Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBsWUTUGFZoqa7RCN7mTFH2wrqzxit4J973vH5qsuL34/0/34352e36352e3136342e302f32332d3233203d3e20323636353632.roa
File:                     34352e36352e3136342e302f32332d3233203d3e20323636353632.roa (raw, json)
Hash identifier:          /ukZKBdPTKc3inSABURHJHxiA2pjIRsM7IYM/FGep7Y=
Subject key identifier:   63:3A:AF:E2:33:91:21:A3:F7:E7:F3:CB:C5:FD:0C:7D:55:D9:0F:33
Certificate issuer:       /CN=3FDC1923832B0E865A2C114D108EA9FD2CC22E00
Certificate serial:       2D89AA6853174570F2DEB826EC44362A4B30CC52
Authority key identifier: 3F:DC:19:23:83:2B:0E:86:5A:2C:11:4D:10:8E:A9:FD:2C:C2:2E:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FDC1923832B0E865A2C114D108EA9FD2CC22E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBsWUTUGFZoqa7RCN7mTFH2wrqzxit4J973vH5qsuL34/0/34352e36352e3136342e302f32332d3233203d3e20323636353632.roa
Signing time:             Thu 14 Jul 2022 17:23:57 +0000
ROA not before:           Thu 14 Jul 2022 17:18:57 +0000
ROA not after:            Thu 13 Jul 2023 17:23:57 +0000
asID:                     266562
IP address blocks:        45.65.164.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:89:aa:68:53:17:45:70:f2:de:b8:26:ec:44:36:2a:4b:30:cc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDC1923832B0E865A2C114D108EA9FD2CC22E00
        Validity
            Not Before: Jul 14 17:18:57 2022 GMT
            Not After : Jul 13 17:23:57 2023 GMT
        Subject: CN=633AAFE2339121A3F7E7F3CBC5FD0C7D55D90F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:f0:fa:17:f2:2c:ce:65:71:6a:53:a1:c0:
                    53:1e:f0:cf:16:78:fd:5b:31:c5:b2:53:90:4a:c0:
                    f7:ef:b9:91:19:d2:04:e0:3f:88:58:fa:85:4e:8e:
                    5c:2f:35:89:4d:00:b2:89:61:8f:22:b2:41:9c:11:
                    e7:24:bb:6e:50:ca:68:d1:0d:53:d2:b9:9d:15:b3:
                    dd:87:3f:12:e7:b3:85:de:da:7d:6a:5e:3c:b1:74:
                    bd:39:08:07:f0:f3:1d:27:e8:e1:85:f2:2a:02:78:
                    c7:aa:1d:8a:75:33:68:f0:01:97:7b:56:9f:e8:83:
                    37:0e:94:13:2e:1a:56:e4:56:35:81:35:a6:57:f3:
                    da:10:90:87:20:87:10:eb:f9:87:fd:68:8d:16:00:
                    b9:a2:63:f2:6b:cc:ac:82:25:a1:05:25:f4:26:d5:
                    d5:0d:31:16:6c:3a:42:d7:3a:4f:e6:7f:25:c4:16:
                    d7:30:cb:82:0b:3b:e1:62:16:bd:91:94:48:48:ae:
                    a4:8f:e1:87:6a:11:7c:4b:c6:bf:07:68:33:42:37:
                    6b:65:9f:c3:e4:6e:07:74:12:7b:19:b5:ec:4a:8c:
                    33:60:6c:25:39:86:09:74:15:f2:22:a4:26:44:fa:
                    d7:fc:4b:4f:90:ad:a4:7c:dd:ef:79:29:99:f5:b3:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3A:AF:E2:33:91:21:A3:F7:E7:F3:CB:C5:FD:0C:7D:55:D9:0F:33
            X509v3 Authority Key Identifier:
                keyid:3F:DC:19:23:83:2B:0E:86:5A:2C:11:4D:10:8E:A9:FD:2C:C2:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBsWUTUGFZoqa7RCN7mTFH2wrqzxit4J973vH5qsuL34/0/3FDC1923832B0E865A2C114D108EA9FD2CC22E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FDC1923832B0E865A2C114D108EA9FD2CC22E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBsWUTUGFZoqa7RCN7mTFH2wrqzxit4J973vH5qsuL34/0/34352e36352e3136342e302f32332d3233203d3e20323636353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:bc:7c:7b:92:a4:f2:dd:2b:97:fc:9e:6c:42:4c:88:bf:6d:
         2a:42:18:6e:85:74:e7:ee:4a:5d:1a:70:5d:7f:6a:16:ae:f9:
         4f:96:e0:d5:b5:1a:79:02:74:15:dd:9e:fc:4b:d9:1f:a4:af:
         03:21:01:1b:15:fe:90:43:7e:5e:01:fa:1a:15:55:3f:06:87:
         71:d3:c8:36:42:54:b3:7c:bb:7d:14:5d:9b:bf:7c:60:73:d2:
         f7:f6:ac:80:1c:e8:73:aa:78:20:44:7a:fa:4f:dd:d5:9d:d4:
         ea:7a:05:68:5a:39:15:ef:00:b6:0e:31:60:3c:38:37:1c:f0:
         64:8a:08:ee:1e:42:0f:c0:76:f5:83:83:60:af:21:03:82:eb:
         e1:9f:1a:9d:f5:bb:71:0d:19:88:fa:66:69:fc:7d:6d:9a:e7:
         69:4d:a4:a7:1a:5d:e3:52:17:30:ca:80:b8:35:51:b0:1f:13:
         4e:d8:66:bc:e9:1a:46:35:5d:13:7c:b6:c4:65:b9:18:57:69:
         0d:08:1e:42:ea:d0:ed:83:52:76:67:e9:4b:fe:62:ca:17:6d:
         a6:27:c6:d9:7c:46:fd:e7:87:ed:c0:10:3d:b2:72:bc:12:40:
         b4:92:e6:8e:ff:a0:74:cf:f7:e7:07:3f:b9:62:36:91:64:b4:
         90:e8:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org