Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231362e302f32322d3234203d3e20323636363139.roa
File:                     34352e372e3231362e302f32322d3234203d3e20323636363139.roa (raw, json)
Hash identifier:          wRdkCW8Mb5y1v9gGv/uDIG/JLorC/j0S2qkEUXagNvA=
Subject key identifier:   C0:3A:26:92:8F:62:3A:3A:EA:33:72:EA:F2:FA:DB:71:6A:AF:8B:77
Certificate issuer:       /CN=BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8
Certificate serial:       0FCB7323BAEA7438E0938365F09968BFB8CD0D55
Authority key identifier: BA:45:0E:F2:12:FC:16:CA:8B:9C:EA:80:BF:02:70:94:CF:FB:0B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231362e302f32322d3234203d3e20323636363139.roa
Signing time:             Wed 10 Aug 2022 21:00:00 +0000
ROA not before:           Wed 10 Aug 2022 20:55:00 +0000
ROA not after:            Thu 10 Aug 2023 21:00:00 +0000
asID:                     266619
IP address blocks:        45.7.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cb:73:23:ba:ea:74:38:e0:93:83:65:f0:99:68:bf:b8:cd:0d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8
        Validity
            Not Before: Aug 10 20:55:00 2022 GMT
            Not After : Aug 10 21:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:a9:95:0c:b6:74:e4:bd:f8:39:ac:b3:9e:
                    62:b4:31:1b:1e:37:84:fa:19:a7:5b:26:a4:44:25:
                    10:8e:6b:d6:77:e3:95:88:a6:28:e3:f0:3c:10:41:
                    85:3b:3b:73:27:11:e1:4c:38:ba:98:82:ba:e6:a2:
                    24:59:2a:60:dd:e9:6c:dd:13:88:f6:24:30:55:c5:
                    15:cc:3b:4b:9d:cc:18:2a:3c:25:1d:21:de:fa:eb:
                    cb:82:31:0f:8d:fd:29:95:d7:28:5f:9b:28:b6:fe:
                    36:af:27:a7:bd:f7:dd:d1:1c:2a:03:e3:bb:22:fb:
                    b6:76:ff:0b:11:7f:85:b3:ad:f3:f0:ad:17:d5:46:
                    07:1f:7b:b6:48:98:87:6b:4b:38:d4:d5:8b:69:20:
                    25:74:02:4f:5f:89:8d:39:ac:e1:4b:3b:b9:92:73:
                    c1:6b:6e:f8:2e:a5:d4:a8:9e:df:b8:92:bc:e1:0f:
                    6c:3c:be:2a:00:59:19:d7:7f:66:13:af:a5:ce:d1:
                    c7:6a:c9:bb:c2:50:f3:54:3b:3d:2c:8b:3c:fa:16:
                    16:b2:c0:ae:c9:69:1b:7b:9f:2c:d1:20:91:10:84:
                    73:e7:4a:20:24:28:58:a1:ad:03:85:c9:5a:24:a1:
                    63:3e:9f:83:70:dc:6d:2f:aa:e6:0c:72:9f:ac:d8:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3A:26:92:8F:62:3A:3A:EA:33:72:EA:F2:FA:DB:71:6A:AF:8B:77
            X509v3 Authority Key Identifier:
                keyid:BA:45:0E:F2:12:FC:16:CA:8B:9C:EA:80:BF:02:70:94:CF:FB:0B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231362e302f32322d3234203d3e20323636363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:58:8f:83:00:8e:dd:cd:f9:bd:eb:4c:5a:35:43:1d:84:
         43:a4:0c:9e:d7:ff:95:49:81:e1:5f:b3:f2:70:e3:c1:1c:3f:
         14:b8:5a:88:09:fb:c8:d0:17:bd:23:d2:b3:57:e7:4e:be:89:
         2b:28:d4:9b:e8:54:9f:32:40:4d:57:d3:91:6f:11:cf:14:41:
         5d:a0:70:5b:30:ba:46:21:1b:4e:08:14:79:7b:29:13:e9:e9:
         72:8f:70:68:31:29:7b:03:7d:02:eb:a5:b2:17:38:85:3e:27:
         50:64:17:dc:c7:87:ab:c1:dc:a4:bb:82:10:2f:37:2d:68:78:
         51:16:71:28:c8:55:5e:c1:07:95:81:9d:c4:73:2a:df:85:9d:
         07:b2:1c:52:a7:a8:f3:d9:a3:55:52:ac:9c:51:a3:6e:de:7e:
         91:77:ed:a2:9f:fa:74:86:08:67:78:0f:23:ea:9c:22:a2:77:
         c8:25:74:66:8a:2f:5b:42:3b:96:6b:d0:9c:48:4f:3f:bf:df:
         5f:e5:26:28:09:14:0d:ff:4e:d9:12:e2:e3:56:5e:55:97:a1:
         69:82:7b:a5:97:e4:94:20:b2:9e:db:3d:8e:db:2e:12:88:1d:
         2e:b9:c6:33:a7:ef:9f:3e:eb:44:ce:1f:dc:3e:06:94:b0:04:
         49:18:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org