Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/34352e352e3135362e302f32322d3234203d3e20323636313134.roa
File:                     34352e352e3135362e302f32322d3234203d3e20323636313134.roa (raw, json)
Hash identifier:          UkghuMnZcRfz9Rbn9liO59HOQPWFfOCwKevfxP3kPnc=
Subject key identifier:   AA:47:34:77:09:43:F6:48:96:2D:FC:34:86:96:8F:48:AD:AF:D9:1B
Certificate issuer:       /CN=D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D
Certificate serial:       417354DE6E143B675E5B121BCF7CDBFFCF51E376
Authority key identifier: D2:D6:B4:1A:FA:2B:CE:57:DA:06:67:CA:1C:8E:18:A2:FE:1C:1C:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/34352e352e3135362e302f32322d3234203d3e20323636313134.roa
Signing time:             Thu 23 Jun 2022 15:51:55 +0000
ROA not before:           Thu 23 Jun 2022 15:46:55 +0000
ROA not after:            Thu 22 Jun 2023 15:51:55 +0000
asID:                     266114
IP address blocks:        45.5.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:73:54:de:6e:14:3b:67:5e:5b:12:1b:cf:7c:db:ff:cf:51:e3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D
        Validity
            Not Before: Jun 23 15:46:55 2022 GMT
            Not After : Jun 22 15:51:55 2023 GMT
        Subject: CN=AA4734770943F648962DFC3486968F48ADAFD91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:a9:fc:10:01:6d:f2:f0:12:32:a6:08:36:
                    e3:af:60:80:01:57:a6:64:bc:f1:6b:51:0b:a8:49:
                    3a:b1:ea:a4:98:d0:cc:41:88:9e:1f:f5:57:88:3e:
                    68:a8:8b:e4:ed:3e:60:78:7f:3b:5f:9c:6d:2f:81:
                    0c:1b:75:09:dd:59:db:1b:a1:41:bb:4e:09:68:3f:
                    de:59:18:94:f5:1a:30:d0:72:58:32:35:6c:23:5d:
                    11:fa:55:60:e1:95:3f:81:4b:51:78:b5:85:ad:9b:
                    9d:a4:de:09:da:2e:32:71:29:b7:7a:f1:80:dc:b2:
                    e6:85:09:54:9e:67:6e:8a:f5:d4:8f:f3:cd:8d:84:
                    0d:c4:a0:6e:d4:91:16:5c:d6:71:c5:23:47:83:c6:
                    1a:34:0e:16:75:80:b2:f9:31:dc:49:4a:8a:c1:31:
                    98:d2:88:fd:15:3f:54:d4:c7:e8:e1:c2:09:f7:82:
                    94:f1:32:6e:9f:0f:92:f8:ff:18:40:75:63:91:a7:
                    d7:92:94:c2:82:90:1c:9a:55:64:b3:4c:c0:f2:2b:
                    c8:39:29:89:70:92:a2:b8:09:7c:ab:e3:a9:63:6c:
                    d6:f5:98:2b:a0:3d:62:a8:6f:e4:d8:33:89:53:c8:
                    95:45:be:20:fc:48:20:e1:a3:c6:6f:60:a0:17:30:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:47:34:77:09:43:F6:48:96:2D:FC:34:86:96:8F:48:AD:AF:D9:1B
            X509v3 Authority Key Identifier:
                keyid:D2:D6:B4:1A:FA:2B:CE:57:DA:06:67:CA:1C:8E:18:A2:FE:1C:1C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/34352e352e3135362e302f32322d3234203d3e20323636313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:bd:e2:2d:5f:fd:3c:48:8c:5d:7b:fc:9f:a6:ca:09:7c:
         40:ab:5f:ed:d9:cb:97:f7:d9:a7:b8:bd:2a:0b:fe:6a:a7:14:
         37:6c:bf:3f:7f:91:da:3f:cb:7e:29:ff:f3:a8:0d:d0:cf:56:
         4f:be:d4:75:cb:10:ad:33:b2:8d:f0:bf:ee:a5:99:e7:d1:7d:
         55:47:04:82:31:22:9a:78:5c:b4:57:59:ec:00:99:7f:c1:40:
         98:5b:20:ba:be:57:7d:9e:88:ca:57:2e:56:75:bf:2a:f8:dc:
         8a:b5:e4:21:ee:cb:35:dd:21:de:e3:f1:c2:9b:72:5d:aa:f8:
         d3:ec:76:9e:24:c6:2a:1e:33:69:37:bf:80:b3:05:fb:28:54:
         ef:6e:4d:ec:b9:93:ce:c1:94:01:b7:7a:ad:d4:e4:0f:da:08:
         14:d6:a1:98:ac:64:f9:c5:94:a3:df:f7:1b:73:c4:84:8e:06:
         01:0b:9e:e8:f5:26:37:60:0d:ef:cf:8b:91:e1:a5:a0:c2:7f:
         54:3b:c5:ce:42:2e:c4:9a:d9:8d:25:ea:ff:14:a2:5e:ff:06:
         db:45:f4:8b:b7:ee:4d:dc:42:78:f0:25:30:d5:01:82:3f:35:
         c7:dc:c0:6c:8d:24:9a:b3:45:b2:ef:4c:01:93:5a:5f:53:98:
         de:30:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org