Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137382e302f32332d3233203d3e20323637333639.roa
File:                     34352e3233342e3137382e302f32332d3233203d3e20323637333639.roa (raw, json)
Hash identifier:          Fp/4eEzoekpyfr8WerMkdKs+lumryMkKPq/dlp/79j0=
Subject key identifier:   BC:96:37:8A:B9:A7:07:2F:68:6C:77:4F:4A:B4:61:AB:37:05:85:58
Certificate issuer:       /CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
Certificate serial:       1864191DA0B31AA0EDF4256935EEA5A3D88726F6
Authority key identifier: DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137382e302f32332d3233203d3e20323637333639.roa
Signing time:             Sat 21 Oct 2023 14:54:15 +0000
ROA not before:           Sat 21 Oct 2023 14:49:15 +0000
ROA not after:            Sat 19 Oct 2024 14:54:15 +0000
asID:                     267369
IP address blocks:        45.234.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:64:19:1d:a0:b3:1a:a0:ed:f4:25:69:35:ee:a5:a3:d8:87:26:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
        Validity
            Not Before: Oct 21 14:49:15 2023 GMT
            Not After : Oct 19 14:54:15 2024 GMT
        Subject: CN=BC96378AB9A7072F686C774F4AB461AB37058558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:c3:23:50:77:03:db:b0:63:a4:26:c7:91:
                    99:9f:9e:88:75:23:89:57:8e:8f:6f:4a:b2:c3:6f:
                    a2:b8:11:43:11:07:ee:15:07:23:ee:80:08:b0:8d:
                    d2:5e:00:c9:28:f6:00:ae:46:2a:66:c9:3a:4f:10:
                    d7:be:02:44:06:fd:12:a1:d7:26:f3:7a:f2:59:2c:
                    9b:61:cd:1f:9b:bb:9f:e8:d5:bd:96:fc:cf:8e:b1:
                    1f:e2:fc:50:d3:96:a8:d9:1f:07:b5:51:50:48:cc:
                    4e:82:20:ca:be:18:1f:18:0f:a5:19:ac:61:a3:36:
                    03:68:b4:af:64:6a:42:d9:67:38:eb:f9:e2:3c:e1:
                    82:13:0b:16:b7:0a:eb:9e:af:c1:90:fc:aa:3b:51:
                    7e:f0:a1:ba:fe:2d:5f:3b:d3:38:d5:02:1d:bb:9f:
                    91:7c:d1:44:aa:0f:fb:77:07:7b:78:9c:36:a2:a7:
                    17:c5:17:e8:53:10:88:1f:17:22:d3:55:a2:cb:40:
                    0d:74:cc:55:fa:9b:95:83:20:9c:67:0d:62:ea:7f:
                    11:a9:03:e6:1e:a6:8d:8c:c6:06:f6:89:95:bd:c9:
                    93:69:a9:a5:dd:8c:49:28:a2:f8:e4:5d:3f:52:c7:
                    79:cc:a7:1a:ce:1c:b0:83:7f:84:c1:ca:04:6a:f4:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:96:37:8A:B9:A7:07:2F:68:6C:77:4F:4A:B4:61:AB:37:05:85:58
            X509v3 Authority Key Identifier:
                keyid:DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137382e302f32332d3233203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:a3:67:ca:36:d0:9e:2d:0e:c6:fc:89:9b:27:4e:04:ec:3f:
         08:b0:0c:ea:0e:8a:57:ae:7e:74:99:88:28:b3:c3:87:e5:63:
         49:77:1e:f0:12:95:f2:20:f4:f6:5c:9f:21:c3:e9:41:b1:ad:
         d1:90:69:05:8a:63:05:43:e4:a3:f0:ae:79:f5:3f:21:65:8c:
         d9:23:0e:04:70:7a:f2:61:46:35:28:f6:15:7d:a4:63:38:b3:
         fc:ef:33:e0:3d:0a:4a:f4:71:1b:c3:75:67:77:8a:a1:f1:b4:
         9a:39:aa:14:ec:4e:a4:d4:1e:1b:8e:74:28:6f:3a:7b:bf:4c:
         24:03:53:cb:35:92:08:83:3f:e9:a4:10:fe:bf:62:e1:d9:2a:
         a8:9b:23:c4:22:0c:5f:df:2d:85:4c:0d:b1:fb:0d:bf:e6:28:
         00:b0:5f:34:bb:94:58:b0:eb:3a:23:fb:d9:58:c3:57:32:47:
         1b:08:fd:3c:14:bc:13:20:df:a8:e8:e9:01:dd:a1:67:56:72:
         ad:0e:43:29:7f:03:26:d8:bf:a6:34:a6:1b:41:a2:ac:90:23:
         ef:87:65:32:f3:ca:f2:d3:db:77:56:59:da:30:ba:2b:a1:b6:
         c6:d2:82:bc:82:4f:6d:ae:9f:ea:35:cf:da:cb:ce:00:de:55:
         9e:70:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org