Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233352e302f32342d3234203d3e20323639303434.roa
File:                     34352e3137382e3233352e302f32342d3234203d3e20323639303434.roa (raw, json)
Hash identifier:          q0I+us/dKzhFnRSqGaVcV4UdDsV8CVOzjcc5P0dY528=
Subject key identifier:   87:C7:EB:B0:C1:04:05:38:E5:0A:5F:B9:9A:AD:87:5C:61:C8:4B:EA
Certificate issuer:       /CN=65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B
Certificate serial:       2B177B284B9CC11C23E08AD02FDE2D72F520D7D5
Authority key identifier: 65:C3:8C:C8:B2:15:9E:7C:FA:A2:26:86:EE:8B:AC:95:C4:D6:81:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233352e302f32342d3234203d3e20323639303434.roa
Signing time:             Fri 24 Jun 2022 16:39:12 +0000
ROA not before:           Fri 24 Jun 2022 16:34:12 +0000
ROA not after:            Fri 23 Jun 2023 16:39:12 +0000
asID:                     269044
IP address blocks:        45.178.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:17:7b:28:4b:9c:c1:1c:23:e0:8a:d0:2f:de:2d:72:f5:20:d7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B
        Validity
            Not Before: Jun 24 16:34:12 2022 GMT
            Not After : Jun 23 16:39:12 2023 GMT
        Subject: CN=87C7EBB0C1040538E50A5FB99AAD875C61C84BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7c:32:53:ee:84:b0:cf:15:ac:17:bc:c4:58:
                    cc:4c:89:ba:e4:79:7d:3a:86:04:60:03:31:e0:d2:
                    44:25:57:08:4c:7c:3b:4c:ce:31:56:21:f7:73:8f:
                    71:72:24:7d:51:3c:1c:b5:92:83:fe:10:5b:c3:12:
                    0d:3b:07:5f:90:4d:a9:03:b0:27:86:48:4f:8a:af:
                    d7:b6:6a:a8:57:dd:5b:be:08:99:b2:4a:df:f9:83:
                    67:fc:8f:cd:dd:32:9b:e9:20:9e:59:fd:7c:df:72:
                    18:0a:d0:ba:db:a8:97:1d:1c:7a:84:7a:0b:3b:4e:
                    f7:f0:8f:59:98:a1:84:0e:66:b6:a9:63:58:6a:80:
                    b7:87:b0:3c:64:b2:58:50:5e:7f:be:63:05:eb:79:
                    9c:1a:cf:9d:36:21:11:be:98:5e:83:cf:46:b9:ff:
                    50:14:bc:e6:bc:f5:17:6a:36:6c:99:42:1d:6b:3e:
                    58:74:6e:ee:f6:cd:ce:0f:69:8e:4a:a8:86:2a:6d:
                    c3:a4:b2:17:da:e4:a4:96:a2:61:0b:84:65:b9:e7:
                    45:d0:8f:09:c6:26:63:17:b3:8a:7d:e6:fd:6e:25:
                    f7:f4:12:6c:33:8e:8c:58:f7:62:c9:9a:0e:37:18:
                    6b:dd:71:55:15:05:b1:d8:64:8b:cf:43:92:9b:e1:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C7:EB:B0:C1:04:05:38:E5:0A:5F:B9:9A:AD:87:5C:61:C8:4B:EA
            X509v3 Authority Key Identifier:
                keyid:65:C3:8C:C8:B2:15:9E:7C:FA:A2:26:86:EE:8B:AC:95:C4:D6:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233352e302f32342d3234203d3e20323639303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:cb:fd:67:5d:f0:0a:e4:6f:6f:8b:df:ef:78:16:a0:b7:
         1d:6b:21:74:4d:be:65:25:ad:42:95:72:c2:b0:89:c2:93:e3:
         d6:2c:b6:a7:7e:e0:e0:bd:62:84:f3:e2:ab:98:0d:f0:2f:26:
         aa:3b:59:2a:d4:9d:8c:f5:3f:18:e7:34:4e:f6:ab:3c:ad:c7:
         40:88:d7:24:f5:a9:2a:b5:09:b3:49:ee:7c:19:9d:99:a1:7b:
         12:6c:7b:c2:d7:fa:6b:af:8f:e2:cd:46:b3:c0:08:51:11:72:
         28:e3:97:43:55:4c:c0:ed:93:ea:7c:65:79:fd:fe:b8:8e:13:
         a0:00:21:30:c2:48:80:4d:54:5c:e3:9d:24:e2:0f:25:ab:25:
         78:75:6f:dc:01:bd:76:8e:01:cf:59:91:28:1c:44:be:9e:0b:
         9e:a1:98:25:60:bd:95:cf:08:91:b4:16:f4:a8:ca:9f:7a:44:
         e2:22:44:64:0f:c0:5f:87:02:f4:7c:ec:ca:65:ea:36:fc:33:
         19:76:b8:16:5a:f7:ca:ed:31:47:58:49:85:cf:39:86:8d:4e:
         38:8c:87:4e:25:c4:7b:88:74:a0:8f:8f:19:02:d0:63:c0:62:
         75:f4:ba:f7:e0:cf:58:30:bf:2a:c8:f0:a5:20:b3:24:a1:c4:
         63:f9:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org