Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32332d3233203d3e20323637333639.roa
File:                     34352e3233342e3137362e302f32332d3233203d3e20323637333639.roa (raw, json)
Hash identifier:          DpRsmB6Qf22wTkW2CzC2s+cNB5BoS+eD0D6hGdw8wXw=
Subject key identifier:   D1:7A:0D:71:4B:15:E2:82:47:5A:3E:4D:96:54:3B:E3:0F:04:F1:7D
Certificate issuer:       /CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
Certificate serial:       4C148B994F9C7A319AE92E36BC32C1AFD7713E68
Authority key identifier: DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32332d3233203d3e20323637333639.roa
Signing time:             Sat 21 Oct 2023 14:54:09 +0000
ROA not before:           Sat 21 Oct 2023 14:49:09 +0000
ROA not after:            Sat 19 Oct 2024 14:54:09 +0000
asID:                     267369
IP address blocks:        45.234.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:14:8b:99:4f:9c:7a:31:9a:e9:2e:36:bc:32:c1:af:d7:71:3e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
        Validity
            Not Before: Oct 21 14:49:09 2023 GMT
            Not After : Oct 19 14:54:09 2024 GMT
        Subject: CN=D17A0D714B15E282475A3E4D96543BE30F04F17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:03:eb:15:51:bf:01:74:ee:65:48:cf:e0:3c:
                    8d:6f:43:3b:04:5e:54:88:b6:f5:2d:12:9b:3d:3f:
                    ac:c5:47:c3:ab:a8:d3:a7:8d:c7:ce:19:fa:fd:42:
                    1e:30:55:0a:50:35:6c:7f:bf:43:cd:98:dc:15:06:
                    22:a9:67:00:d7:8f:45:16:26:22:ef:ea:39:54:27:
                    da:bf:ae:2e:f3:a3:03:50:fd:f6:30:66:ab:33:eb:
                    b6:ae:07:f9:5e:a9:8b:b0:ad:ab:b0:f9:c3:51:6f:
                    02:c4:8e:29:4c:36:b3:a6:03:fe:4e:23:55:aa:00:
                    de:79:f6:7c:3f:09:72:01:eb:a9:0b:44:51:d0:2b:
                    31:0b:25:38:01:93:b7:62:9c:61:6f:32:e1:61:76:
                    b6:df:14:fd:1e:dd:04:58:7c:5a:a8:4f:a9:cb:4f:
                    2f:7b:d0:b4:8f:db:15:32:4a:84:3a:82:cd:55:dd:
                    a7:b7:5d:03:d5:db:0b:f7:c2:2c:76:e1:10:d8:da:
                    de:92:70:95:1a:a6:10:52:39:4f:32:34:32:19:eb:
                    09:59:c2:46:14:bc:c2:ad:2b:a0:be:30:11:ce:bc:
                    00:5b:86:29:ce:e7:4d:85:1e:fb:6d:84:e1:af:d7:
                    e5:8a:6d:fe:77:58:7b:88:56:52:51:77:ce:30:76:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7A:0D:71:4B:15:E2:82:47:5A:3E:4D:96:54:3B:E3:0F:04:F1:7D
            X509v3 Authority Key Identifier:
                keyid:DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32332d3233203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:1d:2e:8d:6c:d3:83:16:90:35:e0:cb:1d:76:ae:61:a4:11:
         6f:91:e4:ae:6e:86:c5:e5:c8:31:64:c5:b1:12:ef:fe:9d:8c:
         9b:9d:ca:c5:89:19:b8:1c:c3:5c:a3:08:f4:32:c4:3a:ce:0d:
         47:2c:68:ed:3f:a2:fe:03:11:ba:7f:eb:a6:d9:01:cb:ce:55:
         ad:b0:df:ce:39:84:03:54:fe:14:ce:db:16:1d:e7:7d:41:37:
         d6:8e:a1:25:63:37:6e:00:e4:7c:ed:82:fc:77:c5:39:0b:d0:
         00:24:15:85:72:bc:14:dc:4c:e0:14:e4:e5:12:18:0c:79:9c:
         ab:58:88:6e:c2:8b:37:4e:e2:e2:ab:1c:7d:5a:70:ce:c5:ca:
         0c:8a:3d:6d:04:44:ac:e8:7b:f7:2b:57:4e:a7:3f:61:a3:f4:
         83:d4:34:dc:b9:00:ad:ec:80:23:eb:82:39:27:93:23:c5:de:
         24:ea:af:c4:5f:80:fd:b2:c5:4d:2a:c3:8c:59:8a:b1:42:cc:
         5f:4a:a1:40:66:c5:3f:71:84:12:aa:9a:e8:d9:fa:c4:e6:e0:
         65:f6:c4:e2:49:13:a4:d5:b9:68:04:23:f0:11:c8:12:e3:24:
         97:c1:b9:32:4d:2f:a4:6b:32:89:59:6e:9b:f6:c4:51:bc:d7:
         f2:c7:9a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org