Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232322e302f32332d3233203d3e20323638303932.roa
File:                     34352e3136382e3232322e302f32332d3233203d3e20323638303932.roa (raw, json)
Hash identifier:          OuQkubdcLCFaVFj+M0ZmNLYfZ0d/Su1VtULivzgjs2k=
Subject key identifier:   7E:52:F1:6E:05:F3:6B:E8:DE:D7:BE:50:C4:F6:C0:53:25:99:13:80
Certificate issuer:       /CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Certificate serial:       0529619EA6BBA4F8485BF3D0AC83A5F0D57A6C15
Authority key identifier: D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232322e302f32332d3233203d3e20323638303932.roa
Signing time:             Thu 10 Aug 2023 12:05:31 +0000
ROA not before:           Thu 10 Aug 2023 12:00:31 +0000
ROA not after:            Thu 08 Aug 2024 12:05:31 +0000
asID:                     268092
IP address blocks:        45.168.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:29:61:9e:a6:bb:a4:f8:48:5b:f3:d0:ac:83:a5:f0:d5:7a:6c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
        Validity
            Not Before: Aug 10 12:00:31 2023 GMT
            Not After : Aug  8 12:05:31 2024 GMT
        Subject: CN=7E52F16E05F36BE8DED7BE50C4F6C05325991380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:f1:dd:6e:d2:b2:0f:64:5e:58:dd:a3:7c:
                    d8:a8:eb:e3:c4:0d:21:5a:69:df:1c:cb:b9:79:3d:
                    66:13:52:6c:a4:44:d4:6d:2f:1a:3b:af:74:17:7f:
                    d4:36:50:bd:de:1d:cf:52:eb:2e:69:f3:1b:d3:52:
                    6a:a7:c1:7b:3d:9e:a0:7b:3d:14:85:a2:7d:a5:46:
                    cb:92:3e:6a:de:88:6e:77:30:0c:df:c1:1e:ef:4c:
                    16:f2:1b:7c:73:dd:30:12:b5:4d:f0:42:c0:f9:85:
                    4e:15:f8:6b:9a:e2:c1:70:69:cb:4d:b1:68:f9:7f:
                    0a:3f:bf:d5:13:dc:d1:ee:18:83:d6:1d:8a:3c:a3:
                    8e:a7:55:16:d4:80:ce:0e:66:97:c1:b7:bf:a3:5f:
                    ac:24:03:cb:94:fe:dc:34:ea:b0:63:aa:8c:3f:b0:
                    d4:7a:ee:c8:bc:b7:0e:50:1e:65:97:9f:5a:36:a7:
                    64:76:8b:fc:46:e2:c7:ed:11:59:d4:d5:a6:e6:14:
                    86:2a:fc:db:0b:ba:ab:3f:25:ac:5c:83:3a:3e:54:
                    f3:83:32:c5:73:0d:3e:47:9f:1a:43:de:05:2d:37:
                    30:5b:90:66:06:d8:5a:d4:44:31:ce:43:4c:a9:97:
                    80:96:0d:83:43:08:f5:4e:13:8b:54:a8:1d:d5:b1:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:52:F1:6E:05:F3:6B:E8:DE:D7:BE:50:C4:F6:C0:53:25:99:13:80
            X509v3 Authority Key Identifier:
                keyid:D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232322e302f32332d3233203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:59:12:a4:77:47:be:ba:b5:e5:24:ad:f1:c1:0a:4b:55:5e:
         39:35:d0:4e:16:1a:ea:54:a1:05:04:16:f4:44:28:85:0b:f9:
         2e:d7:cd:95:ff:8e:29:86:0e:56:00:26:c0:be:fc:90:ac:1b:
         30:40:f3:27:eb:f7:ad:fa:b2:9b:db:64:2e:4c:d5:4f:df:68:
         22:5c:3a:8c:17:70:24:06:1f:97:67:77:67:9a:86:eb:19:8d:
         f1:36:e1:aa:5c:48:d2:91:a4:c0:d4:0b:a8:45:3a:53:fb:dc:
         94:7a:f6:28:56:19:8b:24:cc:87:5d:e0:76:2a:40:75:17:f1:
         55:80:10:55:ba:8b:17:33:bc:b1:ad:8c:c9:46:7b:01:a7:1d:
         52:9e:3b:3e:d7:9a:53:20:46:fe:91:36:94:c6:05:83:16:57:
         46:19:30:0d:19:c9:58:99:47:23:ea:a8:e6:b1:e9:39:b5:d3:
         fe:48:1b:fe:8c:e4:fc:df:06:c5:25:73:7f:48:89:b7:c6:a9:
         eb:f7:69:29:5d:4b:8d:33:fa:98:29:f4:23:11:47:2b:57:b8:
         ee:19:4a:dd:fc:1c:59:ad:02:7c:0e:70:26:6c:66:5f:7e:76:
         a9:c0:f9:f8:cd:eb:fe:50:a5:7a:b7:02:fb:28:ed:52:bf:03:
         0b:bf:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org