Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e36382e302f32322d3232203d3e20323639313039.roa
File:                     34352e3137392e36382e302f32322d3232203d3e20323639313039.roa (raw, json)
Hash identifier:          cejWygll2EA8wzrEt8MWrMJv2DJoxKqbdHbdGiNWcAs=
Subject key identifier:   A4:25:A1:22:5A:7F:40:8B:0E:F2:81:D6:E5:3A:CC:CE:58:11:E0:36
Certificate issuer:       /CN=015FF7B2420F79D7E3FB324944FAA5AB28892563
Certificate serial:       382A3274E681B22571AD3AA07B08965B0578BD0C
Authority key identifier: 01:5F:F7:B2:42:0F:79:D7:E3:FB:32:49:44:FA:A5:AB:28:89:25:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e36382e302f32322d3232203d3e20323639313039.roa
Signing time:             Wed 13 Jul 2022 01:54:21 +0000
ROA not before:           Wed 13 Jul 2022 01:49:21 +0000
ROA not after:            Wed 12 Jul 2023 01:54:21 +0000
asID:                     269109
IP address blocks:        45.179.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2a:32:74:e6:81:b2:25:71:ad:3a:a0:7b:08:96:5b:05:78:bd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015FF7B2420F79D7E3FB324944FAA5AB28892563
        Validity
            Not Before: Jul 13 01:49:21 2022 GMT
            Not After : Jul 12 01:54:21 2023 GMT
        Subject: CN=A425A1225A7F408B0EF281D6E53ACCCE5811E036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:d7:48:ce:3f:16:fe:24:bb:da:6b:9f:e2:
                    dc:d7:60:05:56:20:e6:2c:72:82:a9:b3:61:ed:6b:
                    f4:cf:bf:1e:98:f6:1b:28:83:c4:69:f1:c2:ba:c8:
                    90:65:cc:74:62:ca:12:dc:57:63:f6:f7:5d:fd:3e:
                    6e:2c:ee:3e:de:61:52:b7:18:cb:bf:a8:66:26:03:
                    9b:37:ec:ac:a4:c2:6e:a7:76:65:b1:71:61:b2:83:
                    e7:22:27:09:2e:85:e2:0e:c0:6f:7d:3c:2a:e1:e6:
                    23:16:23:30:d2:5a:14:f6:bd:7e:32:d6:8a:7c:c4:
                    70:fd:0d:15:93:01:2d:c7:69:be:bd:60:d6:de:b0:
                    80:37:e3:55:19:5e:6f:32:20:da:fd:a4:24:1c:d5:
                    38:8b:b6:1a:bd:65:9b:4f:a1:d3:c7:9a:85:d7:06:
                    da:c2:55:36:25:4e:d3:83:04:aa:5b:e3:42:0a:13:
                    a3:66:8e:ff:76:cd:2d:28:26:bb:f0:71:b9:21:ee:
                    87:52:05:6f:46:42:08:56:5d:cd:ff:f9:78:c5:df:
                    d6:2d:e1:97:3e:fc:f4:e1:fe:ff:c8:f8:14:bf:a4:
                    c5:99:f8:0c:60:38:a9:36:84:d8:46:e9:5a:76:11:
                    20:f8:47:48:22:b4:89:7c:27:71:39:0f:fc:c3:f1:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:25:A1:22:5A:7F:40:8B:0E:F2:81:D6:E5:3A:CC:CE:58:11:E0:36
            X509v3 Authority Key Identifier:
                keyid:01:5F:F7:B2:42:0F:79:D7:E3:FB:32:49:44:FA:A5:AB:28:89:25:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e36382e302f32322d3232203d3e20323639313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:6e:f2:44:d1:68:2b:55:1d:c4:48:c6:ac:27:e3:4c:01:93:
         08:f4:c1:6a:d9:95:cc:c4:8f:fc:0c:c8:db:e2:5d:e1:09:96:
         b1:48:77:63:b6:09:1d:61:0b:eb:38:d6:f7:c0:07:31:e5:77:
         fe:f3:6e:44:45:bc:6e:48:63:57:ce:9e:1a:9b:fa:c3:a8:8e:
         5d:e8:52:f9:7d:cb:6c:72:39:3c:07:e4:8d:cf:35:40:73:64:
         b2:91:63:1e:01:e3:bb:ff:21:72:96:de:5d:d4:81:eb:e0:9a:
         96:e3:74:d4:06:9c:03:53:bb:32:0e:aa:e1:ae:4b:92:23:b5:
         ee:06:cc:ec:a7:0b:47:42:e8:db:ee:73:23:69:fa:e3:45:a8:
         71:68:72:e7:a1:63:9e:0f:7a:c0:15:e6:21:92:57:83:b5:69:
         fd:2f:88:eb:87:e9:27:2b:f7:d0:83:8a:1d:30:49:14:78:57:
         64:3a:7e:8f:c0:1f:92:f6:2b:4c:04:9d:12:38:c6:a7:e6:5e:
         20:f7:d4:95:0a:df:32:8c:3c:1b:27:af:5f:94:45:3e:cc:50:
         d0:f3:f8:38:96:51:a0:c7:99:6d:c7:48:9c:5b:4d:ba:5a:78:
         f1:ed:2f:3d:b4:04:93:9b:fd:b2:95:31:2f:80:5a:7e:b5:eb:
         8c:12:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org