Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa
File:                     34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (raw, json)
Hash identifier:          CacdlK6zJEdmnuwcHyKgdx+57o2oic0lK0xsIdsy2WA=
Subject key identifier:   69:A1:87:25:2C:67:51:C0:E1:E1:C7:93:8B:7F:05:A0:71:B7:1F:CD
Certificate issuer:       /CN=77221E37456D3A3771F725418DF86A07924D70B8
Certificate serial:       46FF8360F7947514D4D51A9FEDB10F6E329A506C
Authority key identifier: 77:22:1E:37:45:6D:3A:37:71:F7:25:41:8D:F8:6A:07:92:4D:70:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77221E37456D3A3771F725418DF86A07924D70B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa
Signing time:             Wed 22 Nov 2023 19:27:20 +0000
ROA not before:           Wed 22 Nov 2023 19:22:20 +0000
ROA not after:            Wed 20 Nov 2024 19:27:20 +0000
asID:                     268683
IP address blocks:        45.165.164.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ff:83:60:f7:94:75:14:d4:d5:1a:9f:ed:b1:0f:6e:32:9a:50:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77221E37456D3A3771F725418DF86A07924D70B8
        Validity
            Not Before: Nov 22 19:22:20 2023 GMT
            Not After : Nov 20 19:27:20 2024 GMT
        Subject: CN=69A187252C6751C0E1E1C7938B7F05A071B71FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:88:d6:b6:b0:80:b1:5d:4c:c6:62:56:f8:02:
                    b6:ba:a2:a9:9d:28:0e:0b:4f:96:45:02:3c:3b:6b:
                    45:77:1c:1b:ce:86:87:26:20:bb:ac:f0:87:03:ad:
                    b9:a5:d9:44:9a:01:66:7c:99:41:78:dd:7e:a9:18:
                    ca:db:6d:98:b8:49:e2:c2:b1:3f:f2:3b:36:a5:35:
                    4b:b2:6d:2d:83:75:00:b8:2e:7d:fa:9e:74:62:56:
                    29:a9:27:d4:52:3c:bd:6b:34:94:67:c1:f3:62:92:
                    ba:1d:34:5a:ef:91:ff:d3:c3:d6:d3:5f:66:63:0e:
                    65:a6:77:a5:02:96:80:68:f5:a7:66:26:68:cb:90:
                    7c:91:69:54:dd:29:73:8b:94:b7:9f:8d:4e:08:21:
                    0c:0c:69:b1:3d:d2:0d:dd:81:f9:16:cc:c8:b1:c3:
                    1e:29:91:97:66:26:f2:38:c8:11:45:03:0d:0d:e7:
                    1b:1b:c5:d9:ef:e6:8e:a8:63:43:76:eb:4f:ff:66:
                    cd:31:ee:fc:97:d0:72:36:8c:c8:d7:df:e2:f2:4b:
                    ff:ed:dc:de:41:85:72:cd:fb:93:33:28:fa:28:be:
                    76:9d:b3:b4:e1:67:c4:67:dc:64:d8:e2:61:8a:bc:
                    a7:3f:08:41:55:d2:0d:22:8d:c2:a2:1b:ce:26:41:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A1:87:25:2C:67:51:C0:E1:E1:C7:93:8B:7F:05:A0:71:B7:1F:CD
            X509v3 Authority Key Identifier:
                keyid:77:22:1E:37:45:6D:3A:37:71:F7:25:41:8D:F8:6A:07:92:4D:70:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/77221E37456D3A3771F725418DF86A07924D70B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77221E37456D3A3771F725418DF86A07924D70B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:f3:48:c0:d2:88:b9:47:ff:31:3e:19:d2:5e:f9:9a:67:be:
         fc:cb:76:0d:d7:df:85:7a:26:4d:c4:86:1a:b7:4a:a6:85:15:
         f5:69:aa:cf:16:46:3b:66:a0:df:a5:d7:dd:ae:30:bf:a3:27:
         29:a6:1f:fe:1f:67:16:88:91:70:7d:68:54:c5:12:df:2a:17:
         24:b4:b5:51:79:0f:d6:52:15:41:4a:1e:67:c8:a4:9e:23:69:
         85:56:53:37:9c:19:2e:1d:f1:b9:bb:f8:77:31:2f:a2:20:52:
         0a:d2:86:85:73:a5:1f:27:32:d3:33:e0:44:2a:fd:8a:93:71:
         a8:6e:6f:1c:d8:17:8e:f0:16:58:37:17:7d:6a:23:c4:6b:83:
         f3:cb:79:c5:91:a2:48:18:5b:0b:36:f4:80:77:62:78:37:6e:
         1b:6b:b2:e5:fe:37:7f:15:a7:38:a1:31:c2:9e:37:8d:a9:1d:
         5e:83:71:73:23:18:67:cf:68:bd:fa:14:d1:1e:58:cc:60:9c:
         f0:b3:00:c5:d0:38:95:f3:0a:1c:f7:83:c1:f7:58:60:b6:9b:
         ea:e3:3c:30:3b:49:e4:b9:f7:64:4b:cf:f0:0f:71:e6:d6:cb:
         63:e4:c3:b9:35:73:fd:13:f4:a8:b1:c1:e6:67:14:a7:30:7e:
         60:9f:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org