Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
File:                     34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa (raw, json)
Hash identifier:          vomdUuBoJSNjHaOx/IYhfeo/RTH4sMPz7ReARaGNP4k=
Subject key identifier:   7D:EF:43:C3:2F:72:A5:27:00:EF:0E:97:F4:DB:2D:63:BC:6A:51:CD
Certificate issuer:       /CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Certificate serial:       042E601E576764B00442122545CF85AC5EEF2C9F
Authority key identifier: D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
Signing time:             Wed 01 Nov 2023 14:14:36 +0000
ROA not before:           Wed 01 Nov 2023 14:09:36 +0000
ROA not after:            Wed 30 Oct 2024 14:14:36 +0000
asID:                     268092
IP address blocks:        45.168.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2e:60:1e:57:67:64:b0:04:42:12:25:45:cf:85:ac:5e:ef:2c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
        Validity
            Not Before: Nov  1 14:09:36 2023 GMT
            Not After : Oct 30 14:14:36 2024 GMT
        Subject: CN=7DEF43C32F72A52700EF0E97F4DB2D63BC6A51CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:c4:3e:13:4c:ee:8e:f1:ab:ff:49:59:29:
                    5b:7d:90:b3:47:bc:b8:a2:f2:29:76:69:bd:eb:cb:
                    28:5a:af:43:fd:e1:7e:8c:b8:96:ed:41:06:dc:63:
                    2f:79:88:9c:c2:03:d7:06:fb:e0:ff:cb:0b:36:5d:
                    ea:d9:1a:41:4d:c2:b6:1d:b9:1a:95:78:aa:5b:c3:
                    ab:46:bd:f2:8c:c8:b5:68:37:69:32:2f:30:34:40:
                    02:d7:bd:84:57:50:cd:4b:1a:12:63:ec:c6:42:3d:
                    b1:8f:80:b7:bb:9a:ff:08:5f:f5:62:e0:c8:98:28:
                    f1:77:ea:97:04:4e:ae:8a:fa:e4:e4:fd:ba:22:70:
                    57:92:02:3b:af:e7:33:2b:b2:24:20:d3:e6:a8:d1:
                    3c:f1:3d:d7:64:4b:c0:ec:e4:a4:55:f7:53:3c:72:
                    0f:ff:e3:a6:ad:b6:10:67:04:fb:b0:ff:c0:68:5d:
                    79:19:0d:aa:dd:ea:d7:96:b5:ca:bd:81:b2:54:84:
                    ee:2a:42:b6:13:32:0a:de:13:e9:db:cd:57:e8:2f:
                    bf:e8:51:31:af:55:8f:3a:2d:e5:eb:43:8c:81:6a:
                    68:4c:cc:83:ff:a3:b2:ca:6f:56:01:20:78:24:89:
                    c9:5c:14:a5:d2:bf:b6:b7:ad:97:f1:a5:79:ba:61:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EF:43:C3:2F:72:A5:27:00:EF:0E:97:F4:DB:2D:63:BC:6A:51:CD
            X509v3 Authority Key Identifier:
                keyid:D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:c4:5d:c8:d2:dc:40:8f:13:bc:e7:50:66:e6:61:a8:6c:6e:
         f3:5a:19:d6:97:0d:d9:60:96:70:7e:a5:a0:a0:94:2c:60:fa:
         c8:8d:a3:59:70:89:35:90:76:87:71:fe:be:1e:bc:b2:f7:02:
         e0:cd:2d:63:bc:40:94:49:40:99:89:49:b7:df:48:d0:93:4f:
         14:ed:5e:2e:8b:29:a1:88:59:ce:36:92:c7:39:f6:12:05:5b:
         75:a7:be:78:29:f3:97:08:4b:79:6c:7e:86:28:ea:88:4b:c1:
         9f:99:cc:4a:5e:29:2f:55:aa:37:3f:19:69:24:67:ab:98:17:
         7e:03:d8:e4:81:67:d8:92:b5:a0:92:54:ea:05:3b:f7:7d:0b:
         39:64:aa:4f:09:be:0c:02:7d:b6:7c:4d:04:dc:7d:8d:00:d7:
         47:02:50:2c:a4:6c:e6:52:79:3c:e7:f1:e2:bd:c8:af:ae:46:
         a1:1e:08:a7:e5:67:90:47:d1:74:34:57:27:f7:e7:4e:76:35:
         b5:6c:65:55:ce:4e:6c:5b:a9:87:de:d0:32:3a:b4:17:43:4b:
         f1:f9:e8:d7:ca:6b:75:e8:17:75:37:3c:4a:34:c5:6b:84:40:
         6d:64:ae:74:f2:c9:fb:7d:63:b6:23:cc:e7:eb:e5:f5:ed:ab:
         77:88:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org