Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/34352e3136322e39322e302f32322d3234203d3e20323638353137.roa
File:                     34352e3136322e39322e302f32322d3234203d3e20323638353137.roa (raw, json)
Hash identifier:          UxReB6EJkmxJRCddiW9IPTUaao9Tz2DK5N1WB9aruHQ=
Subject key identifier:   DD:0A:75:27:43:90:4B:7A:99:27:EA:B7:7C:B5:F8:8E:3A:52:7F:11
Certificate issuer:       /CN=D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44
Certificate serial:       53EA7640A255AB23431A1B1A81A51768E41A9091
Authority key identifier: D8:CC:A6:95:A1:D8:D7:6A:25:DD:9F:31:F5:AA:91:09:A5:5D:9C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/34352e3136322e39322e302f32322d3234203d3e20323638353137.roa
Signing time:             Fri 05 Jan 2024 19:59:21 +0000
ROA not before:           Fri 05 Jan 2024 19:54:21 +0000
ROA not after:            Fri 03 Jan 2025 19:59:21 +0000
asID:                     268517
IP address blocks:        45.162.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ea:76:40:a2:55:ab:23:43:1a:1b:1a:81:a5:17:68:e4:1a:90:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44
        Validity
            Not Before: Jan  5 19:54:21 2024 GMT
            Not After : Jan  3 19:59:21 2025 GMT
        Subject: CN=DD0A752743904B7A9927EAB77CB5F88E3A527F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:53:ce:f4:6e:4b:01:d2:25:7c:f8:b5:e4:
                    f4:2c:68:c7:b9:c1:45:40:f5:9e:8a:33:96:53:83:
                    f3:f4:1c:26:aa:e1:3e:f8:66:9e:f3:7c:dd:37:7a:
                    6a:0e:77:d0:b7:3a:fb:0d:5b:67:f0:e2:5a:cf:fe:
                    19:6a:ee:de:7d:68:6a:8e:37:80:4b:a9:4e:12:d4:
                    91:e4:17:96:30:07:c4:83:32:e6:13:44:85:3a:e6:
                    f4:03:c5:3d:d3:13:90:3c:f8:b7:7b:f8:da:f6:d0:
                    01:8c:bb:ea:f4:0c:88:df:30:b6:17:60:ff:07:37:
                    5b:2b:97:03:52:53:e9:03:f4:7a:25:2c:d1:80:11:
                    55:ee:27:fa:51:a5:d7:ff:e4:b4:ac:f2:f0:92:b7:
                    17:4d:9d:be:4b:b6:a3:68:1c:f5:89:44:19:86:f4:
                    d0:d8:43:2e:fa:f6:70:f1:7f:79:dd:ad:ca:72:58:
                    c5:2a:34:7a:a6:7c:9f:47:cb:c2:0d:0a:3c:8d:3a:
                    58:34:73:b4:8d:ea:c2:ad:22:c7:8b:9d:fd:04:0f:
                    a1:50:13:50:0a:41:6f:dd:89:d6:87:63:ce:8f:51:
                    cc:db:49:93:39:4f:9d:8c:1f:70:ab:0d:5c:93:1b:
                    8b:2b:be:db:b1:d1:57:2b:c5:5d:76:6f:0b:26:60:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:75:27:43:90:4B:7A:99:27:EA:B7:7C:B5:F8:8E:3A:52:7F:11
            X509v3 Authority Key Identifier:
                keyid:D8:CC:A6:95:A1:D8:D7:6A:25:DD:9F:31:F5:AA:91:09:A5:5D:9C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/34352e3136322e39322e302f32322d3234203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:38:ad:df:a7:25:0f:eb:c9:03:26:53:44:31:1b:4d:2c:0a:
         3c:8c:a6:68:35:b1:ef:7f:79:cc:3a:1b:e2:29:8e:f3:a7:da:
         84:9c:e2:c2:fb:61:7c:af:7a:ae:ba:ca:b3:28:44:b6:20:dc:
         2f:4b:9c:d2:66:06:a9:13:a4:3a:f2:9a:03:61:08:b9:16:4c:
         fb:49:82:48:8b:37:77:ba:55:87:c0:15:36:3d:6f:9f:1f:bd:
         76:1c:58:28:01:92:50:fe:d4:e2:be:e7:0f:91:39:d3:04:70:
         80:43:c4:6b:e8:c9:05:ab:ba:88:4c:2c:2c:ee:ab:df:1f:f7:
         e5:1a:b2:05:1e:90:9e:e8:e0:d0:34:19:75:3a:75:ca:31:47:
         cb:ce:c1:ae:07:1f:7e:94:d1:c4:3f:6e:1c:6a:9a:aa:07:88:
         15:fa:73:94:bd:7c:9f:57:d1:fe:63:8c:4f:a9:9d:45:f6:e6:
         91:b3:b1:46:5b:e4:1d:a8:40:d8:32:13:07:49:52:af:8c:60:
         92:df:c3:e8:12:99:97:42:e9:b3:7c:fb:36:67:8a:04:4f:90:
         12:b4:17:37:12:26:98:05:db:64:84:7c:70:bf:f2:3d:b2:c0:
         b6:02:2a:48:5a:b7:92:92:cb:1e:d2:4a:7f:8e:b6:bf:fd:e7:
         96:c3:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org