Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa
File:                     34352e36352e3136302e302f32322d3332203d3e20323731353031.roa (raw, json)
Hash identifier:          dObKt3Euk64vRugNwwTipmlsIDLypS3QvWk5VasHr0c=
Subject key identifier:   04:D4:22:97:66:45:3A:1B:95:1C:90:D4:58:6A:71:01:9C:6A:18:E8
Certificate issuer:       /CN=2ED4975447660C790CC0843B6A994EF14B127A4E
Certificate serial:       508FA788C3776FEF52CDD473A14B5618E3450C1A
Authority key identifier: 2E:D4:97:54:47:66:0C:79:0C:C0:84:3B:6A:99:4E:F1:4B:12:7A:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED4975447660C790CC0843B6A994EF14B127A4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa
Signing time:             Mon 25 Mar 2024 22:57:48 +0000
ROA not before:           Mon 25 Mar 2024 22:52:48 +0000
ROA not after:            Mon 24 Mar 2025 22:57:48 +0000
asID:                     271501
IP address blocks:        45.65.160.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8f:a7:88:c3:77:6f:ef:52:cd:d4:73:a1:4b:56:18:e3:45:0c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED4975447660C790CC0843B6A994EF14B127A4E
        Validity
            Not Before: Mar 25 22:52:48 2024 GMT
            Not After : Mar 24 22:57:48 2025 GMT
        Subject: CN=04D4229766453A1B951C90D4586A71019C6A18E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:0d:36:fa:95:81:57:e8:65:02:7e:cc:79:
                    28:e8:4a:79:b8:de:ee:ca:6c:e7:36:ae:e7:8a:65:
                    ff:5d:05:b9:b8:de:17:45:e7:3f:26:3b:d8:d1:00:
                    da:93:0c:d6:a7:06:27:b7:57:ed:84:fb:e7:bf:ce:
                    22:40:e4:8a:1a:a3:8f:c1:7a:79:b0:81:cd:6a:cf:
                    6f:e1:f0:bb:4a:ff:58:3f:14:df:b6:72:69:08:77:
                    37:7c:58:06:99:d6:cb:ff:db:7e:f0:6a:d0:03:09:
                    53:c9:36:fd:b7:a1:54:5d:9f:bb:1b:f5:9f:29:4d:
                    9e:b1:bd:a6:23:16:e1:9b:82:f2:60:61:66:27:e6:
                    bd:58:38:c1:ba:05:9a:cd:71:bf:81:4f:b0:62:de:
                    a6:33:93:3c:dd:56:8e:b3:57:84:93:5f:d3:c4:b5:
                    58:f2:d0:e6:30:e5:0b:38:48:2a:30:fe:e6:6e:2e:
                    f9:db:08:18:34:ec:a1:ac:66:17:0c:70:0e:64:64:
                    d9:3c:e4:a8:13:c7:46:df:c7:87:f8:19:b6:df:3c:
                    a7:98:98:58:cc:dd:13:ed:b9:23:17:9b:8a:8b:4d:
                    66:41:b4:85:9b:c0:34:bc:e5:cb:d1:93:23:9c:74:
                    42:f6:be:6d:f7:e0:a5:17:35:ae:57:b3:1a:77:2c:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D4:22:97:66:45:3A:1B:95:1C:90:D4:58:6A:71:01:9C:6A:18:E8
            X509v3 Authority Key Identifier:
                keyid:2E:D4:97:54:47:66:0C:79:0C:C0:84:3B:6A:99:4E:F1:4B:12:7A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/2ED4975447660C790CC0843B6A994EF14B127A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED4975447660C790CC0843B6A994EF14B127A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:ec:aa:b6:4b:4b:9d:4c:23:b4:45:fd:12:68:f3:50:11:ed:
         67:98:9a:f1:36:1d:64:89:ca:50:a1:fb:fa:15:52:40:e8:d9:
         a5:a4:3c:64:08:36:5b:c3:79:c5:9c:16:a6:76:4a:15:cc:f6:
         14:9f:af:63:a5:a6:2c:41:b1:06:8c:62:ad:55:ab:7f:b6:0b:
         69:be:f9:89:3b:54:b3:6b:f6:40:79:fa:7b:df:3b:07:c6:b1:
         06:13:95:30:f1:b1:18:27:3c:d6:0a:92:2a:36:8d:2c:e9:50:
         c7:ad:76:52:f6:80:79:6f:02:79:73:54:1e:1d:69:76:f7:c6:
         1e:64:19:f4:a9:93:6d:ca:02:e6:dd:39:1a:38:dc:a1:2b:07:
         2d:25:3d:08:92:bb:4d:d0:2a:4b:1f:d5:ba:6e:d5:6f:b7:b6:
         c4:4a:6c:4a:17:1c:c2:a2:58:9d:83:f8:2b:73:3d:b5:af:c3:
         ae:55:80:00:e5:ff:db:6a:a1:9b:6d:fa:74:f4:51:8b:4c:63:
         68:b1:74:d8:48:5d:a4:b4:22:32:1d:7f:d4:73:6c:f1:73:3f:
         5f:f2:26:9c:65:07:41:65:f2:c7:4f:55:9c:1f:dd:82:da:a5:
         04:78:b9:27:91:ba:3e:0c:68:ae:46:3b:e6:af:73:ca:64:3e:
         b1:ea:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org