Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135362e302f32322d3232203d3e203532383732.roa
File:                     34352e342e3135362e302f32322d3232203d3e203532383732.roa (raw, json)
Hash identifier:          1phZNzP2Iz0s1fGZ40tCfyK+t2gwNxxTEn9ppR6TUlk=
Subject key identifier:   6F:A4:11:FD:22:92:3A:64:BF:B3:FF:C2:3D:53:F5:48:4E:49:65:AA
Certificate issuer:       /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial:       047583E747F6AC972224297F1496F52FBF054B7F
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135362e302f32322d3232203d3e203532383732.roa
Signing time:             Mon 13 Nov 2023 19:11:31 +0000
ROA not before:           Mon 13 Nov 2023 19:06:31 +0000
ROA not after:            Mon 11 Nov 2024 19:11:31 +0000
asID:                     52872
IP address blocks:        45.4.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:75:83:e7:47:f6:ac:97:22:24:29:7f:14:96:f5:2f:bf:05:4b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C015248532BCE3959F73092749FDE164934402
        Validity
            Not Before: Nov 13 19:06:31 2023 GMT
            Not After : Nov 11 19:11:31 2024 GMT
        Subject: CN=6FA411FD22923A64BFB3FFC23D53F5484E4965AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:74:c5:8e:fb:94:ae:dc:e4:82:77:77:dc:
                    51:55:3a:ec:c8:02:5b:20:5f:fb:d8:11:63:42:a2:
                    9b:2b:e1:1e:8d:a0:73:7f:fa:97:60:e0:c2:96:81:
                    d6:d5:df:9b:66:5e:6c:75:b4:b5:68:ab:3c:b5:27:
                    b6:f5:16:d2:02:b8:56:4a:0c:a2:f1:a6:79:ab:2c:
                    9b:38:85:1e:b4:0e:47:26:72:f4:a6:90:d2:37:e3:
                    93:47:cf:b0:85:d6:63:c8:c5:e4:d2:eb:f1:17:0e:
                    61:12:d0:7c:8c:da:6e:fd:d5:dd:96:43:3f:98:58:
                    e6:37:78:2b:00:d6:60:96:1a:78:07:ff:e8:2b:71:
                    1f:89:f8:ca:f4:63:12:80:44:b0:d1:7b:a8:4b:8f:
                    ad:e9:a8:a7:03:3a:53:76:a2:fd:a3:37:09:e4:60:
                    c4:52:14:67:01:1a:32:fc:ff:38:89:38:ce:6d:53:
                    bd:ab:1a:cd:31:c3:32:16:cc:e8:99:63:e9:d9:71:
                    57:cd:e0:86:e9:77:cd:08:ea:ea:da:cf:10:a0:2f:
                    c7:30:70:48:10:9d:47:a4:b8:1d:ef:95:11:b7:89:
                    2a:b0:d7:4f:d5:7b:1f:f9:a2:40:92:a4:40:b0:19:
                    de:ff:c7:76:42:02:b6:4e:19:31:4b:1e:b7:b5:69:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:11:FD:22:92:3A:64:BF:B3:FF:C2:3D:53:F5:48:4E:49:65:AA
            X509v3 Authority Key Identifier:
                keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135362e302f32322d3232203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:70:63:c7:f7:bc:ce:26:fb:9e:06:47:5c:61:25:0c:75:
         4b:56:d4:16:d0:2e:81:a1:54:ca:8d:c2:ca:9c:b6:34:01:fb:
         90:97:01:49:74:41:cc:08:8a:e2:31:47:70:19:48:cd:47:a7:
         fc:89:d5:7f:ff:c1:69:8a:c5:ab:6b:9c:23:44:92:df:04:99:
         65:18:8c:45:20:1b:5f:07:c3:72:f2:a7:0a:d2:f3:8c:42:6e:
         ee:80:5a:be:32:05:e5:31:40:df:98:69:93:32:16:17:9d:bc:
         2b:f2:24:ee:78:be:8b:a6:dd:7c:b2:95:35:39:25:5e:a3:b5:
         3d:42:b1:d1:b2:15:90:b1:e3:a7:cf:3f:9d:9e:3e:b2:b9:29:
         da:bf:2b:df:d1:b2:51:cf:57:88:7a:bc:4b:9b:72:fa:73:07:
         37:86:6a:9c:0b:21:8d:1d:e1:cd:4b:14:71:5c:ab:75:86:1b:
         0a:95:e1:1a:97:42:1a:43:8b:5f:db:3d:34:f7:b7:84:88:23:
         ef:1e:8d:eb:e3:32:1c:f0:1c:c0:b8:42:3e:99:51:d1:c3:4b:
         90:70:60:2c:e5:77:cb:5a:f4:9a:da:ed:52:8c:b0:37:ba:9b:
         a0:55:fe:76:f3:38:47:da:c7:d5:86:d0:3c:7b:fb:e9:c1:3c:
         86:38:b6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org