Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/34352e3136352e38382e302f32342d3234203d3e20323638363732.roa
File:                     34352e3136352e38382e302f32342d3234203d3e20323638363732.roa (raw, json)
Hash identifier:          NCbbtBNfh3SBxoR2F8/DIckbwN0CJCLisuPjQdBA3eE=
Subject key identifier:   04:E2:E9:91:6D:FE:76:BC:DD:C0:88:28:B1:D8:A0:A4:0C:D5:B1:B3
Certificate issuer:       /CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
Certificate serial:       655A3B18CEE61F156754DD37C0C607890EC2119E
Authority key identifier: 75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/34352e3136352e38382e302f32342d3234203d3e20323638363732.roa
Signing time:             Tue 14 Jun 2022 15:35:33 +0000
ROA not before:           Tue 14 Jun 2022 15:30:33 +0000
ROA not after:            Tue 13 Jun 2023 15:35:33 +0000
asID:                     268672
IP address blocks:        45.165.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5a:3b:18:ce:e6:1f:15:67:54:dd:37:c0:c6:07:89:0e:c2:11:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
        Validity
            Not Before: Jun 14 15:30:33 2022 GMT
            Not After : Jun 13 15:35:33 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:48:89:11:fc:51:d6:14:d0:0c:3f:3f:2d:2a:
                    c4:76:bb:3b:aa:5f:6e:29:cf:b7:1d:2d:33:cf:f0:
                    d7:f0:da:0d:b8:1f:b0:6b:8f:e3:e4:31:1b:6b:07:
                    cb:69:6c:e9:97:1f:80:77:fc:a7:50:20:13:64:90:
                    3f:c8:fe:2e:76:eb:4e:b1:d2:e4:71:a5:d8:85:36:
                    c9:a7:fd:08:78:2d:e7:d6:8f:87:3d:53:08:fa:14:
                    a9:96:85:ee:b8:44:7e:32:5a:78:e8:6d:ff:f8:f4:
                    f0:51:b4:66:67:fa:79:94:3a:96:17:6e:97:97:d7:
                    c4:eb:6a:a7:d4:da:11:c7:3b:00:65:23:96:4f:f1:
                    d7:9e:52:a5:ad:03:32:3d:a7:7a:a4:72:f2:0c:9a:
                    ae:28:39:fb:55:3a:94:63:18:6e:40:8b:51:ac:76:
                    08:98:90:b3:70:0b:0a:77:4d:8d:23:f6:d4:27:6c:
                    c7:4e:f4:a7:59:41:df:3f:9e:ea:ac:87:e2:a1:1a:
                    76:f0:7a:5e:ae:de:7c:8c:4c:29:45:a9:40:a7:f9:
                    86:3b:a5:ca:3f:9a:f3:bc:fd:a9:54:fd:2d:3a:f1:
                    0d:e9:fb:b3:fe:c3:cc:34:a3:0a:a4:a2:c5:02:06:
                    b3:f5:58:4b:c5:f3:26:c9:7e:d0:0a:fa:ca:a4:59:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E2:E9:91:6D:FE:76:BC:DD:C0:88:28:B1:D8:A0:A4:0C:D5:B1:B3
            X509v3 Authority Key Identifier:
                keyid:75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/34352e3136352e38382e302f32342d3234203d3e20323638363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:e0:58:e7:20:6a:b9:50:d7:11:cf:55:22:ac:57:5c:ab:b6:
         45:f0:98:dd:c3:1d:cb:da:2c:7e:60:93:43:ea:4b:df:7a:39:
         6e:c4:12:8e:67:09:ba:e9:bf:ab:45:eb:bd:c8:cd:d7:ca:9a:
         81:3a:87:32:48:ff:08:7d:9a:2e:fe:bd:90:88:20:e9:c1:30:
         eb:f8:0b:65:5d:a7:e0:0d:3a:d5:eb:0f:b5:54:d6:2c:f7:b2:
         54:6a:4d:3d:03:69:8d:72:91:df:e8:8d:15:59:6b:2c:a7:35:
         2e:5e:95:fe:23:aa:4b:1e:90:30:fd:0d:14:ca:94:92:74:e3:
         b2:c7:7e:02:64:13:82:22:33:f3:c8:a2:23:59:fd:db:f3:3e:
         b3:0c:6f:9c:05:5b:2b:56:0a:a4:04:ab:19:c2:bf:3d:46:87:
         63:21:d7:cb:66:e3:b6:7d:d7:14:9e:f7:d2:c6:b9:87:e0:31:
         5f:92:37:52:1e:c1:93:5d:53:d6:76:60:10:f2:21:70:12:a6:
         1b:4e:04:fb:1a:ee:b1:6a:e5:47:d8:a5:a1:7c:cd:d2:87:70:
         df:18:8a:d5:f7:e4:0d:33:6d:47:b1:69:23:52:21:38:40:d2:
         50:6e:b4:37:90:c5:e9:18:ea:41:88:23:74:fb:ce:6a:2f:fe:
         17:a9:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org