Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3232203d3e20323638303932.roa
File:                     34352e3136382e3232302e302f32322d3232203d3e20323638303932.roa (raw, json)
Hash identifier:          59kcResa3PsdwCDGuu+DvEtKmhxfrPVMp/PNeTKXjiE=
Subject key identifier:   86:8B:E2:A9:82:F4:EA:0A:E5:1D:C9:23:65:E3:D8:68:E2:4F:9E:23
Certificate issuer:       /CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Certificate serial:       0817E265EF0858B9A3996FEFD31D300333BFEF4A
Authority key identifier: D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3232203d3e20323638303932.roa
Signing time:             Thu 10 Aug 2023 12:05:22 +0000
ROA not before:           Thu 10 Aug 2023 12:00:22 +0000
ROA not after:            Thu 08 Aug 2024 12:05:22 +0000
asID:                     268092
IP address blocks:        45.168.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:17:e2:65:ef:08:58:b9:a3:99:6f:ef:d3:1d:30:03:33:bf:ef:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
        Validity
            Not Before: Aug 10 12:00:22 2023 GMT
            Not After : Aug  8 12:05:22 2024 GMT
        Subject: CN=868BE2A982F4EA0AE51DC92365E3D868E24F9E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:b6:c5:73:89:a6:7f:4c:95:44:89:a6:21:
                    d0:16:51:69:a5:a6:b7:12:16:28:dc:be:5a:98:20:
                    57:fa:84:f3:0e:72:04:8e:ca:6c:f0:d2:40:59:af:
                    75:2f:13:2f:24:0b:4c:3e:70:25:7e:d4:da:da:7a:
                    16:02:46:b9:11:bd:8e:b5:7b:30:4d:4e:45:5c:47:
                    a4:45:39:3a:0b:87:8f:b1:b8:d6:c3:5d:6a:a7:05:
                    af:2d:f1:54:4c:b0:55:6d:80:aa:2d:6c:29:2b:f4:
                    4b:dd:56:a3:fd:7e:07:43:61:1d:95:a1:ec:6e:8e:
                    1e:2f:fe:00:86:de:9a:d8:8e:19:19:f7:25:f1:6a:
                    ac:cb:ae:09:92:d8:6b:bb:65:1b:85:3d:ae:4c:af:
                    9c:e3:84:24:f1:0c:bf:67:e2:a5:42:16:f6:e7:74:
                    c9:04:87:46:ee:f5:92:40:3d:04:a4:fa:4f:96:82:
                    23:7b:7c:93:77:90:2c:e0:7a:c8:f7:86:ae:20:aa:
                    77:61:27:c6:64:72:ec:a0:b7:c5:cd:fb:d4:18:29:
                    22:18:43:8c:17:94:7e:98:71:74:63:cf:2e:fb:b7:
                    5e:82:e1:fc:5a:23:e4:1d:0c:d7:91:47:5b:11:da:
                    b3:ba:51:a6:1e:c4:ff:a8:a9:1b:02:b0:b3:1d:53:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8B:E2:A9:82:F4:EA:0A:E5:1D:C9:23:65:E3:D8:68:E2:4F:9E:23
            X509v3 Authority Key Identifier:
                keyid:D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3232203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:87:9b:38:6a:18:03:66:3f:f5:4f:5a:87:1b:02:76:63:
         12:42:06:7b:f2:1e:0b:ac:ea:d0:d5:73:8d:3c:25:54:67:4c:
         92:aa:b7:67:54:8e:66:28:cc:c8:63:4f:e6:96:a2:ff:d6:71:
         1e:1d:c6:82:62:95:9d:12:e4:7b:07:81:a3:98:b7:d2:28:38:
         16:53:29:20:3d:95:d7:91:5a:8b:68:8d:1d:0f:44:fc:7d:e0:
         09:6a:62:84:25:dd:40:b9:52:c8:4a:60:bd:68:55:5a:03:b4:
         3b:47:3b:28:84:33:16:1b:f1:dc:ac:f1:96:cd:5a:be:1a:e6:
         3f:06:f5:eb:d2:e3:c1:e6:60:dc:9f:ff:b8:73:a1:e8:2d:08:
         7e:e7:68:d5:5d:d2:d9:f5:6f:20:d5:b8:1f:fa:53:db:98:9c:
         da:90:80:07:f5:17:a0:d2:4d:ba:eb:5a:95:cf:00:0f:de:cd:
         01:2d:74:48:77:66:54:16:fb:70:c6:b8:e2:e9:9e:14:98:88:
         42:64:6d:5e:93:94:93:da:08:d1:dd:b3:b0:95:94:01:ad:38:
         f2:0e:ed:c0:97:c7:fd:03:b4:56:1c:ab:16:db:a6:64:24:bd:
         9f:41:46:a2:fd:d3:43:c5:7b:39:d5:0e:45:25:e1:4b:e8:ad:
         c3:86:b3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org