Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa
File:                     34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa (raw, json)
Hash identifier:          VcQD8I4buPtijoWFNaYebYqmlBu5BBnytAEh1m6irPg=
Subject key identifier:   2D:B3:B1:A5:15:05:4B:A3:2B:39:F3:6B:D8:23:C0:71:7F:8D:17:F0
Certificate issuer:       /CN=0363C300551869E92BAF6218A3622188861DBE67
Certificate serial:       4A326479B1DBE562C42A83D2C183C95464F67134
Authority key identifier: 03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa
Signing time:             Wed 17 Jan 2024 22:30:46 +0000
ROA not before:           Wed 17 Jan 2024 22:25:46 +0000
ROA not after:            Wed 15 Jan 2025 22:30:46 +0000
asID:                     271632
IP address blocks:        45.172.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:32:64:79:b1:db:e5:62:c4:2a:83:d2:c1:83:c9:54:64:f6:71:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0363C300551869E92BAF6218A3622188861DBE67
        Validity
            Not Before: Jan 17 22:25:46 2024 GMT
            Not After : Jan 15 22:30:46 2025 GMT
        Subject: CN=2DB3B1A515054BA32B39F36BD823C0717F8D17F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:85:c8:65:44:ad:fc:48:e0:9f:b5:ad:07:
                    cd:ed:a6:51:b4:fc:d5:ae:5b:c2:a0:01:cf:b1:9f:
                    24:a3:28:0a:cd:cd:15:66:5b:1a:49:42:18:59:47:
                    7e:f4:49:09:78:c0:79:e2:d8:9f:11:09:9a:06:99:
                    10:7a:6f:fe:ac:53:99:3d:ef:3c:a6:07:82:ea:21:
                    96:49:66:9d:f9:89:23:25:40:af:c7:c7:4c:0d:e6:
                    61:bc:ee:4e:5b:10:1a:f9:3e:d9:44:01:42:09:9e:
                    20:94:4a:9e:79:33:07:0b:82:ca:83:23:5b:43:ad:
                    de:47:6f:77:6c:8a:f5:5c:fd:a1:6b:f5:d7:d8:59:
                    9e:3a:50:f6:2b:f3:57:0f:88:be:21:6a:f0:f8:a6:
                    0b:4c:d4:9b:e0:0a:1a:38:5b:a5:26:73:61:5f:26:
                    3f:40:a6:54:4c:ba:7a:0b:e5:e7:60:88:c4:bd:89:
                    ef:be:09:db:73:3b:c1:eb:83:99:f4:0e:5a:8f:7f:
                    7c:c5:bb:12:54:51:88:40:94:b3:72:4b:13:6b:3d:
                    1f:e3:c7:49:8b:b8:1e:e3:03:bd:75:56:d3:a9:fc:
                    c4:d3:bf:e6:9c:18:5b:c5:52:2b:17:44:b7:ae:7f:
                    e2:9c:ff:30:e2:9c:c1:98:9b:bb:47:f6:cc:35:eb:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B3:B1:A5:15:05:4B:A3:2B:39:F3:6B:D8:23:C0:71:7F:8D:17:F0
            X509v3 Authority Key Identifier:
                keyid:03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/0363C300551869E92BAF6218A3622188861DBE67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:32:5a:29:a3:67:fd:55:3d:20:3c:35:ca:30:40:f5:63:0a:
         0a:6c:76:82:17:56:26:11:09:36:15:0a:50:20:ab:e3:12:b6:
         cd:c6:82:ae:22:8d:c7:62:84:7c:0b:e0:86:4a:52:f8:6c:a3:
         42:18:a6:9b:9e:d3:da:1e:08:38:ea:86:3a:d3:fb:bc:5b:35:
         f1:c8:d5:fa:70:f4:7e:a2:6d:89:15:59:7a:71:d6:4a:e9:8e:
         79:a6:33:b4:31:d5:cd:ac:84:b1:bd:f0:55:05:01:d4:36:7a:
         34:5c:21:ff:df:21:13:df:16:6b:e5:52:11:96:44:05:7a:09:
         d5:15:8f:9c:8a:5c:1f:19:b2:92:b5:36:ea:ce:12:77:c9:1b:
         ac:bc:8b:41:db:5a:e9:28:e5:07:18:45:79:7b:be:d1:87:cd:
         45:9c:a4:e4:20:8e:c7:17:f2:9b:3a:9a:33:ae:aa:07:81:c2:
         4d:ac:ac:28:5f:7f:67:73:9b:79:8d:db:d3:10:e0:37:9f:e7:
         85:55:f9:27:22:fb:35:dc:ce:fe:97:9c:ee:f1:b5:c9:85:39:
         4c:af:2c:cf:fb:4d:fb:73:68:3f:16:a9:60:d5:a5:47:44:55:
         bd:05:cf:da:87:b9:64:5a:8a:cd:71:40:be:f0:e3:f9:62:03:
         24:dc:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org