:64:48:b3:
         4e:09:6f:97:68:26:dc:5b:24:5b:a2:16:1f:e2:26:5c:36:7e:
         7d:cb:bb:74:a0:73:1c:f2:60:0d:77:54:ca:5c:fd:47:9e:0f:
         af:eb:8c:1a:6a:78:f8:7e:28:96:2d:fc:dc:70:e0:e5:03:a5:
         c6:bd:31:3a:02:c1:bc:f1:88:eb:36:24:a9:4e:7f:6f:a3:33:
         98:87:fd:d6:af:f4:d9:23:ce:3f:3b:fe:65:7f:06:e2:cb:af:
         33:68:0b:8f:d1:e3:33:79:03:df:d0:c2:7f:e5:bc:6c:3c:90:
         09:9a:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org