Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/34352e3232362e3134382e302f32322d3232203d3e20323636393638.roa
File:                     34352e3232362e3134382e302f32322d3232203d3e20323636393638.roa (raw, json)
Hash identifier:          7yXAIxfof4eqMM28uSSPabU4x5neD/Qhij18XKf/xpg=
Subject key identifier:   DC:67:44:6A:D1:2D:65:14:1F:D7:E3:6E:64:C2:81:A2:86:78:59:DB
Certificate issuer:       /CN=1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3
Certificate serial:       15D8A53EA8ADA79FA72287575BB5A0C5EA7CD821
Authority key identifier: 13:50:D3:B3:3A:AF:9C:FF:03:71:D2:E5:AB:F7:7D:75:23:CE:B4:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/34352e3232362e3134382e302f32322d3232203d3e20323636393638.roa
Signing time:             Wed 15 Nov 2023 20:22:43 +0000
ROA not before:           Wed 15 Nov 2023 20:17:43 +0000
ROA not after:            Wed 13 Nov 2024 20:22:43 +0000
asID:                     266968
IP address blocks:        45.226.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d8:a5:3e:a8:ad:a7:9f:a7:22:87:57:5b:b5:a0:c5:ea:7c:d8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3
        Validity
            Not Before: Nov 15 20:17:43 2023 GMT
            Not After : Nov 13 20:22:43 2024 GMT
        Subject: CN=DC67446AD12D65141FD7E36E64C281A2867859DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:94:ee:0e:6f:b4:cf:f0:85:27:0b:5d:d0:
                    e2:95:ae:e6:18:9f:66:06:25:ed:3a:c9:84:3e:64:
                    ea:13:dd:15:6c:9a:8b:14:15:f7:fb:10:95:83:ca:
                    95:22:3d:44:1f:ec:29:bc:70:83:b9:2d:07:88:51:
                    5a:a9:98:af:83:a2:8a:ba:2a:4c:92:4b:71:8f:a6:
                    c1:f2:98:af:f9:09:2b:de:a2:3f:c9:64:35:2b:d2:
                    20:47:33:ca:13:d6:b4:d2:06:23:c3:f1:d5:40:bc:
                    1f:f7:aa:f8:7c:29:60:54:7f:d0:60:58:8c:d4:e8:
                    cc:6b:b8:5d:13:90:09:e2:16:60:f6:ff:4b:49:88:
                    2f:99:d1:ec:f0:e4:b4:de:53:15:9b:31:10:72:d7:
                    15:80:a8:ad:0c:e5:5c:6e:45:48:e6:b3:29:60:7d:
                    68:4f:79:3c:3d:77:5c:7f:32:63:7d:b2:0e:4a:d6:
                    95:e3:f6:e9:b6:e7:4c:78:b1:c2:58:73:fd:c1:87:
                    a4:77:de:e9:94:48:08:ba:4c:09:a8:3f:1a:7c:e4:
                    33:e9:cf:04:14:d8:a6:75:56:53:2b:a3:c1:26:1f:
                    83:8b:26:dd:93:d4:96:cb:b6:d6:4f:21:19:52:ce:
                    d4:c4:a7:bc:30:78:92:4e:f9:61:e3:d4:27:a7:e4:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:67:44:6A:D1:2D:65:14:1F:D7:E3:6E:64:C2:81:A2:86:78:59:DB
            X509v3 Authority Key Identifier:
                keyid:13:50:D3:B3:3A:AF:9C:FF:03:71:D2:E5:AB:F7:7D:75:23:CE:B4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/34352e3232362e3134382e302f32322d3232203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:97:64:1d:9f:a1:b7:b7:e2:5d:69:cf:42:f7:28:62:ef:b3:
         95:b3:d5:2b:02:c5:58:90:8a:27:46:e6:72:b1:d5:dc:f4:0a:
         79:4f:33:e6:89:d0:f1:ec:f8:6a:f6:77:bc:6a:32:50:60:e1:
         ba:82:ee:53:e9:5b:79:6b:ff:9c:fb:c8:73:8a:45:f5:f9:02:
         41:b4:d2:45:b0:11:62:08:95:90:4a:38:93:4c:e3:6f:8e:f6:
         20:7f:e0:eb:5b:9f:90:b6:31:05:ef:01:fa:44:27:9b:f4:57:
         f7:7e:60:c7:80:1d:35:85:50:f2:78:32:9f:ab:08:12:ce:9b:
         d2:d1:0c:98:0e:fa:3f:62:a2:7f:4b:76:a8:5a:38:97:8d:73:
         9b:36:cf:18:39:3b:45:49:6f:08:a0:68:df:3c:ec:8a:a8:23:
         cd:d8:2d:b6:41:16:46:e9:71:b7:d2:11:f0:69:34:58:a6:e4:
         4c:6e:4d:7c:51:6f:ee:ec:4c:e1:73:29:43:e8:80:79:6c:58:
         55:73:92:87:ed:3a:39:4e:3e:86:0a:28:ce:9f:a7:23:cc:74:
         f9:46:a8:63:07:2d:2e:3e:b2:c2:a6:a0:d1:4f:ca:01:1a:0b:
         f7:4e:ca:42:9d:1b:98:a0:93:be:20:37:60:b7:2f:75:8f:8d:
         68:cc:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org