Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3234203d3e20323638303237.roa
File:                     34352e3136382e33362e302f32322d3234203d3e20323638303237.roa (raw, json)
Hash identifier:          maY+0HsUppxWFP+dxXwuW+a5pT7m6216JK20DdA00Ng=
Subject key identifier:   A5:6B:EA:73:5F:B8:A4:46:78:64:64:4C:89:36:84:12:90:40:FE:4B
Certificate issuer:       /CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
Certificate serial:       0337B6083E14B01B5A6440CD38376AE2297AE17B
Authority key identifier: AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3234203d3e20323638303237.roa
Signing time:             Tue 18 Apr 2023 12:51:27 +0000
ROA not before:           Tue 18 Apr 2023 12:46:27 +0000
ROA not after:            Tue 16 Apr 2024 12:51:27 +0000
asID:                     268027
IP address blocks:        45.168.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:37:b6:08:3e:14:b0:1b:5a:64:40:cd:38:37:6a:e2:29:7a:e1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
        Validity
            Not Before: Apr 18 12:46:27 2023 GMT
            Not After : Apr 16 12:51:27 2024 GMT
        Subject: CN=A56BEA735FB8A4467864644C893684129040FE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:de:d2:fd:1d:41:f8:0c:ef:52:c3:db:ef:
                    6f:70:02:8c:7f:5b:0d:ee:c3:bd:9e:e8:85:91:11:
                    bf:1f:6a:f9:92:fe:cb:c6:03:83:ad:73:89:44:79:
                    75:23:ea:9b:fe:7b:e8:b3:a9:1a:b5:f6:e3:26:1f:
                    95:91:2d:6b:19:99:68:cb:9f:a2:f2:b4:e9:21:2f:
                    36:89:4e:a5:3b:0a:65:25:d3:ad:0c:62:54:2e:b4:
                    1d:93:5f:ca:fc:33:54:f5:84:0b:0c:09:ca:95:bf:
                    f1:24:28:23:4b:fa:25:12:09:b2:ef:9b:3e:74:d8:
                    d0:81:4e:92:3b:49:ab:44:eb:54:20:9b:21:a8:d2:
                    4c:15:43:ac:fd:65:ae:8d:6f:c5:1c:e7:fe:ee:a0:
                    b3:57:89:b1:08:57:5d:e4:86:1a:11:15:04:54:38:
                    43:f7:ea:1e:c0:74:a3:cf:88:80:43:7d:7d:b6:6f:
                    30:a1:6b:38:ee:ac:9d:63:84:26:a9:b1:61:69:8a:
                    2e:6f:21:a9:f6:b6:2c:ba:c3:47:c8:65:3c:f7:59:
                    7e:fe:2d:11:3e:76:dd:3c:76:b2:99:f5:3c:29:76:
                    14:f4:6f:dc:ea:da:25:6d:aa:df:a5:81:97:5a:de:
                    b2:93:12:6f:04:37:3c:e5:38:08:c4:21:a0:a6:87:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6B:EA:73:5F:B8:A4:46:78:64:64:4C:89:36:84:12:90:40:FE:4B
            X509v3 Authority Key Identifier:
                keyid:AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3234203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:c0:df:b2:a3:7b:a7:4f:c6:3c:bd:ae:2f:e4:1f:b2:16:48:
         0a:71:36:b2:af:fd:e8:98:64:36:d4:33:7b:9e:4e:16:d8:82:
         c1:88:96:3a:53:7b:80:a4:7f:88:c0:90:9d:f9:ca:c1:e2:11:
         e6:b0:ab:30:cf:77:84:ff:09:f3:58:6e:d8:bb:f7:79:b2:7f:
         a5:bd:df:eb:fb:7e:1b:d0:ef:9b:51:1a:07:72:ca:07:9e:ce:
         f8:73:18:58:2e:f2:8e:91:82:b6:ac:a1:11:26:b7:3e:de:bc:
         48:43:96:2a:5f:d9:97:5b:26:7b:23:00:cb:38:f6:56:6f:c6:
         a9:0e:03:47:ba:76:02:e9:8c:20:3a:60:a7:6a:59:bd:73:64:
         b7:4c:83:23:57:37:9b:78:e7:f5:a0:94:1f:cf:b1:eb:ac:03:
         ae:ee:3c:51:0d:17:c8:d0:06:bc:37:71:37:49:10:8c:42:9b:
         2a:ff:ee:16:05:d5:6f:a7:b9:95:a9:54:4b:a4:a1:8c:44:8f:
         ba:43:9e:c2:5f:d9:1b:8a:1c:f8:7e:6a:35:05:28:eb:66:66:
         a0:03:d6:89:41:75:65:f7:fe:4a:18:66:94:8c:2d:7b:ee:7f:
         a5:b8:9a:aa:ac:35:7e:65:43:0d:2b:25:52:43:40:2c:00:2b:
         b6:b6:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org