Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139392e302f32342d3234203d3e20323639313937.roa
File:                     34352e3138312e3139392e302f32342d3234203d3e20323639313937.roa (raw, json)
Hash identifier:          jTLedEX4tWwnLnlHeXu6bGUaQ15kacIkI2QJLLj1smE=
Subject key identifier:   8C:C7:02:95:43:35:7C:76:CB:A2:51:08:C3:2E:E3:F5:67:12:DB:9A
Certificate issuer:       /CN=06AB476C0D831228F3F27817D9D72D20D21DB145
Certificate serial:       629FCF95247EB8EA57815FBD51DDE4904E65A3DA
Authority key identifier: 06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139392e302f32342d3234203d3e20323639313937.roa
Signing time:             Thu 27 Jul 2023 12:21:56 +0000
ROA not before:           Thu 27 Jul 2023 12:16:56 +0000
ROA not after:            Thu 25 Jul 2024 12:21:56 +0000
asID:                     269197
IP address blocks:        45.181.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9f:cf:95:24:7e:b8:ea:57:81:5f:bd:51:dd:e4:90:4e:65:a3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AB476C0D831228F3F27817D9D72D20D21DB145
        Validity
            Not Before: Jul 27 12:16:56 2023 GMT
            Not After : Jul 25 12:21:56 2024 GMT
        Subject: CN=8CC7029543357C76CBA25108C32EE3F56712DB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:4f:26:be:4f:6f:88:9c:b4:fe:c4:9b:74:
                    50:2e:8f:33:0a:98:dd:79:f2:d5:45:25:e7:f7:7a:
                    81:39:8f:9c:36:be:97:e9:ed:b9:57:91:72:fc:1a:
                    7e:c4:36:59:a6:4d:5f:4f:d1:fd:2b:72:23:1a:37:
                    60:12:de:e0:9f:58:cf:01:01:2a:6e:a4:fa:39:f0:
                    43:e7:99:56:78:2d:0a:a9:06:28:35:e7:ff:da:2d:
                    2c:4f:19:c1:fe:0f:cf:89:7b:da:28:c3:1d:b0:f2:
                    47:ea:78:95:e1:23:87:69:67:74:8b:f2:c6:76:7a:
                    7d:ec:32:5b:a8:c4:67:1c:c4:53:e2:d2:ee:01:3f:
                    57:93:7b:90:ac:18:f8:6d:ef:53:b9:25:e1:49:36:
                    eb:b7:8b:78:d5:a9:b7:b5:a3:dc:c0:0b:82:cd:65:
                    33:ee:6f:d7:3d:d2:d3:b0:42:8f:f6:02:34:1a:a9:
                    05:2e:1b:9b:f3:ff:40:da:17:8c:37:fe:8d:c2:76:
                    65:9c:b7:8e:a5:b3:a8:c5:a2:69:db:70:37:b8:29:
                    29:d8:88:d7:8e:94:ee:a9:b5:82:95:e5:37:1b:a3:
                    2e:11:3f:5c:19:1e:28:86:f4:f3:9e:22:80:26:f1:
                    1d:72:41:7e:05:40:5d:52:81:1f:54:d5:ea:7e:a4:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C7:02:95:43:35:7C:76:CB:A2:51:08:C3:2E:E3:F5:67:12:DB:9A
            X509v3 Authority Key Identifier:
                keyid:06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/06AB476C0D831228F3F27817D9D72D20D21DB145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139392e302f32342d3234203d3e20323639313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a8:68:8b:c2:e0:f2:25:e3:32:bf:da:ac:d4:b7:ae:aa:bc:
         3b:e6:04:44:b2:38:fc:a3:7b:bd:fb:18:86:b3:fc:6e:55:49:
         79:f9:9a:1f:23:df:1c:88:e2:64:b8:90:81:87:ca:33:41:4a:
         74:5e:b9:15:64:94:df:30:2d:6d:d8:c4:4d:08:82:85:55:f6:
         ae:c7:a4:dd:d5:a5:b4:8d:1f:5a:22:fd:41:c4:e0:29:bb:cc:
         e0:94:d4:a7:4c:c6:b7:0f:8a:92:16:34:56:9d:ee:f0:11:de:
         41:4f:ea:0c:54:13:5d:cd:9f:09:ed:68:de:d8:d1:02:5c:d5:
         32:05:31:47:df:96:60:fb:fd:d4:c9:7a:cc:e1:09:d8:90:90:
         86:21:65:e9:45:c1:9d:79:be:c7:05:77:bc:e6:73:20:19:15:
         37:96:da:96:49:dd:4d:97:90:2e:60:ae:e0:2e:47:8b:5d:91:
         9c:b6:c5:9a:dc:71:b3:44:08:5b:bd:c9:57:61:17:46:d6:12:
         bb:fd:8f:5c:48:24:c0:75:56:f0:14:be:9c:ef:66:5f:d8:87:
         25:0e:7b:90:96:10:e6:eb:0c:97:56:07:c1:c8:80:fb:22:be:
         82:eb:55:4f:3d:b4:6c:cf:a5:c4:c3:4e:ba:07:7c:48:cf:c1:
         45:bf:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org