Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/34352e36352e3136362e302f32342d3234203d3e20323731303435.roa
File:                     34352e36352e3136362e302f32342d3234203d3e20323731303435.roa (raw, json)
Hash identifier:          Fz7RS9AatFUMHh7XTZRGZPBcplXxOMaF/nFUVifAeh4=
Subject key identifier:   4F:C0:71:B6:28:2E:25:DD:31:A3:5D:D8:99:28:D5:7B:EA:4D:01:D4
Certificate issuer:       /CN=644502B8FE18AC1B411B40E7ABAB3959C1F76DD0
Certificate serial:       4B79F20E7BD0052F125A76DB260CA725DBF279CC
Authority key identifier: 64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/34352e36352e3136362e302f32342d3234203d3e20323731303435.roa
Signing time:             Tue 06 Dec 2022 13:00:19 +0000
ROA not before:           Tue 06 Dec 2022 12:55:19 +0000
ROA not after:            Tue 05 Dec 2023 13:00:19 +0000
asID:                     271045
IP address blocks:        45.65.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:79:f2:0e:7b:d0:05:2f:12:5a:76:db:26:0c:a7:25:db:f2:79:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644502B8FE18AC1B411B40E7ABAB3959C1F76DD0
        Validity
            Not Before: Dec  6 12:55:19 2022 GMT
            Not After : Dec  5 13:00:19 2023 GMT
        Subject: CN=4FC071B6282E25DD31A35DD89928D57BEA4D01D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:d5:1f:10:f4:7f:68:0e:60:ef:0b:a3:f9:
                    9f:8a:b9:83:74:ee:dd:a3:fc:80:b6:55:f6:c9:1e:
                    c9:e2:dc:11:61:22:84:e5:0a:c2:15:7d:a7:00:6b:
                    e2:36:82:86:ae:ca:7c:24:6f:c7:13:6f:c5:a1:40:
                    ca:a3:25:de:57:59:0b:81:df:cf:49:28:dc:53:e6:
                    1a:64:82:5e:9e:af:9f:89:70:04:63:8f:9e:d9:fd:
                    e3:ce:da:ee:98:64:c9:12:02:e1:63:37:8b:a7:b6:
                    e5:7c:5f:6c:0c:67:4d:07:2b:01:87:ef:74:bf:b9:
                    ab:23:c6:30:42:1b:79:71:62:a7:47:3e:89:07:af:
                    ee:36:30:7f:8d:c2:85:f7:a8:c2:8f:e0:04:cc:13:
                    55:16:1e:f6:bb:a2:9d:d6:05:55:55:1a:a2:03:f0:
                    79:10:d9:2c:fd:f3:f8:61:ba:9e:08:e3:78:dc:86:
                    35:5e:f7:58:c4:cc:05:dc:2d:3b:b8:43:70:c2:cc:
                    8f:df:58:a2:47:bf:45:d6:4d:90:f0:33:d0:64:4d:
                    8b:16:db:b4:c6:50:d6:6a:db:b9:c6:a0:3f:9b:b0:
                    ff:c5:71:16:b6:5a:d5:ab:e4:37:ac:8f:2a:ab:60:
                    b9:6c:25:fe:12:44:d2:4f:bf:e8:9a:1a:9a:42:8a:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C0:71:B6:28:2E:25:DD:31:A3:5D:D8:99:28:D5:7B:EA:4D:01:D4
            X509v3 Authority Key Identifier:
                keyid:64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/34352e36352e3136362e302f32342d3234203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:cd:4a:00:69:cb:32:df:81:db:74:36:09:bc:db:a0:5a:d1:
