Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32322d3232203d3e20323638343434.roa
File:                     34352e3136312e36342e302f32322d3232203d3e20323638343434.roa (raw, json)
Hash identifier:          5LJcP6ZUcJO3liatF396vv3VSP+gIWG0akGivAqwpss=
Subject key identifier:   08:07:BE:F3:02:2F:23:AA:72:0D:96:58:BB:0A:8A:84:A0:40:71:B6
Certificate issuer:       /CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Certificate serial:       779EF530D963F9505E9B320A1E2F8DBE1274E80B
Authority key identifier: AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32322d3232203d3e20323638343434.roa
Signing time:             Mon 08 Jan 2024 16:45:42 +0000
ROA not before:           Mon 08 Jan 2024 16:40:42 +0000
ROA not after:            Mon 06 Jan 2025 16:45:42 +0000
asID:                     268444
IP address blocks:        45.161.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:f5:30:d9:63:f9:50:5e:9b:32:0a:1e:2f:8d:be:12:74:e8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
        Validity
            Not Before: Jan  8 16:40:42 2024 GMT
            Not After : Jan  6 16:45:42 2025 GMT
        Subject: CN=0807BEF3022F23AA720D9658BB0A8A84A04071B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:7d:d6:a6:2b:a3:4e:30:a8:17:e1:e8:e2:
                    94:96:43:16:21:33:f3:40:13:df:08:63:df:47:a9:
                    cc:a2:80:8c:7f:d1:0f:c3:87:08:57:6b:d4:36:45:
                    fb:6c:5a:ad:24:77:fd:a4:89:5f:b7:89:0f:9e:57:
                    42:bc:11:cd:ae:59:66:2e:8a:8b:17:f0:0d:30:e5:
                    42:79:19:5c:0d:f4:21:cb:d0:57:95:a8:3d:a7:cf:
                    a6:57:4d:b3:de:0a:34:d7:1a:24:a7:8f:5e:d4:5c:
                    cb:c2:c5:68:0c:b2:5a:7a:bf:36:35:bb:ef:cb:56:
                    9e:35:3b:cc:50:1b:02:25:ef:3e:f2:c3:c4:5e:07:
                    d4:fe:4c:8b:00:f9:59:05:d7:24:5b:c6:a5:f0:2e:
                    e1:22:41:4d:a5:ac:d1:d8:e6:c0:ae:e8:ed:7e:eb:
                    c6:33:dc:c7:1e:cd:37:f8:e9:5b:96:a3:73:4b:dc:
                    6c:07:04:a3:c1:81:ec:e1:cb:76:25:78:aa:5f:f5:
                    dd:d1:4e:d3:cd:bc:f1:53:ed:92:dc:e3:3e:ae:2e:
                    d1:35:a3:20:ca:1f:07:ed:50:76:d1:25:14:d3:1a:
                    62:24:3a:81:0d:9b:eb:11:9f:5f:b2:42:f7:92:be:
                    64:5d:3d:c2:78:eb:1f:b9:36:cf:ae:f5:72:92:75:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:07:BE:F3:02:2F:23:AA:72:0D:96:58:BB:0A:8A:84:A0:40:71:B6
            X509v3 Authority Key Identifier:
                keyid:AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32322d3232203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:05:9e:63:18:89:4d:c4:42:68:65:b5:81:44:c7:12:36:fc:
         06:88:58:77:51:89:ef:5a:dd:b5:a5:58:d2:20:58:80:3a:25:
         32:f0:90:e2:b6:8f:f1:a0:64:5d:a6:e9:85:6a:f0:1a:d3:e1:
         b9:cb:e8:67:67:df:6c:01:5e:cb:05:f8:0b:66:3d:8e:60:a7:
         ff:50:65:b1:31:3d:34:be:31:c8:d2:fd:04:2f:5e:ba:73:3a:
         90:d3:91:30:7d:93:5c:6b:87:b2:86:a5:f8:ca:fa:6c:23:02:
         53:3b:ee:0d:46:4f:4a:4d:a4:01:dc:fe:d1:d6:60:89:5f:3c:
         16:a1:b4:bb:f1:21:a1:0f:14:d8:73:c4:ac:07:db:4d:79:53:
         4a:c3:14:cd:d6:5a:ba:b5:e7:10:ae:28:83:76:e8:78:15:83:
         26:36:d5:6f:8f:7b:bc:43:d4:c4:fe:d2:fb:bd:25:4c:30:61:
         b4:f8:42:bf:28:a6:0f:76:ec:0c:48:a0:ef:5d:66:8b:7f:6d:
         54:d4:fb:59:36:8d:4f:6c:f9:f1:88:99:c2:01:5e:2d:a5:2c:
         1e:fd:a3:26:84:1f:0e:df:ed:65:54:0f:0b:4b:fd:ca:27:9e:
         da:3b:b2:ea:c2:d2:91:65:0d:87:4c:7c:31:f7:a6:7a:fd:c2:
         18:6d:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org