Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/1/34352e3136372e3135322e302f32322d3234203d3e20323638303133.roa
File:                     34352e3136372e3135322e302f32322d3234203d3e20323638303133.roa (raw, json)
Hash identifier:          IwXKDKBPaaesLf4o3R3lWesHoDVrVgAjUCWHpU7g+o4=
Subject key identifier:   8D:E5:33:36:73:D3:2C:8A:B2:DE:50:E1:21:84:93:A5:48:35:ED:C4
Certificate issuer:       /CN=21577B6E627140A920C4D60B9BF6B91498176045
Certificate serial:       492192E0D8C569C40A70DEC0B5AE016291CAA05B
Authority key identifier: 21:57:7B:6E:62:71:40:A9:20:C4:D6:0B:9B:F6:B9:14:98:17:60:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21577B6E627140A920C4D60B9BF6B91498176045.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/1/34352e3136372e3135322e302f32322d3234203d3e20323638303133.roa
Signing time:             Wed 03 Apr 2024 21:38:49 +0000
ROA not before:           Wed 03 Apr 2024 21:33:49 +0000
ROA not after:            Wed 02 Apr 2025 21:38:49 +0000
asID:                     268013
IP address blocks:        45.167.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:21:92:e0:d8:c5:69:c4:0a:70:de:c0:b5:ae:01:62:91:ca:a0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21577B6E627140A920C4D60B9BF6B91498176045
        Validity
            Not Before: Apr  3 21:33:49 2024 GMT
            Not After : Apr  2 21:38:49 2025 GMT
        Subject: CN=8DE5333673D32C8AB2DE50E1218493A54835EDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:b5:f4:7d:48:43:99:ef:80:48:cd:f6:75:
                    89:f6:0d:c4:0f:bf:ae:f2:5f:8c:3d:a4:0d:da:df:
                    e5:f7:94:fa:ea:21:a1:4a:98:a0:b1:c7:4d:28:ba:
                    e4:14:3c:3d:fb:de:6f:fe:93:19:d0:6b:e7:07:a1:
                    5f:fd:7e:bf:a8:fb:33:4a:73:01:55:bc:d1:ac:f8:
                    a9:43:e7:f9:fe:17:2e:33:47:c4:c2:77:e5:27:04:
                    e3:9f:c2:ff:a5:e1:bc:95:bf:bb:f1:c7:62:0f:2a:
                    41:43:58:2e:ce:52:c0:c3:dc:22:84:ae:a5:27:1b:
                    f8:60:44:f8:af:5f:b8:64:ea:34:96:f1:8d:d2:c3:
                    49:a3:c3:fb:c7:87:75:34:04:af:d5:6b:3f:3b:cf:
                    95:96:7c:5a:1d:02:c3:d0:28:93:a6:e3:b0:f9:4d:
                    e9:2b:9a:2a:d1:00:7b:63:42:f4:9b:47:3f:f5:c1:
                    98:01:16:e3:79:bd:7e:f6:cd:d9:f8:53:7d:0e:10:
                    3b:b2:81:d3:d4:6e:e5:ea:31:9d:bf:5d:31:54:15:
                    45:ad:ed:d6:2d:eb:18:f3:c3:ae:b7:7c:1d:b8:14:
                    a4:d2:12:e4:c6:3b:e4:fa:cb:0e:61:06:61:81:ed:
                    84:0c:60:0d:b1:8c:41:2b:53:52:3d:29:57:75:28:
                    3b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E5:33:36:73:D3:2C:8A:B2:DE:50:E1:21:84:93:A5:48:35:ED:C4
            X509v3 Authority Key Identifier:
                keyid:21:57:7B:6E:62:71:40:A9:20:C4:D6:0B:9B:F6:B9:14:98:17:60:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/1/21577B6E627140A920C4D60B9BF6B91498176045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21577B6E627140A920C4D60B9BF6B91498176045.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/1/34352e3136372e3135322e302f32322d3234203d3e20323638303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:17:51:03:3d:7a:ab:df:fa:13:99:a8:43:5b:13:2e:71:7e:
         a3:ce:cb:4c:ab:9e:9d:71:85:85:28:fd:2d:e7:49:41:0e:48:
         43:c4:e6:18:c4:c9:2e:3f:28:46:29:b6:a7:60:c6:de:8f:a6:
         b9:d1:35:e0:0e:29:73:15:01:1a:ef:a3:77:27:6c:0e:72:d5:
         32:83:83:42:6e:fc:a9:9b:e3:b2:4f:db:bf:df:d6:07:4b:34:
         32:95:5b:0c:08:95:54:06:2f:f1:09:54:6d:c1:ca:dd:a2:dd:
         57:22:f2:7b:1b:a7:4e:2c:48:af:37:ca:07:0b:c8:1f:d9:3c:
         68:1b:65:50:4f:17:48:92:d3:ea:6d:d7:9e:8b:c4:fe:c7:36:
         6a:08:fb:d5:bb:b2:d4:f6:b1:ce:93:b8:14:10:4a:42:5a:17:
         f7:e1:98:d8:c4:04:56:23:9c:19:f4:2b:44:7a:90:d1:de:48:
         a8:7b:33:eb:d6:12:36:a0:18:2f:63:7b:0d:b7:29:3d:15:bd:
         97:87:a4:46:24:af:7c:79:29:f8:71:4e:70:a9:9f:1b:f4:d4:
         06:4e:99:d7:4d:26:01:99:c8:dd:5d:db:08:c1:96:75:ea:c9:
         38:38:dc:84:5b:4b:af:b1:7f:e7:76:1e:35:fb:40:86:84:0e:
         17:ff:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 19:12:36 2024 by rpki-client on console-ams.rpki-client.org