Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/34352e362e3232302e302f32322d3234203d3e20323636323438.roa
File:                     34352e362e3232302e302f32322d3234203d3e20323636323438.roa (raw, json)
Hash identifier:          W/5Ejx9Zna5JZ9gP6y88zlGVYkUEhixEcK1r30Y1/LQ=
Subject key identifier:   ED:2E:D0:0B:E3:C3:82:5A:F3:70:88:33:09:49:8F:7F:F4:80:35:3A
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       43B9AD2269C4C88A8C814131184994134EE0FE3A
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/34352e362e3232302e302f32322d3234203d3e20323636323438.roa
Signing time:             Wed 27 Sep 2023 17:00:00 +0000
ROA not before:           Wed 27 Sep 2023 16:55:00 +0000
ROA not after:            Wed 25 Sep 2024 17:00:00 +0000
asID:                     266248
IP address blocks:        45.6.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b9:ad:22:69:c4:c8:8a:8c:81:41:31:18:49:94:13:4e:e0:fe:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 27 16:55:00 2023 GMT
            Not After : Sep 25 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:57:06:2c:ae:73:d0:4b:6e:cb:55:06:80:
                    0a:be:99:5a:30:32:d7:52:e7:d1:4b:81:c2:26:22:
                    88:00:bc:c8:5f:9e:85:15:3b:37:1b:ce:79:a8:a2:
                    ff:ad:5b:50:f5:4d:73:8b:f1:a9:6b:a0:77:2b:ec:
                    2e:ab:65:51:39:ab:4f:b6:ab:77:58:0f:10:7a:0c:
                    14:7c:b8:cb:2c:0c:45:ca:c7:d7:84:01:dd:01:db:
                    e9:ff:7f:83:7e:62:cd:9c:ff:65:a1:3c:0c:80:79:
                    e3:96:45:46:f3:a9:73:d0:d1:d2:5a:b8:a2:9e:7e:
                    7f:ee:fa:37:04:72:27:08:f2:7f:cd:fa:4d:01:49:
                    a3:be:59:91:2e:65:84:7d:92:bb:27:bc:c6:ff:dc:
                    6e:fe:e5:49:8e:49:27:e0:63:2b:6c:0d:8c:70:a8:
                    5f:1e:cd:c6:1d:39:fb:c0:2e:22:48:cc:dd:78:de:
                    a0:e8:cd:cb:b1:09:78:ab:73:70:51:11:da:96:81:
                    e2:2e:1b:a5:50:b7:58:05:3f:64:37:de:62:12:a0:
                    d7:fe:9d:3b:f7:d8:8e:ac:86:fb:e0:05:e4:d2:90:
                    16:62:95:41:8f:26:84:5f:45:90:0a:83:2f:8c:35:
                    b5:f9:4b:c1:c2:cc:09:f0:8d:7c:7f:49:90:b9:83:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2E:D0:0B:E3:C3:82:5A:F3:70:88:33:09:49:8F:7F:F4:80:35:3A
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/34352e362e3232302e302f32322d3234203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:e4:47:18:0d:5f:af:15:fc:58:7a:ca:97:45:6b:eb:82:
         12:24:1f:da:e6:c8:61:23:8d:e0:e7:db:65:b3:b2:56:3a:6e:
         21:14:d9:b7:d5:10:e3:2a:ea:5e:37:a2:00:53:7b:fc:8b:31:
         70:49:7f:5a:ab:d2:91:c0:e3:34:d5:76:81:a1:dd:eb:04:58:
         40:90:fa:09:a1:d6:a4:08:d5:65:73:a6:9c:50:26:d0:7a:fa:
         fa:8f:29:18:4e:83:a9:c2:59:3b:d2:c4:70:bf:ad:d8:17:80:
         64:32:2e:b6:90:2e:18:43:f5:74:14:5b:4a:c2:1c:08:45:2e:
         c9:2c:53:bf:6a:9c:44:61:5c:6b:dd:e6:b7:0e:5d:f9:aa:a1:
         ed:37:7e:2a:0e:da:0a:76:55:31:8b:19:b6:43:51:2e:3c:8c:
         cb:6c:b7:0a:e7:48:24:4a:d8:ec:42:cd:5b:bd:fc:23:0d:08:
         8d:06:9d:19:2d:3e:43:bf:ef:64:a9:ec:bf:cc:20:69:50:7d:
         62:77:13:b2:e6:e7:27:22:54:11:e4:d7:63:48:e4:d1:9c:28:
         00:69:d4:b5:99:70:d0:e9:f1:1c:ca:26:3f:21:47:a5:6a:30:
         d2:7b:b5:90:68:da:97:e0:52:07:d4:48:84:e3:ca:46:a7:6d:
         97:65:3d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org