Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32332d3233203d3e20323638313230.roa
File:                     34352e3136392e35362e302f32332d3233203d3e20323638313230.roa (raw, json)
Hash identifier:          TA8xpo6RcWPtcXmf2n8MoFKLI962wuK4X8xaFZ8Uzi0=
Subject key identifier:   55:97:3A:67:29:37:8C:C0:2B:96:2E:E1:A9:32:56:8A:55:64:C5:7D
Certificate issuer:       /CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Certificate serial:       3470C30DA76F5065B2EBCD85E0793BEDA23DC4A0
Authority key identifier: 95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32332d3233203d3e20323638313230.roa
Signing time:             Tue 05 Mar 2024 15:54:33 +0000
ROA not before:           Tue 05 Mar 2024 15:49:33 +0000
ROA not after:            Tue 04 Mar 2025 15:54:33 +0000
asID:                     268120
IP address blocks:        45.169.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:70:c3:0d:a7:6f:50:65:b2:eb:cd:85:e0:79:3b:ed:a2:3d:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
        Validity
            Not Before: Mar  5 15:49:33 2024 GMT
            Not After : Mar  4 15:54:33 2025 GMT
        Subject: CN=55973A6729378CC02B962EE1A932568A5564C57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:5d:f1:fb:d6:ea:e2:21:db:36:3a:a8:72:
                    cf:87:94:1a:34:1b:11:e5:cb:e4:2e:0f:44:9e:60:
                    32:1d:0e:4c:42:dd:12:54:31:c8:a3:c3:21:73:31:
                    8c:d9:09:ce:cf:57:c2:93:d9:b4:bd:c3:03:bd:64:
                    c5:f6:4e:ad:0f:45:6a:11:07:bc:13:63:ea:d0:0c:
                    ad:a3:62:ab:3e:9b:69:d4:55:c2:47:58:c8:42:43:
                    4b:f1:21:60:83:c7:60:eb:e6:c3:cc:aa:55:e9:5d:
                    c8:ed:35:be:60:e0:14:43:33:43:6b:2a:25:2c:88:
                    22:ea:15:4a:cc:f7:ae:f9:18:16:b8:5f:7b:84:ed:
                    b9:46:64:5e:ce:1e:b1:8b:6a:e5:b8:5e:e2:0a:2a:
                    e9:21:fe:7f:89:f1:2e:d8:8f:9e:3c:54:58:ab:a7:
                    da:60:47:79:8d:72:46:54:b4:60:84:65:7b:fb:e5:
                    a9:22:d4:be:51:b9:0d:97:05:53:44:56:c8:af:fb:
                    1f:86:d5:68:a4:d3:a4:fd:5a:82:3e:85:2f:8e:7d:
                    75:2f:8d:d3:0d:b7:b0:61:bf:bf:c5:6c:b1:6e:23:
                    7c:9f:73:90:1a:1b:54:24:47:4b:f0:d4:3d:ac:7f:
                    ca:a9:69:a4:6f:19:12:c6:9f:23:95:2b:77:cd:c4:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:3A:67:29:37:8C:C0:2B:96:2E:E1:A9:32:56:8A:55:64:C5:7D
            X509v3 Authority Key Identifier:
                keyid:95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32332d3233203d3e20323638313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:42:bf:8a:07:75:fb:39:d2:dd:36:21:60:bf:68:5e:6c:4e:
         4a:c2:c2:e2:b3:d1:45:51:5d:7d:33:e8:e4:5e:9e:c7:f6:b5:
         05:94:da:64:a2:bb:20:24:64:3e:9b:7b:f2:a8:8d:ff:8e:aa:
         26:24:bd:95:3d:2c:a5:7d:dd:9e:c3:1f:65:43:96:2f:a3:22:
         5d:02:7c:d4:48:8b:f2:dd:d2:7b:2a:70:36:8e:6d:98:24:4a:
         35:c5:5e:70:8e:c0:75:10:f5:4e:8a:44:e3:7d:fd:f2:a9:02:
         cf:e8:43:af:8e:4b:a9:a4:97:fa:67:b7:04:be:e4:e2:5d:41:
         a5:cf:fc:e5:db:aa:63:5b:c0:ed:5d:98:a9:0a:ab:bf:eb:70:
         d6:8c:28:35:a4:36:4f:f1:74:71:76:4b:75:de:a4:23:ac:53:
         3d:af:80:a6:6a:c7:7d:e6:33:50:63:3a:ed:31:91:57:cf:fa:
         ab:fa:7b:21:9c:9d:6f:fe:2f:8d:41:47:20:29:e6:8a:64:b8:
         08:e7:08:bf:2a:fe:06:77:a4:68:03:d2:e7:f5:13:27:70:2e:
         6d:5b:33:ee:a8:14:4f:5b:1a:c0:aa:76:ca:1a:62:58:73:5d:
         1e:8a:17:2b:66:4e:aa:eb:7c:bf:a5:38:8f:09:6a:c3:3a:e5:
         52:03:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org