Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32322d3332203d3e20323638363232.roa
File:                     34352e3136342e33362e302f32322d3332203d3e20323638363232.roa (raw, json)
Hash identifier:          35x1/cHQi1ifJMDALzZpfYPj5Jsc9rFWmIG43Ojg9vk=
Subject key identifier:   32:09:78:70:43:8E:50:89:7C:5C:D3:E2:52:15:E9:02:CE:37:F4:35
Certificate issuer:       /CN=4497D639152C45DECCF541D4FC925E73D6BCDFC1
Certificate serial:       1DC77F36FB621BE8519BB384DE4EC2D9C1090EDD
Authority key identifier: 44:97:D6:39:15:2C:45:DE:CC:F5:41:D4:FC:92:5E:73:D6:BC:DF:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4497D639152C45DECCF541D4FC925E73D6BCDFC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32322d3332203d3e20323638363232.roa
Signing time:             Thu 01 Dec 2022 13:29:56 +0000
ROA not before:           Thu 01 Dec 2022 13:24:56 +0000
ROA not after:            Thu 30 Nov 2023 13:29:56 +0000
asID:                     268622
IP address blocks:        45.164.36.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c7:7f:36:fb:62:1b:e8:51:9b:b3:84:de:4e:c2:d9:c1:09:0e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4497D639152C45DECCF541D4FC925E73D6BCDFC1
        Validity
            Not Before: Dec  1 13:24:56 2022 GMT
            Not After : Nov 30 13:29:56 2023 GMT
        Subject: CN=32097870438E50897C5CD3E25215E902CE37F435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:27:d8:1c:89:de:a8:5d:8b:70:63:44:92:
                    1e:2f:35:0c:77:0d:4e:39:87:d4:89:ec:37:5d:58:
                    cf:dc:4e:22:ca:6e:7d:83:7d:b2:07:57:40:04:c3:
                    4d:aa:bf:31:b3:95:e5:b0:04:51:a1:65:3c:0f:f7:
                    9d:84:18:1b:fb:9c:c9:0a:66:8d:16:6a:3f:1f:14:
                    8f:e7:46:66:70:94:5c:48:15:1b:26:8c:eb:b6:3a:
                    a3:a0:4d:dd:47:56:d5:4b:35:74:c4:b9:f6:ba:de:
                    cb:f1:ec:3e:46:d2:64:16:d9:94:ab:2f:55:f3:57:
                    14:ba:7e:f1:2e:71:e2:89:16:21:ff:ab:88:b2:58:
                    7a:f9:bd:98:d6:6b:7d:78:e7:8c:ba:43:e6:a9:ea:
                    95:db:a7:c0:bf:c2:1f:48:b2:93:15:9f:40:93:61:
                    60:6d:fd:a2:35:74:15:a6:b5:dd:28:c1:68:10:ae:
                    e8:7f:f5:27:63:9a:7a:d0:ed:b8:59:a3:dc:8e:52:
                    02:cf:d4:55:14:05:32:e7:6d:98:c5:d5:57:71:57:
                    5a:36:a2:19:cb:76:f3:40:97:a6:57:d3:71:9f:b8:
                    9e:86:a3:b0:76:a8:35:34:e3:22:e0:6a:b2:6a:93:
                    7c:6c:a5:30:d6:03:a7:e7:6a:92:5d:18:18:3f:9f:
                    be:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:09:78:70:43:8E:50:89:7C:5C:D3:E2:52:15:E9:02:CE:37:F4:35
            X509v3 Authority Key Identifier:
                keyid:44:97:D6:39:15:2C:45:DE:CC:F5:41:D4:FC:92:5E:73:D6:BC:DF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/4497D639152C45DECCF541D4FC925E73D6BCDFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4497D639152C45DECCF541D4FC925E73D6BCDFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32322d3332203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:62:2a:38:54:e9:cd:65:ec:04:43:f6:2a:d1:5e:42:fe:05:
         0b:5c:77:0a:cd:40:b5:ef:3d:a3:66:6c:76:74:00:d8:f9:03:
         d0:9c:20:88:dd:b3:4f:79:94:8d:27:19:5b:26:12:6d:bd:c2:
         8d:7c:85:1a:72:58:10:6f:75:47:b2:6e:02:1b:9d:ad:25:32:
         b9:e4:58:e6:cc:88:01:64:d1:9e:3e:8d:fa:54:9e:e7:16:a6:
         64:25:51:25:e6:61:1e:5b:6c:58:98:ef:35:20:7a:fa:ab:aa:
         84:92:d2:75:af:0c:91:98:99:10:fc:5a:7f:64:31:78:49:e4:
         00:98:69:a5:7d:da:51:3b:1f:7d:a9:99:01:0a:34:48:42:c9:
         04:4f:f8:77:2c:fd:43:b8:5b:bf:db:08:85:f1:80:76:95:11:
         21:7f:44:b8:51:f8:19:e4:30:2e:b8:4b:95:8a:8e:27:f3:79:
         b9:3d:b6:cd:5e:fc:22:7c:0e:a5:54:d2:d3:63:ae:53:f9:d9:
         fd:a7:e2:8a:f3:63:4a:32:fa:f6:b7:a4:aa:f9:aa:b9:a6:cd:
         95:69:d6:40:ea:a6:40:4b:f3:91:b5:1a:b6:01:ba:42:70:c9:
         b9:e3:19:f6:0f:ba:5d:66:74:89:a8:70:7e:c6:f3:6c:97:3d:
         52:e8:99:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org