Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa
File:                     34352e3233312e31362e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier:          MMp0bs7kfjDyhv+3pyY+0Uja8/LcPJUZLQu0pqM/J7o=
Subject key identifier:   51:F5:EC:0F:74:0B:D3:B5:41:38:47:9B:1E:7E:1F:F3:40:2E:D3:EC
Certificate issuer:       /CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
Certificate serial:       76D9965073741181A05F2A20E59E298F8D9B98B0
Authority key identifier: 48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa
Signing time:             Fri 15 Dec 2023 20:35:30 +0000
ROA not before:           Fri 15 Dec 2023 20:30:30 +0000
ROA not after:            Fri 13 Dec 2024 20:35:30 +0000
asID:                     267191
IP address blocks:        45.231.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d9:96:50:73:74:11:81:a0:5f:2a:20:e5:9e:29:8f:8d:9b:98:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
        Validity
            Not Before: Dec 15 20:30:30 2023 GMT
            Not After : Dec 13 20:35:30 2024 GMT
        Subject: CN=51F5EC0F740BD3B54138479B1E7E1FF3402ED3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:ff:93:f2:7e:97:ca:40:e3:18:a3:1d:26:
                    8f:3a:9e:41:38:16:a1:43:58:85:2c:f1:97:4a:a3:
                    ee:ba:e1:e2:29:31:df:49:6c:a9:c4:df:be:13:d5:
                    ff:df:c3:c2:86:dc:be:11:27:1a:97:30:9c:89:dc:
                    46:a6:68:2b:40:a2:df:68:b0:f3:f8:5d:19:05:ed:
                    09:80:51:e9:30:a5:ec:c3:c3:cc:01:7d:e2:c2:08:
                    2c:02:ee:48:30:e9:64:a4:af:ba:b0:25:45:50:40:
                    5f:14:65:a4:a2:1d:a3:e2:18:db:8d:d8:af:a6:1f:
                    8b:14:62:43:d5:2c:2c:49:42:23:1c:dc:93:f6:2c:
                    6b:89:45:46:a7:40:c3:f2:0b:15:5f:2e:a6:ea:13:
                    86:25:56:5b:a5:a2:ba:08:d1:54:3d:4b:3b:df:68:
                    f1:0e:9a:a2:a6:9b:7d:49:dc:3d:db:08:7f:98:d5:
                    ab:d4:f2:b3:bd:b5:65:f5:46:db:d6:5f:72:b1:0d:
                    cc:1b:54:bc:bc:94:8e:27:1d:fe:d0:36:da:27:75:
                    04:78:72:3a:89:7a:34:a7:d3:82:22:1a:f2:49:2f:
                    40:7c:c1:9e:42:96:ca:77:db:24:40:34:ed:0a:a4:
                    77:5e:16:f0:71:dc:7c:6e:01:f0:0b:31:e1:9e:ea:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F5:EC:0F:74:0B:D3:B5:41:38:47:9B:1E:7E:1F:F3:40:2E:D3:EC
            X509v3 Authority Key Identifier:
                keyid:48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:e7:3d:79:c1:5f:15:85:b9:eb:7f:6a:b1:fb:5e:24:35:
         52:83:81:25:68:1e:be:82:19:9c:46:46:86:61:34:84:d4:b1:
         23:f4:88:67:18:56:a3:f8:83:76:2b:57:40:0a:77:22:53:fd:
         60:1c:c2:8f:e5:0e:e7:2f:71:19:49:f7:4f:69:a0:cc:96:98:
         8a:9a:48:f0:8c:ed:6d:d2:b4:0f:be:d8:3a:7e:b6:4a:cc:a2:
         2c:d2:46:4e:ab:72:03:0c:c7:66:b6:7b:75:5a:9e:28:86:95:
         b2:44:d7:ee:6e:3e:0b:dc:ce:ca:ee:46:7b:d9:a2:ab:35:17:
         a5:11:2e:69:14:59:a9:e7:b7:75:44:a9:1a:68:3e:7c:77:e8:
         5a:aa:82:f4:61:0d:c9:42:ff:6e:11:5b:d3:f1:49:ed:1b:d5:
         c4:25:0e:ea:8c:8f:13:4c:a5:8f:88:ab:25:02:a7:88:b9:ed:
         6c:ff:79:30:9b:46:a3:3b:44:21:05:ae:1c:69:c2:ec:c3:1f:
         d2:08:ba:dc:c4:c1:89:cc:17:3f:c9:91:d1:66:2e:83:7f:a4:
         18:25:aa:6d:13:d7:f1:01:d4:c0:74:08:05:fb:ac:11:61:70:
         89:ea:65:53:25:38:01:bf:d2:70:ef:b1:28:5e:19:7e:40:f6:
         6d:91:2a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org