Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/34352e3136322e3135352e302f32342d3234203d3e20323633333437.roa
File:                     34352e3136322e3135352e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          QNea2VF0+D9b5364+xG8sKPsjtq3fXYc9vNUgSzOz/w=
Subject key identifier:   21:EC:50:0C:E4:42:7F:95:A2:03:38:8A:D6:E0:D7:7C:84:B1:9B:49
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       0815642A96A18D03F3DAC06FD650D1FA098A3C77
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/34352e3136322e3135352e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 01:03:41 +0000
ROA not before:           Tue 20 Jun 2023 00:58:41 +0000
ROA not after:            Tue 18 Jun 2024 01:03:41 +0000
asID:                     263347
IP address blocks:        45.162.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:15:64:2a:96:a1:8d:03:f3:da:c0:6f:d6:50:d1:fa:09:8a:3c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 00:58:41 2023 GMT
            Not After : Jun 18 01:03:41 2024 GMT
        Subject: CN=21EC500CE4427F95A203388AD6E0D77C84B19B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:6f:a2:1d:7b:a6:f7:51:c8:ec:fa:ad:b9:
                    b7:24:cd:13:62:eb:84:45:31:93:20:ed:57:2f:60:
                    5b:a7:11:aa:5d:36:9f:e4:98:4d:a2:f9:50:a1:32:
                    ec:81:e3:a7:4f:61:57:9a:f7:8a:68:4a:73:18:f2:
                    31:f0:ab:0d:1b:f5:e1:7d:1e:23:d0:6b:47:1e:c5:
                    1d:db:02:53:06:a2:c0:fd:3f:7e:a9:1f:a5:0a:5b:
                    64:b2:e0:fb:d5:0d:a5:3a:9b:20:97:c4:2a:2a:61:
                    f0:1c:db:56:5a:00:62:56:ea:8f:91:aa:ca:b4:56:
                    94:4c:98:5e:48:d4:fd:30:d7:33:b4:87:af:5c:e2:
                    d5:02:c7:10:89:2a:9d:2a:48:62:b7:31:dc:39:e8:
                    27:45:ca:d6:ae:f6:a4:1a:15:3f:0d:1b:db:49:d5:
                    80:ba:2c:62:5d:aa:f8:51:a8:5a:bb:58:f1:4e:06:
                    39:06:2b:d4:bc:8b:46:a8:4b:a0:7e:8a:be:34:85:
                    52:1a:7b:2e:cc:44:8c:b5:5d:5e:a1:25:a0:e5:39:
                    97:c3:ea:40:2b:6c:ff:89:82:2e:9e:a1:f5:d8:16:
                    75:43:94:8a:c2:b9:2d:74:e9:4e:3e:e1:10:bf:ea:
                    36:91:a9:58:4f:d7:be:2d:44:c5:18:b7:6c:98:1f:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EC:50:0C:E4:42:7F:95:A2:03:38:8A:D6:E0:D7:7C:84:B1:9B:49
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/34352e3136322e3135352e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:84:ef:7a:37:d0:2f:d1:49:28:eb:25:41:48:c7:6b:d2:14:
         09:7a:52:bc:ed:64:9d:c0:8d:1f:18:62:63:21:e8:3e:2f:82:
         25:a9:c7:bb:a8:22:28:54:a8:3e:2f:8a:ff:aa:a3:5d:81:69:
         16:f8:5c:b0:aa:35:21:cc:96:c0:bc:22:b7:c5:04:ea:7e:f0:
         b1:d9:91:c8:b3:f3:dc:2f:ef:d1:1e:d7:f2:a7:b6:5d:14:d8:
         8b:e9:fe:f8:6c:c8:29:a8:3e:d2:b9:88:0f:bd:99:e3:82:20:
         3c:74:b3:84:1c:4c:d7:5d:5e:8e:dc:12:76:c4:87:8b:ca:8f:
         ee:57:7d:a5:39:ed:d1:24:48:5b:d0:b1:0c:f0:c1:ed:91:24:
         ae:7e:4d:2c:25:bd:da:ff:5f:bf:8a:1e:bb:24:3a:9a:92:f8:
         4b:09:e0:0b:00:00:72:75:90:d1:a9:14:36:6d:5d:28:13:64:
         d3:9a:d4:71:8c:13:7c:22:a8:7f:9f:7d:95:db:ce:97:36:fd:
         ff:39:52:ed:75:32:25:23:16:00:99:03:4c:00:8d:0b:2d:d2:
         b3:6f:50:ac:12:66:ac:07:6f:7d:e9:11:55:38:8d:83:cb:a7:
         4f:c3:1f:bb:9e:94:a9:e3:85:c9:75:eb:eb:9a:2f:27:7b:c5:
         90:02:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org