Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/34352e3233312e3233322e302f32322d3232203d3e203532383338.roa
File:                     34352e3233312e3233322e302f32322d3232203d3e203532383338.roa (raw, json)
Hash identifier:          Oy7qiwEDRrhimrReqTXA7uvarrQUfSnngkhXGatmUGo=
Subject key identifier:   14:8B:A4:DD:AD:C1:DA:51:20:6B:67:37:10:9A:7D:50:D2:45:C3:5A
Certificate issuer:       /CN=D0A7B6545E75499D1FEFA32D015932E50FC824C6
Certificate serial:       364FE6EED96F550AF07355F158CF0686B567F663
Authority key identifier: D0:A7:B6:54:5E:75:49:9D:1F:EF:A3:2D:01:59:32:E5:0F:C8:24:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/34352e3233312e3233322e302f32322d3232203d3e203532383338.roa
Signing time:             Tue 14 Jun 2022 20:25:07 +0000
ROA not before:           Tue 14 Jun 2022 20:20:07 +0000
ROA not after:            Tue 13 Jun 2023 20:25:07 +0000
asID:                     52838
IP address blocks:        45.231.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4f:e6:ee:d9:6f:55:0a:f0:73:55:f1:58:cf:06:86:b5:67:f6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A7B6545E75499D1FEFA32D015932E50FC824C6
        Validity
            Not Before: Jun 14 20:20:07 2022 GMT
            Not After : Jun 13 20:25:07 2023 GMT
        Subject: CN=148BA4DDADC1DA51206B6737109A7D50D245C35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:de:21:eb:74:d5:0c:c7:fd:19:81:d5:10:
                    eb:fa:d7:6b:6b:4c:c0:91:a1:65:bd:86:28:af:3e:
                    ae:44:6a:a6:1c:72:7d:0a:38:c1:0e:22:04:c6:05:
                    d8:9a:be:63:5f:e4:06:38:2a:30:29:78:ed:c1:75:
                    29:6e:64:15:35:6e:f2:59:5f:84:e4:a6:77:c4:96:
                    c0:89:de:f8:88:32:0f:4c:57:e9:c0:b2:de:5b:2c:
                    a7:67:84:0b:57:6a:33:37:44:67:14:2b:af:00:d6:
                    4c:bd:c0:53:84:37:1e:78:47:5c:a7:7e:d5:4f:28:
                    05:e2:8c:d9:fa:e9:fb:a6:09:da:3b:f7:be:6e:70:
                    a6:2a:dd:89:5e:5b:4a:f4:47:9f:60:0b:61:d1:a8:
                    a2:b3:1c:ad:66:e4:d4:94:95:92:b1:b6:12:8e:86:
                    45:19:a5:44:b9:d0:89:9f:f9:3c:4a:39:14:23:79:
                    9c:83:1c:fa:3f:a4:54:4d:75:64:02:32:ed:3b:dc:
                    0c:3b:cb:1b:f2:24:6d:6a:fc:da:6d:a7:f5:ec:56:
                    5a:62:ea:71:29:e8:dc:54:f7:de:20:f3:b1:1b:24:
                    45:21:36:fb:69:31:1b:1b:35:b8:2b:bf:e3:e0:2e:
                    cd:ce:bf:7a:dd:13:11:18:15:32:e5:3a:dc:6e:49:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8B:A4:DD:AD:C1:DA:51:20:6B:67:37:10:9A:7D:50:D2:45:C3:5A
            X509v3 Authority Key Identifier:
                keyid:D0:A7:B6:54:5E:75:49:9D:1F:EF:A3:2D:01:59:32:E5:0F:C8:24:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/34352e3233312e3233322e302f32322d3232203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:24:ad:6e:25:1f:2b:c5:9e:c7:b8:fe:d7:67:11:4c:f4:7c:
         19:e0:b0:fe:6e:d1:75:ad:97:1d:bd:21:02:59:e5:68:00:3d:
         3b:6f:25:0f:e0:20:03:8a:5c:e3:1c:6c:67:cc:b2:9f:78:ec:
         c7:88:f3:6f:c3:e9:f4:13:de:69:5b:45:8f:27:d4:c7:86:c7:
         40:d1:d1:a8:28:d7:7f:d4:6e:10:6b:1b:27:2f:b2:c8:33:8e:
         a1:dd:fa:93:14:1f:73:ff:ab:5d:d5:d8:3e:0f:4d:5a:2e:a3:
         28:53:9a:ef:d3:ed:b0:c5:44:e1:7d:a9:af:52:98:44:3b:b9:
         3f:b6:68:a8:fa:c3:53:39:64:c9:fa:da:75:eb:ca:06:74:86:
         35:1d:ce:31:97:f4:1c:7f:a3:30:fc:3d:5e:50:13:60:c2:ab:
         ab:6e:61:43:ae:49:75:c3:8c:c0:cd:ed:b4:94:23:3e:1d:9b:
         11:c4:88:b1:5d:f6:40:95:b4:d0:c2:c1:24:38:b3:12:d3:77:
         1f:28:67:a8:39:ac:a2:53:9c:ca:20:92:cd:3c:91:fd:47:32:
         a3:df:c0:d8:d3:ea:3b:47:d2:90:f1:96:0c:88:1d:a7:b9:e3:
         2b:6d:30:10:9c:f2:52:83:a3:d3:5f:23:fd:22:a1:f5:e9:fa:
         27:50:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org