Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234322e302f32332d3233203d3e20323636303736.roa
File:                     34352e342e3234322e302f32332d3233203d3e20323636303736.roa (raw, json)
Hash identifier:          exszXGusf+1s5iZCkBRXtKxPMfRQE1Jyr4WTYHb11Ss=
Subject key identifier:   50:F3:A9:6D:04:B6:75:51:1B:CF:5F:47:36:B6:19:A9:6F:D1:E8:DE
Certificate issuer:       /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial:       06EE7E8401AFD87039A5B9B0FB3423225A1E259F
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234322e302f32332d3233203d3e20323636303736.roa
Signing time:             Mon 03 Apr 2023 18:50:36 +0000
ROA not before:           Mon 03 Apr 2023 18:45:36 +0000
ROA not after:            Mon 01 Apr 2024 18:50:36 +0000
asID:                     266076
IP address blocks:        45.4.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ee:7e:84:01:af:d8:70:39:a5:b9:b0:fb:34:23:22:5a:1e:25:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
        Validity
            Not Before: Apr  3 18:45:36 2023 GMT
            Not After : Apr  1 18:50:36 2024 GMT
        Subject: CN=50F3A96D04B675511BCF5F4736B619A96FD1E8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:72:7c:4b:db:1e:eb:02:59:1a:59:ab:9f:
                    40:71:31:6a:f1:c3:78:8a:b3:f0:45:11:a3:d9:39:
                    a4:68:56:c6:03:ba:d7:61:8a:f7:c1:df:e9:35:0b:
                    c8:5a:57:b3:5f:6e:c0:51:04:c5:c9:66:c2:1a:d9:
                    02:a1:52:2a:6c:de:65:31:be:ec:22:f4:d3:d0:d0:
                    7f:61:2e:22:8c:f6:4f:e2:16:fc:6f:9f:48:92:32:
                    4e:79:1e:77:fc:ea:03:6f:96:f9:b8:bb:18:85:52:
                    56:c9:fb:9c:91:58:f4:5d:8d:0a:12:db:d2:7c:e4:
                    06:2f:f9:b2:02:d8:fb:f8:f9:41:06:ca:a9:19:85:
                    11:ca:48:8e:12:5d:a0:25:6c:2c:21:b1:ec:c8:39:
                    5d:b0:ee:67:e1:1b:c5:89:4f:b5:77:8c:31:a5:1f:
                    7a:dc:40:0b:87:2e:3c:9c:e7:02:29:4f:b3:5c:03:
                    dd:7e:bd:fa:8a:77:54:66:87:24:c3:58:ca:6b:34:
                    e6:ce:51:88:fb:1c:a3:71:54:b3:13:aa:fc:70:0e:
                    3e:01:6e:46:16:50:ef:82:23:27:56:05:93:65:71:
                    62:94:70:79:7c:d3:b3:62:06:7f:8e:f1:ae:3e:1e:
                    6b:eb:31:4f:b4:d9:93:a2:8f:1e:b4:b3:73:ea:2d:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F3:A9:6D:04:B6:75:51:1B:CF:5F:47:36:B6:19:A9:6F:D1:E8:DE
            X509v3 Authority Key Identifier:
                keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234322e302f32332d3233203d3e20323636303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:75:38:0c:24:15:d8:de:1a:fd:24:37:bc:9f:87:3c:b3:
         40:37:31:13:6a:48:f2:04:01:69:a0:69:e2:17:e7:3e:88:f7:
         e9:4d:ce:92:44:e5:4b:86:8e:17:bc:fd:9d:06:c7:c8:6a:32:
         11:b9:03:32:3f:7c:65:49:88:e8:d9:4e:d0:85:d6:dc:1e:64:
         6e:63:9e:e9:5d:1e:66:e6:fb:57:08:9f:da:22:2d:3c:6c:37:
         3c:3d:15:b2:80:38:8d:02:08:05:f4:ac:95:56:60:f8:a0:a4:
         4d:d0:fc:36:c4:12:b6:01:01:76:d2:4a:67:c0:92:bb:73:f9:
         a1:29:0f:f7:5b:26:24:20:a1:87:40:e8:8d:bd:4f:3e:77:31:
         85:ab:ad:f3:66:73:1d:29:34:4b:ec:db:6a:82:f0:a1:cc:f5:
         ba:59:4c:0b:6d:a0:24:9b:18:7a:da:7d:29:6d:3d:7c:9a:7d:
         6d:3a:5c:c7:bb:fc:4e:5d:0d:60:09:7b:42:a5:7e:18:6c:d0:
         f3:05:36:ac:8f:ef:ab:d4:d5:9f:18:d3:95:b9:71:df:61:08:
         93:37:ec:cd:a8:a7:4e:e1:c3:80:1e:5a:39:d2:37:7d:25:d4:
         f6:2b:2a:5b:13:64:f7:f6:b1:e7:32:f6:00:6f:96:3c:51:87:
         1f:45:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org