         6b:32:37:d5:97:7d:79:8d:fa:4f:43:e4:3b:ea:9d:b7:33:3a:
         26:4f:21:cc:d1:0c:12:1b:8c:56:63:74:d1:96:e4:ae:a1:f8:
         0e:b5:5d:26:bd:75:8c:77:b8:bb:fe:f1:a9:56:0d:08:68:12:
         3d:45:0a:ae:c0:ee:bd:6b:00:75:10:66:fb:de:af:16:13:cc:
         e4:24:6a:9b:e7:ce:72:e0:eb:fd:1e:ae:f5:5d:2b:8b:6c:c3:
         71:47:0f:3b:d4:5d:5f:d1:e5:30:b5:53:d0:2f:ad:39:82:fa:
         fd:77:54:25:5c:f9:5b:d9:1b:64:05:5b:f2:92:c1:5b:5e:b3:
         fd:3c:83:6f:4f:d1:72:eb:fd:77:86:c8:5c:e8:bb:2d:3f:5a:
         4e:c1:34:ae:4f:fe:0b:2c:95:7d:cd:35:66:6c:3e:47:d2:2f:
         53:f4:35:16:61:a8:cb:ee:43:76:99:70:00:1d:ce:a2:6f:1b:
         4b:ec:1d:25:36:ea:55:83:5f:45:80:98:15:c6:f9:49:04:db:
         ae:2f:92:c4:b1:4b:8b:cf:85:56:02:1c:43:60:c8:c8:c9:db:
         d6:45:64:a5:11:e1:e7:fa:e6:d9:0f:81:51:54:77:af:97:a3:
         d4:6d:82:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUS3nyDnvQBS8SWnbbJgynJdvyecwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0NTAyQjhGRTE4QUMxQjQxMUI0MEU3QUJBQjM5NTlD
MUY3NkREMDAeFw0yMjEyMDYxMjU1MTlaFw0yMzEyMDUxMzAwMTlaMDMxMTAvBgNV
BAMTKDRGQzA3MUI2MjgyRTI1REQzMUEzNUREODk5MjhENTdCRUE0RDAxRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZn9UfEPR/aA5g7wuj+Z+KuYN0
7t2j/IC2VfbJHsni3BFhIoTlCsIVfacAa+I2goauynwkb8cTb8WhQMqjJd5XWQuB
389JKNxT5hpkgl6er5+JcARjj57Z/ePO2u6YZMkSAuFjN4untuV8X2wMZ00HKwGH
73S/uasjxjBCG3lxYqdHPokHr+42MH+NwoX3qMKP4ATME1UWHva7op3WBVVVGqID
8HkQ2Sz98/hhup4I43jchjVe91jEzAXcLTu4Q3DCzI/fWKJHv0XWTZDwM9BkTYsW
27TGUNZq27nGoD+bsP/FcRa2WtWr5DesjyqrYLlsJf4SRNJPv+iaGppCimPhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUT8BxtiguJd0xo13YmSjVe+pNAdQwHwYDVR0j
BBgwFoAUZEUCuP4YrBtBG0Dnq6s5WcH3bdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGNIVndkbnBiWGtLR21oMlZKODhiS05jMzg2ODdXTXhzWUtnY294MTlH
ZWcvMC82NDQ1MDJCOEZFMThBQzFCNDExQjQwRTdBQkFCMzk1OUMxRjc2REQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0NDUwMkI4RkUxOEFDMUI0
MTFCNDBFN0FCQUIzOTU5QzFGNzZERDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RjSFZ3ZG5wYlhrS0dtaDJWSjg4YktOYzM4Njg3V014c1lLZ2NveDE5R2VnLzAv
MzQzNTJlMzYzNTJlMzEzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzAzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUGmMA0GCSqGSIb3DQEBCwUAA4IBAQAKzUoAacsy
34HbdDYJvNugWtFrMjfVl315jfpPQ+Q76p23MzomTyHM0QwSG4xWY3TRluSuofgO
tV0mvXWMd7i7/vGpVg0IaBI9RQquwO69awB1EGb73q8WE8zkJGqb585y4Ov9Hq71
XSuLbMNxRw871F1f0eUwtVPQL605gvr9d1QlXPlb2RtkBVvyksFbXrP9PINvT9Fy
6/13hshc6LstP1pOwTSuT/4LLJV9zTVmbD5H0i9T9DUWYajL7kN2mXAAHc6ibxtL
7B0lNupVg19FgJgVxvlJBNuuL5LEsUuLz4VWAhxDYMjIydvWRWSlEeHn+ubZD4FR
VHevl6PUbYJa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org