Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/34352e3136322e3136302e302f32322d3234203d3e20323638353233.roa
File:                     34352e3136322e3136302e302f32322d3234203d3e20323638353233.roa (raw, json)
Hash identifier:          +EuTxpLBP0HzJEBHMwGw+6kJrEr0dHJPD1Yr7cD+4L4=
Subject key identifier:   D8:D1:DB:40:B4:38:FF:2F:7A:3D:2F:AC:6A:76:5D:D6:CB:73:DF:2C
Certificate issuer:       /CN=8EEA9DEC20AA919786E65616FB751BF513A51581
Certificate serial:       38C2C6FFE75BD977FDFE5C5B20B34E9481B9803F
Authority key identifier: 8E:EA:9D:EC:20:AA:91:97:86:E6:56:16:FB:75:1B:F5:13:A5:15:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EEA9DEC20AA919786E65616FB751BF513A51581.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/34352e3136322e3136302e302f32322d3234203d3e20323638353233.roa
Signing time:             Thu 22 Feb 2024 16:00:55 +0000
ROA not before:           Thu 22 Feb 2024 15:55:55 +0000
ROA not after:            Thu 20 Feb 2025 16:00:55 +0000
asID:                     268523
IP address blocks:        45.162.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c2:c6:ff:e7:5b:d9:77:fd:fe:5c:5b:20:b3:4e:94:81:b9:80:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEA9DEC20AA919786E65616FB751BF513A51581
        Validity
            Not Before: Feb 22 15:55:55 2024 GMT
            Not After : Feb 20 16:00:55 2025 GMT
        Subject: CN=D8D1DB40B438FF2F7A3D2FAC6A765DD6CB73DF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:27:18:94:53:55:f3:4c:da:57:9d:00:2d:
                    1c:f3:f7:ba:b4:65:2e:f7:90:09:2c:ea:c8:ee:84:
                    3f:bd:15:26:57:c0:48:21:11:ec:2a:88:15:01:0f:
                    7c:6f:58:20:9d:36:b3:c9:25:08:fe:71:47:20:97:
                    3f:bd:0b:ac:b4:a1:22:a5:93:4f:a2:75:71:36:97:
                    69:49:f5:aa:ee:c5:63:63:4d:b1:69:45:86:f7:cf:
                    76:c5:66:50:4a:31:df:03:4f:c6:92:16:50:db:aa:
                    27:2e:bd:93:89:f6:2f:03:ab:1f:ca:fb:a7:13:da:
                    17:c5:96:12:f1:6c:f3:91:19:0f:6b:ab:41:8c:ef:
                    35:41:c0:7c:56:cf:b2:a3:6a:ce:86:8c:5c:3d:65:
                    e5:47:70:05:06:0b:6d:dc:1f:18:5d:e4:74:53:dd:
                    2e:ad:ac:46:84:32:ca:a4:c6:54:51:01:39:35:ec:
                    0f:dc:45:cf:a2:43:4f:e8:f8:c9:2c:6f:e6:22:e6:
                    3c:6d:56:53:9d:e4:24:d1:09:55:4f:e0:ce:41:71:
                    7b:ee:d2:0b:f9:44:27:77:a7:bc:50:fa:a0:3c:b2:
                    40:93:0c:8d:5b:93:f1:20:22:65:42:04:77:9e:53:
                    b7:27:51:d2:3c:de:de:f5:f3:16:f9:84:0f:e8:5d:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D1:DB:40:B4:38:FF:2F:7A:3D:2F:AC:6A:76:5D:D6:CB:73:DF:2C
            X509v3 Authority Key Identifier:
                keyid:8E:EA:9D:EC:20:AA:91:97:86:E6:56:16:FB:75:1B:F5:13:A5:15:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/8EEA9DEC20AA919786E65616FB751BF513A51581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EEA9DEC20AA919786E65616FB751BF513A51581.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/34352e3136322e3136302e302f32322d3234203d3e20323638353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:56:a8:25:13:2c:f4:2c:27:d3:82:f4:d7:23:6e:93:3f:3d:
         26:f7:21:99:91:76:ef:65:41:a1:36:56:18:4a:70:02:ff:d0:
         cd:1b:db:23:1c:d1:33:64:1f:09:c3:19:59:1e:49:d4:37:6d:
         39:26:d0:75:38:d6:5b:63:dc:20:7a:42:45:78:e3:93:7a:f2:
         70:f1:b1:92:1b:61:d1:de:bf:bc:bb:2e:b6:a9:a2:3d:30:31:
         4f:e3:65:8a:da:2f:69:c5:3c:2c:ae:04:8c:96:c8:e9:b8:3e:
         90:93:2d:26:22:e7:41:51:66:e3:b5:8f:9d:72:2f:c0:e4:1f:
         f9:5a:21:bc:4f:b0:b1:b1:d4:3d:d8:e7:6b:62:12:b0:e5:4b:
         46:5f:1b:cb:29:0c:cf:46:ae:cd:71:3b:a2:e5:ed:06:78:3c:
         b3:a7:67:5b:a8:30:4f:ee:dc:e4:f9:5f:62:c6:44:5c:c5:0b:
         68:5b:11:79:66:55:95:1a:da:0f:29:44:69:9f:bf:2f:7e:8b:
         34:1c:ba:23:3a:22:18:8f:ba:cf:2a:3b:cc:d1:6c:9c:ae:bb:
         5d:f7:47:d6:c2:76:ed:71:fd:16:09:22:90:7a:4a:42:1a:02:
         6c:0d:0c:36:09:52:a4:45:22:b3:13:d0:d0:55:e7:7e:c4:23:
         71:c8:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org