Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/34352e352e3135372e302f32342d3234203d3e20323636313134.roa
File:                     34352e352e3135372e302f32342d3234203d3e20323636313134.roa (raw, json)
Hash identifier:          66nstJOIP3/JmYesDEDL4/tdCsVCDHF82229YDhhoTU=
Subject key identifier:   31:18:CD:4B:FA:C9:A6:6B:D9:BB:5E:2B:6D:22:0A:1A:C7:63:C0:BF
Certificate issuer:       /CN=D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D
Certificate serial:       09CD1DE57FF52BAC875F7C5C438E7E82496A89ED
Authority key identifier: D2:D6:B4:1A:FA:2B:CE:57:DA:06:67:CA:1C:8E:18:A2:FE:1C:1C:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/34352e352e3135372e302f32342d3234203d3e20323636313134.roa
Signing time:             Mon 15 Aug 2022 20:30:40 +0000
ROA not before:           Mon 15 Aug 2022 20:25:40 +0000
ROA not after:            Mon 14 Aug 2023 20:30:40 +0000
asID:                     266114
IP address blocks:        45.5.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cd:1d:e5:7f:f5:2b:ac:87:5f:7c:5c:43:8e:7e:82:49:6a:89:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D
        Validity
            Not Before: Aug 15 20:25:40 2022 GMT
            Not After : Aug 14 20:30:40 2023 GMT
        Subject: CN=3118CD4BFAC9A66BD9BB5E2B6D220A1AC763C0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:8f:f9:e9:20:7f:0b:f8:ff:8a:2a:0f:ed:
                    bb:19:db:93:9a:d4:f8:da:79:5d:da:e8:f7:32:44:
                    6a:b4:4b:ec:9e:84:4b:6e:59:c9:03:70:5e:8f:bb:
                    24:fd:8f:88:63:c6:bf:d5:a5:7c:f4:27:2f:22:40:
                    5a:44:aa:04:43:1a:a4:12:d7:5e:15:8a:ce:27:aa:
                    c8:22:33:d4:82:38:90:6f:0b:3d:1a:70:da:be:c8:
                    86:d4:cb:43:a3:93:87:b8:e1:e0:da:05:a0:2c:bc:
                    59:c7:6e:1e:46:c8:48:d1:e6:11:ee:39:df:fd:9b:
                    4d:fc:5d:6f:7f:4e:42:9a:21:8f:ec:a1:9a:f1:29:
                    a4:8d:20:06:ca:2b:7e:9d:c3:33:23:78:b0:a8:11:
                    0a:20:ff:b4:26:cb:df:00:4b:3e:bc:80:ed:f2:30:
                    73:1b:71:73:8c:e8:f8:83:61:bb:50:09:16:39:ff:
                    9d:b6:19:3f:e0:51:66:84:1a:3b:88:02:92:96:8c:
                    90:15:af:33:91:b8:f3:b2:f8:0a:9f:e3:00:58:e6:
                    50:94:df:ae:a5:30:b7:4d:67:2c:9e:7c:e5:f6:2e:
                    30:e5:0b:05:b3:12:fa:b0:31:58:f1:8b:26:b1:f2:
                    2a:de:97:d6:ef:b5:6a:20:6f:0e:68:fc:78:9c:e1:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:18:CD:4B:FA:C9:A6:6B:D9:BB:5E:2B:6D:22:0A:1A:C7:63:C0:BF
            X509v3 Authority Key Identifier:
                keyid:D2:D6:B4:1A:FA:2B:CE:57:DA:06:67:CA:1C:8E:18:A2:FE:1C:1C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/34352e352e3135372e302f32342d3234203d3e20323636313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:89:eb:be:e6:cc:a9:b9:03:ce:a7:e0:bb:fd:54:a0:56:8b:
         d7:4c:da:eb:04:db:86:01:b3:f9:6f:00:33:69:7e:bf:3e:bf:
         6c:99:3f:6c:5d:b2:11:24:fd:a7:1d:5b:82:c7:b0:12:72:d2:
         4a:8a:f4:cf:5e:39:1a:1d:3a:e9:f4:8b:c0:a9:46:6f:99:54:
         b1:5b:38:e6:83:7d:6c:99:c9:49:f9:d0:08:c2:de:a3:ab:40:
         52:b9:1d:a8:c1:f5:9e:1e:bb:b7:1e:ae:be:51:62:5f:6d:e8:
         aa:a3:a9:b3:52:a9:59:7a:7d:1a:64:c0:15:1c:26:ea:bc:84:
         2a:03:20:2d:d8:24:22:bb:c0:3c:6d:33:90:bc:0c:15:01:f1:
         21:2d:91:c2:2b:4c:ef:10:f2:f2:7d:4a:80:2b:81:37:0c:ee:
         34:c0:27:91:4f:57:bb:41:0e:63:94:d5:9d:1a:55:7f:e1:dc:
         b8:fe:8f:4c:df:ff:0d:65:3c:9b:8c:0a:70:c0:89:f5:67:30:
         76:a4:a1:fc:ad:0d:d3:89:ab:41:f6:db:96:1a:98:2f:9a:7e:
         b8:79:ef:39:67:46:70:b0:ef:12:94:ef:64:12:37:50:69:52:
         95:12:fa:f4:29:ba:50:77:1c:55:6f:a0:b9:70:dd:93:89:17:
         ac:40:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org