Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/34352e36352e3136372e302f32342d3234203d3e20323731303435.roa
File:                     34352e36352e3136372e302f32342d3234203d3e20323731303435.roa (raw, json)
Hash identifier:          BhhwKqfnh6JmhujiL3Vvrn8uHr2qnBFg1wuqIiDZSwY=
Subject key identifier:   54:B0:1F:9B:CC:6E:94:3D:0B:9C:41:67:BE:FE:72:00:0B:47:C5:54
Certificate issuer:       /CN=644502B8FE18AC1B411B40E7ABAB3959C1F76DD0
Certificate serial:       4E0CA89B16D1FEF9AE910E0EA65FA78D453CC66E
Authority key identifier: 64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/34352e36352e3136372e302f32342d3234203d3e20323731303435.roa
Signing time:             Tue 06 Dec 2022 12:59:57 +0000
ROA not before:           Tue 06 Dec 2022 12:54:57 +0000
ROA not after:            Tue 05 Dec 2023 12:59:57 +0000
asID:                     271045
IP address blocks:        45.65.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0c:a8:9b:16:d1:fe:f9:ae:91:0e:0e:a6:5f:a7:8d:45:3c:c6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644502B8FE18AC1B411B40E7ABAB3959C1F76DD0
        Validity
            Not Before: Dec  6 12:54:57 2022 GMT
            Not After : Dec  5 12:59:57 2023 GMT
        Subject: CN=54B01F9BCC6E943D0B9C4167BEFE72000B47C554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:da:45:ea:36:06:2e:71:96:61:5f:d9:99:
                    d2:c3:9d:fc:6b:ad:b7:73:2b:29:18:31:0c:22:29:
                    7e:24:27:11:a0:ea:d8:d3:03:7d:71:93:2c:ab:24:
                    80:fd:30:33:53:1c:10:77:b5:68:b8:47:f1:1e:5b:
                    47:a4:ca:a3:fc:2f:88:65:2a:76:8f:90:38:f9:27:
                    78:ec:cb:c0:40:a3:32:40:e4:2d:e0:ed:7d:3f:d8:
                    7b:23:f0:87:dc:37:81:f1:04:16:f7:6e:af:86:38:
                    f0:83:41:96:a3:c5:b9:aa:bb:f7:a7:95:3a:d5:8b:
                    9a:c6:2d:15:60:4c:83:b5:55:b1:77:bb:0d:ff:4f:
                    90:45:24:54:99:37:7c:a1:72:e7:1d:c2:d4:f8:67:
                    d8:a4:8d:17:f6:2b:ff:94:77:1c:8f:ff:12:06:62:
                    0e:34:36:2a:cf:32:a7:ab:03:9c:bc:12:c0:0a:59:
                    e1:af:97:73:71:de:1f:b9:9a:30:98:53:52:74:02:
                    a4:7c:92:54:93:76:44:34:f9:f8:14:34:ae:0b:27:
                    0c:8d:30:2e:aa:86:37:4d:16:94:c2:e4:e1:a3:97:
                    2c:9b:f4:87:b0:9b:e4:1d:ce:cd:9c:2c:5e:af:12:
                    42:c4:ee:92:9d:09:fb:92:31:b1:3a:4f:a4:50:ae:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:1F:9B:CC:6E:94:3D:0B:9C:41:67:BE:FE:72:00:0B:47:C5:54
            X509v3 Authority Key Identifier:
                keyid:64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/34352e36352e3136372e302f32342d3234203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:db:40:f5:35:6c:e5:a8:9f:48:70:da:6f:77:df:11:1b:6a:
         69:ed:b8:72:a1:75:4b:f2:3e:5e:b4:b7:18:a8:f9:1c:8c:e0:
         3d:28:8e:ab:1b:40:5d:7d:99:46:da:c6:34:ef:e5:ff:88:bd:
         10:46:00:55:b5:99:95:e0:4c:88:76:0e:e4:51:25:da:9b:e1:
         cf:8a:89:ec:80:06:5c:ca:54:a4:c2:d3:7f:f6:56:dc:48:0a:
         ca:15:9f:2f:3c:61:a2:27:23:54:51:d4:48:51:61:3b:67:17:
         76:c9:87:38:53:8f:f3:95:fb:78:15:e0:90:70:27:88:a2:46:
         55:cd:e1:c8:34:c5:12:18:0f:05:c9:f3:28:c3:a0:14:ca:84:
         a4:44:1c:bc:83:0f:38:d1:3a:92:e5:da:22:2f:40:79:da:4c:
         17:d3:5d:0d:5d:b1:86:3e:b1:13:df:49:32:64:13:1d:16:e3:
         89:9a:1d:c7:e2:50:f0:ca:22:c2:7e:8e:37:ab:a4:7e:73:eb:
         2b:40:1f:5a:40:5f:8b:11:90:1c:6f:12:f7:03:bf:6f:1a:44:
         dd:8f:7a:26:e5:13:f2:c4:a9:67:45:2a:aa:cf:f7:da:87:73:
         cd:9a:42:65:39:e6:4c:96:4d:63:bc:5e:46:4b:73:da:81:6f:
         9a:18:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org