Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/34352e3137312e3134382e302f32322d3234203d3e20323638373631.roa
File:                     34352e3137312e3134382e302f32322d3234203d3e20323638373631.roa (raw, json)
Hash identifier:          hahoQa/BVPMjAzijDvBlnlDCrE1QzlfmoSWioU4RPOU=
Subject key identifier:   64:DA:50:E3:F4:DD:47:1A:EE:C1:0F:FF:5F:1E:8E:21:4B:EA:51:2A
Certificate issuer:       /CN=C37CB2BE57C03AF3294ACFADE9632534F0696AAD
Certificate serial:       6D835C47B1692CF02FF6282187E41A92412473CB
Authority key identifier: C3:7C:B2:BE:57:C0:3A:F3:29:4A:CF:AD:E9:63:25:34:F0:69:6A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C37CB2BE57C03AF3294ACFADE9632534F0696AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/34352e3137312e3134382e302f32322d3234203d3e20323638373631.roa
Signing time:             Thu 15 Feb 2024 12:38:02 +0000
ROA not before:           Thu 15 Feb 2024 12:33:02 +0000
ROA not after:            Thu 13 Feb 2025 12:38:02 +0000
asID:                     268761
IP address blocks:        45.171.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:83:5c:47:b1:69:2c:f0:2f:f6:28:21:87:e4:1a:92:41:24:73:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37CB2BE57C03AF3294ACFADE9632534F0696AAD
        Validity
            Not Before: Feb 15 12:33:02 2024 GMT
            Not After : Feb 13 12:38:02 2025 GMT
        Subject: CN=64DA50E3F4DD471AEEC10FFF5F1E8E214BEA512A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:22:ee:91:97:c0:15:c0:f7:42:f5:c6:d4:
                    a7:b1:bb:c7:ee:36:ad:4f:63:28:8e:23:6c:d5:62:
                    dc:4c:b2:24:2a:c4:de:c7:b2:80:a9:de:d3:d5:3a:
                    e1:7a:eb:50:74:9f:8b:46:45:80:d6:30:a8:d2:1a:
                    14:0f:c0:f3:c3:95:d1:2c:95:9c:ad:6c:79:10:4f:
                    bd:f1:e9:e0:ba:4f:82:24:55:e8:33:b2:c9:0f:a3:
                    58:79:94:4d:94:0e:7b:89:a4:f1:9f:9a:d4:2c:a1:
                    e8:0f:f8:77:80:5d:41:fa:70:a6:76:54:9c:72:f2:
                    bb:ee:38:d7:2d:6b:a5:fe:ed:78:ed:45:9d:11:8a:
                    4a:9f:22:b3:77:e1:c3:ec:aa:10:50:72:4a:cd:65:
                    fe:5e:0d:a1:a7:28:5e:43:ed:b1:21:bb:8d:f6:cf:
                    32:8a:9e:9c:50:3a:99:75:e2:ea:30:13:b6:37:53:
                    7a:08:68:67:12:38:b4:90:2c:54:f5:c2:e2:09:ec:
                    49:87:1e:86:bb:12:bb:cf:5f:4c:f4:78:ae:41:a6:
                    17:29:e7:5a:87:51:54:6f:75:4f:d3:08:f8:cd:f9:
                    84:f3:b0:e1:3f:23:be:41:16:a3:ca:5c:1d:e4:8c:
                    32:bc:fe:21:1c:78:af:74:f3:bb:b6:d0:f8:d0:28:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DA:50:E3:F4:DD:47:1A:EE:C1:0F:FF:5F:1E:8E:21:4B:EA:51:2A
            X509v3 Authority Key Identifier:
                keyid:C3:7C:B2:BE:57:C0:3A:F3:29:4A:CF:AD:E9:63:25:34:F0:69:6A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/C37CB2BE57C03AF3294ACFADE9632534F0696AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C37CB2BE57C03AF3294ACFADE9632534F0696AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/34352e3137312e3134382e302f32322d3234203d3e20323638373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:cc:6b:25:99:f5:36:98:08:73:a9:0f:76:e7:82:aa:18:86:
         d9:52:81:55:fe:1a:24:18:6b:03:8c:43:91:25:3a:42:e1:c7:
         62:65:f5:d7:be:f9:0a:1b:89:d9:bd:5c:f7:2e:e0:e8:a0:61:
         73:01:09:b5:81:f4:c2:e9:90:13:a1:7e:89:86:94:74:b7:f3:
         72:2e:b9:03:c1:c4:94:15:a4:04:b1:5a:2e:8b:75:4b:d8:e6:
         60:ec:bf:c3:15:a7:46:09:9e:0e:d1:5c:f2:8d:f6:7e:fe:1f:
         84:a4:86:91:ce:44:88:4c:73:c3:4f:83:46:8c:9e:d9:c7:f5:
         2b:7d:87:72:da:6f:5a:f0:a0:5f:4e:e4:56:7e:fc:08:c5:e2:
         3f:d2:69:e4:77:4e:b2:88:f9:fa:9d:58:92:40:1b:56:23:be:
         ca:c2:19:57:9b:a0:78:dd:a2:78:22:fc:53:d9:06:8b:9a:04:
         70:ef:b3:c6:d4:2a:6e:c7:19:fd:82:0f:0d:b6:6a:ca:a6:f0:
         3d:5f:9d:e8:90:44:dc:3d:23:65:64:0e:a8:71:45:1f:22:0a:
         5e:d7:c3:fa:91:79:63:7a:89:de:d9:72:e4:1d:a1:bd:00:8c:
         d1:64:8b:61:e4:c3:67:a6:3d:ac:ca:1a:c2:e2:45:7d:f9:91:
         7b:27:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org