Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/1/34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa
File:                     34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa (raw, json)
Hash identifier:          xev2xNRVbyRG0GjxM8ZyMXl31xxloGB+Y2RfUHvWwoQ=
Subject key identifier:   DA:B4:16:18:53:AC:49:66:CD:1F:73:38:19:D9:14:1C:56:30:19:51
Certificate issuer:       /CN=C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC
Certificate serial:       33CBD27C9E84219F54398C02576581711926A651
Authority key identifier: C0:09:A2:D2:D5:2E:5A:79:10:CF:6C:C4:DC:19:6D:8F:87:E2:C2:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/1/34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa
Signing time:             Thu 04 Apr 2024 01:05:19 +0000
ROA not before:           Thu 04 Apr 2024 01:00:19 +0000
ROA not after:            Thu 03 Apr 2025 01:05:19 +0000
asID:                     268556
IP address blocks:        45.163.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cb:d2:7c:9e:84:21:9f:54:39:8c:02:57:65:81:71:19:26:a6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC
        Validity
            Not Before: Apr  4 01:00:19 2024 GMT
            Not After : Apr  3 01:05:19 2025 GMT
        Subject: CN=DAB4161853AC4966CD1F733819D9141C56301951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:ee:df:e2:25:ad:7c:38:0b:0c:c3:8a:c4:
                    7c:1a:83:3b:4e:c4:3c:1c:51:3b:da:19:01:c0:66:
                    30:c0:af:dd:45:a0:71:48:4c:ab:fb:b4:2e:1b:87:
                    7f:f3:81:9a:cd:4f:c5:e1:75:48:38:e3:36:17:19:
                    bd:9a:e4:be:f6:5e:02:b4:6a:86:b7:1a:ba:6b:c0:
                    d8:bf:26:a0:50:d7:02:d2:1a:26:60:10:4c:d2:52:
                    5b:32:11:8a:db:49:2f:9f:85:17:4d:72:df:73:78:
                    ca:4e:65:a5:9d:70:00:e0:0f:49:5f:fc:2c:6c:94:
                    10:a3:34:97:31:a1:20:70:c3:8f:db:ae:c4:cf:9b:
                    ae:1b:15:4f:65:08:d2:f2:13:58:2f:b0:e8:46:f3:
                    3e:7e:0f:34:d2:1b:f8:a3:70:4c:c8:76:ae:6b:1b:
                    40:d2:d4:df:36:99:42:1b:1d:36:b6:0d:7c:12:06:
                    ef:6f:82:19:89:52:94:e0:0a:56:ea:a2:85:41:c0:
                    f1:8a:a5:bc:2e:49:d1:8e:92:2a:bf:45:7a:2b:d0:
                    df:e6:f9:73:ae:38:ce:8a:86:2e:5f:a3:2e:c0:ce:
                    45:ea:6a:87:5e:f3:87:61:11:23:90:38:f6:ef:b4:
                    ad:ae:2b:57:95:04:d4:cf:81:16:c0:07:aa:48:e4:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B4:16:18:53:AC:49:66:CD:1F:73:38:19:D9:14:1C:56:30:19:51
            X509v3 Authority Key Identifier:
                keyid:C0:09:A2:D2:D5:2E:5A:79:10:CF:6C:C4:DC:19:6D:8F:87:E2:C2:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/1/C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/1/34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:51:c1:70:8f:57:1a:0f:e3:a4:03:1e:93:29:06:b0:da:71:
         9d:16:04:69:2c:67:3d:bf:cd:25:0a:f8:96:75:81:21:0a:ea:
         04:60:70:1a:8e:48:d6:7d:52:b9:8b:43:6f:f4:65:48:50:0c:
         8b:82:fd:80:a6:86:9d:0a:38:73:ea:31:18:13:0a:3b:aa:24:
         09:12:47:38:0a:a8:4d:b3:a4:a2:0e:22:cf:9b:55:d8:e5:46:
         b9:05:b7:c1:ee:c5:76:3d:78:c8:52:64:b0:11:15:1d:56:bb:
         08:07:ed:0a:c6:dd:67:4e:e4:52:9c:d1:eb:bb:78:46:af:cf:
         4b:43:01:1b:58:c1:9a:b7:17:58:ef:61:72:5e:23:f4:27:e2:
         29:2a:0b:7d:1c:a9:56:f2:0e:14:3b:4d:e7:c2:9b:db:27:7d:
         ac:55:4c:91:1e:94:86:1f:c5:bf:6f:77:c4:2d:1b:bf:4c:a2:
         f3:5c:08:d0:4f:ce:25:28:97:39:78:84:16:cc:ac:c9:54:a3:
         9d:8f:b7:cf:61:da:c3:ac:c1:f1:00:6f:98:8e:ab:cf:36:b2:
         47:23:96:3a:85:20:8b:9b:55:1f:c4:77:e8:d6:93:77:9d:11:
         12:80:27:b4:27:10:84:ba:a6:f3:fc:dd:1c:19:a5:39:10:30:
         f1:38:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org