Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37372e302f32342d3234203d3e20323939323834.roa
File:                     34352e3232362e37372e302f32342d3234203d3e20323939323834.roa (raw, json)
Hash identifier:          bRLxRasrk3kxfkzrGvnBAQnLIjHa8a5mNif4hjN2dc0=
Subject key identifier:   DD:71:71:B4:A3:FC:1C:FB:E2:F9:4B:7C:B7:8E:64:E6:7D:46:52:56
Certificate issuer:       /CN=A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF
Certificate serial:       71C77D0F918557511DF16446ADEDDD6D1903C4BB
Authority key identifier: A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37372e302f32342d3234203d3e20323939323834.roa
Signing time:             Mon 19 Dec 2022 17:50:48 +0000
ROA not before:           Mon 19 Dec 2022 17:45:48 +0000
ROA not after:            Mon 18 Dec 2023 17:50:48 +0000
asID:                     299284
IP address blocks:        45.226.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c7:7d:0f:91:85:57:51:1d:f1:64:46:ad:ed:dd:6d:19:03:c4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF
        Validity
            Not Before: Dec 19 17:45:48 2022 GMT
            Not After : Dec 18 17:50:48 2023 GMT
        Subject: CN=DD7171B4A3FC1CFBE2F94B7CB78E64E67D465256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:ee:a7:2e:50:e0:bc:dc:fa:0b:0c:de:17:
                    f4:b1:ea:6a:12:ba:a5:6f:8c:0b:dc:f2:9a:bd:21:
                    16:66:10:36:a3:ee:1d:8f:40:b9:c3:55:2e:bb:e2:
                    4a:ea:51:73:e2:06:15:7c:4b:dd:74:b8:66:a0:eb:
                    2c:74:1c:70:69:d2:2a:cf:78:d5:16:c9:da:80:06:
                    59:60:37:07:bb:85:c1:fc:18:29:ca:46:33:9d:b0:
                    c8:6b:cf:32:14:c8:a0:c6:89:9e:8c:70:83:7e:f6:
                    e8:b1:ea:59:f7:91:96:c4:68:53:08:d5:b3:c8:e2:
                    d8:d1:fb:e4:9e:f0:55:e4:ca:62:bd:7b:dc:47:7f:
                    69:44:e4:3e:b4:91:3d:a3:e5:e5:c7:60:0c:15:d5:
                    56:97:43:fd:29:47:2b:b6:6b:4d:34:74:0a:6c:1d:
                    c9:67:a0:9c:c7:46:0e:0f:ac:f5:f0:a7:5f:89:21:
                    79:4e:cf:21:dd:6c:c1:e1:3f:0f:aa:03:f4:4d:fc:
                    d3:eb:ef:2d:65:41:55:33:35:6b:ea:7c:aa:61:1b:
                    df:4b:50:5d:14:82:70:b0:f5:85:49:a6:19:07:2f:
                    a0:1b:24:78:b2:ad:85:8b:10:49:13:5c:08:40:0b:
                    98:0b:d2:55:5e:74:3e:df:f2:1e:70:15:4f:d5:50:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:71:71:B4:A3:FC:1C:FB:E2:F9:4B:7C:B7:8E:64:E6:7D:46:52:56
            X509v3 Authority Key Identifier:
                keyid:A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37372e302f32342d3234203d3e20323939323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:53:7d:6b:98:fd:19:fc:b3:d8:cb:fe:9d:0a:06:3c:04:f6:
         f1:b2:54:80:c0:58:bd:e6:db:a8:82:46:7b:f4:ca:2e:f9:9e:
         6b:68:fb:29:1b:fc:8a:a5:8a:e5:98:87:9e:8f:ca:8d:64:0a:
         9d:5c:38:39:90:db:6e:fc:be:55:6a:cf:1d:17:b1:57:6a:13:
         fa:83:e9:ad:10:dd:1f:09:3f:94:9f:c3:d1:71:1a:59:21:58:
         c3:ea:1c:bb:5a:59:90:a6:f4:a4:b4:2b:cb:69:a9:e8:cc:4a:
         d1:26:50:32:53:f3:fe:2e:95:d1:98:16:83:60:57:ba:60:64:
         17:25:43:b9:e9:74:b6:8a:be:46:56:71:b7:c3:6d:df:ad:dd:
         d4:70:a3:71:35:2c:dc:26:72:1a:5f:89:92:3a:8a:61:8f:e5:
         2f:c3:1a:06:6b:ba:6e:71:4e:13:41:37:c4:6c:7a:f5:4e:2f:
         31:30:00:90:9f:95:bd:a4:9b:38:ff:0d:b4:9b:64:bb:a8:2f:
         63:7a:79:57:cd:d5:af:d1:91:20:17:f5:fc:fa:72:23:a1:9c:
         03:2a:fe:db:ed:af:eb:42:4c:93:f6:3a:15:7d:3c:8e:c3:94:
         bb:76:ff:d4:01:97:6b:a2:ce:19:3d:a0:bb:8f:bd:23:93:1a:
         98:f2:ff:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org