Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/34352e3137392e3134342e302f32322d3232203d3e20323639303839.roa
File:                     34352e3137392e3134342e302f32322d3232203d3e20323639303839.roa (raw, json)
Hash identifier:          kN8GIP+MLMBmyUj3Yx36932am49npw4TkZHA+/KIbno=
Subject key identifier:   B7:E3:6E:6A:71:2A:27:10:C9:E3:E4:3A:AC:06:C9:92:3D:89:0E:54
Certificate issuer:       /CN=D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC
Certificate serial:       69AD17286EE25919C747966D342F51C1A64B22B0
Authority key identifier: D0:EA:EE:9D:24:13:7D:1A:D1:B1:1F:FC:B4:3D:72:B6:A8:03:71:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/34352e3137392e3134342e302f32322d3232203d3e20323639303839.roa
Signing time:             Fri 22 Jul 2022 16:46:03 +0000
ROA not before:           Fri 22 Jul 2022 16:41:03 +0000
ROA not after:            Fri 21 Jul 2023 16:46:03 +0000
asID:                     269089
IP address blocks:        45.179.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ad:17:28:6e:e2:59:19:c7:47:96:6d:34:2f:51:c1:a6:4b:22:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC
        Validity
            Not Before: Jul 22 16:41:03 2022 GMT
            Not After : Jul 21 16:46:03 2023 GMT
        Subject: CN=B7E36E6A712A2710C9E3E43AAC06C9923D890E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:89:4e:61:ed:09:38:44:14:17:b0:c1:9b:
                    63:3b:91:5b:c4:76:f7:83:5d:63:3d:0f:a9:48:be:
                    fc:e5:1d:49:74:a6:6e:fb:91:45:6c:7f:af:7f:e8:
                    1e:75:07:91:e8:e8:a4:11:bc:72:60:af:29:e1:e0:
                    58:18:4a:e7:59:57:ed:e6:af:70:f4:34:7f:cc:be:
                    bf:28:06:92:81:ab:4c:ed:6e:b3:65:be:01:7f:91:
                    d3:a1:e8:cb:a1:c6:23:63:16:1c:2e:bc:20:5d:5c:
                    4b:5a:2a:0c:ba:36:c4:11:0a:3b:00:c3:47:6b:4a:
                    a2:9f:ed:3a:f9:a7:e3:28:d8:09:14:e7:13:d9:af:
                    e2:6d:f7:87:9e:d3:4e:ed:2c:f6:dc:6c:81:b3:09:
                    e0:a0:a7:12:67:74:4b:81:c4:aa:20:b7:12:40:ea:
                    9a:da:6b:cc:b2:60:a0:84:d7:8c:0b:a0:bd:86:0e:
                    00:5b:7f:03:3a:f9:a0:3f:36:4b:ef:aa:00:66:41:
                    92:ca:b6:85:5d:85:c0:d2:5b:9c:14:c4:0c:42:65:
                    18:8a:6b:c5:8c:c9:1b:0d:bd:7d:13:1e:ca:6f:87:
                    8b:ef:ca:7b:90:a4:d9:fd:06:1c:48:1c:2e:44:6c:
                    9a:79:fb:04:2a:ff:df:a6:a3:1d:15:88:52:4c:6a:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E3:6E:6A:71:2A:27:10:C9:E3:E4:3A:AC:06:C9:92:3D:89:0E:54
            X509v3 Authority Key Identifier:
                keyid:D0:EA:EE:9D:24:13:7D:1A:D1:B1:1F:FC:B4:3D:72:B6:A8:03:71:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/34352e3137392e3134342e302f32322d3232203d3e20323639303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:91:fc:e1:50:f2:39:d0:f3:29:fe:16:1e:06:a0:a2:1e:b7:
         81:9e:e4:66:a0:9c:81:dc:33:92:1a:13:ed:12:c6:87:cc:3d:
         3a:8a:24:0b:0f:2b:43:df:cb:d4:9e:8e:e8:5e:1b:9d:0d:59:
         a5:d1:0d:0a:c1:df:d1:e2:c7:3f:20:29:0d:61:5d:f9:42:9e:
         43:fa:cb:91:77:86:5d:a5:18:d5:89:01:fe:fa:04:28:d9:75:
         fb:6b:ce:5a:f3:bb:da:f7:80:53:7e:da:3a:c3:2d:c3:bb:8b:
         6a:c9:08:9d:77:2f:8e:8f:dd:ad:a0:9e:fb:3d:ae:2a:80:ab:
         1b:de:d1:a1:48:0f:d0:2f:01:9d:ea:d4:0d:b0:c6:20:9e:fc:
         78:80:55:2c:0c:c8:34:36:fe:6d:d5:44:63:90:ef:c3:dc:fd:
         51:c9:67:a0:86:39:70:96:0f:6f:04:84:12:20:25:68:bd:44:
         5f:0d:3a:5c:b0:35:0d:e9:9d:c7:40:23:2f:04:21:24:2e:49:
         64:67:0a:66:2a:bc:0d:25:0f:07:46:75:4f:4c:a1:2e:46:c0:
         29:3c:db:7b:cd:9d:18:44:52:d0:83:ef:82:7d:4c:c2:42:2d:
         28:19:a4:14:4c:76:a1:9c:7d:17:78:6f:21:d8:69:aa:4a:71:
         5d:af:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org