Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36302e302f32322d3332203d3e20323639343537.roa
File:                     34352e3138372e36302e302f32322d3332203d3e20323639343537.roa (raw, json)
Hash identifier:          Qr7CR39oqeTL7+ZBfl3JRe34qFEmTSJFpT4/05EBVlQ=
Subject key identifier:   C0:67:94:68:CA:6E:63:C0:D2:81:48:13:0B:83:E1:31:E3:8B:DE:BD
Certificate issuer:       /CN=3A16325DA076D0729C22B3F9C55ED3560488A0C6
Certificate serial:       6B03C2E0C230196CAD4A04CEC8CFD3DD8B7471BF
Authority key identifier: 3A:16:32:5D:A0:76:D0:72:9C:22:B3:F9:C5:5E:D3:56:04:88:A0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36302e302f32322d3332203d3e20323639343537.roa
Signing time:             Tue 20 Jun 2023 21:24:32 +0000
ROA not before:           Tue 20 Jun 2023 21:19:32 +0000
ROA not after:            Tue 18 Jun 2024 21:24:32 +0000
asID:                     269457
IP address blocks:        45.187.60.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:03:c2:e0:c2:30:19:6c:ad:4a:04:ce:c8:cf:d3:dd:8b:74:71:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A16325DA076D0729C22B3F9C55ED3560488A0C6
        Validity
            Not Before: Jun 20 21:19:32 2023 GMT
            Not After : Jun 18 21:24:32 2024 GMT
        Subject: CN=C0679468CA6E63C0D28148130B83E131E38BDEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:db:f5:19:bc:ce:19:2c:e6:63:e4:e8:2b:
                    cf:88:e6:ba:61:02:2a:db:71:2e:5e:6b:e4:b8:69:
                    4f:f2:ba:c7:a4:bb:17:ac:07:29:d8:d5:94:7c:65:
                    ed:d9:7d:70:9e:1f:7b:f8:49:e2:8b:21:d8:1c:58:
                    7d:ea:9b:cb:f5:6f:b6:cc:a5:e7:58:97:13:2b:a2:
                    3a:33:30:93:08:b6:7c:bf:7d:0d:12:7e:47:64:14:
                    6f:53:ae:26:da:91:91:c5:f4:86:d5:bf:82:33:06:
                    b5:ee:22:30:9c:ef:08:ed:a1:ba:6a:d9:3b:13:50:
                    3a:19:45:78:4b:21:91:73:58:e8:87:b0:02:97:dc:
                    80:df:0a:00:fc:27:9f:7d:26:ae:01:63:31:eb:a5:
                    af:0d:2c:b3:ac:f4:60:99:de:ce:0d:59:97:a1:34:
                    fe:8a:f1:c2:9c:62:4a:f0:7a:ec:b7:04:8c:d9:3f:
                    2d:9a:3c:f9:a0:3d:34:eb:98:0c:c8:0c:85:92:61:
                    1f:91:79:c3:1a:21:64:51:c4:24:de:7a:84:ad:41:
                    fa:9c:a3:4a:63:60:ac:9e:bd:08:db:b3:91:72:c4:
                    38:34:27:45:d4:ba:dd:67:fe:e2:60:af:92:18:ba:
                    df:74:95:26:d1:07:87:d3:05:e8:d1:ae:40:6d:8d:
                    7b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:67:94:68:CA:6E:63:C0:D2:81:48:13:0B:83:E1:31:E3:8B:DE:BD
            X509v3 Authority Key Identifier:
                keyid:3A:16:32:5D:A0:76:D0:72:9C:22:B3:F9:C5:5E:D3:56:04:88:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36302e302f32322d3332203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:97:cd:69:bd:e9:65:41:28:ad:20:1d:3c:35:38:98:66:f8:
         71:2b:05:d7:29:15:4f:34:85:80:42:82:fc:b6:86:98:d2:3a:
         08:59:69:a0:22:89:ba:40:b6:59:1f:ef:96:5f:fa:fc:37:2f:
         a0:35:9d:7a:2b:55:cf:e0:98:e4:36:73:a9:5e:8b:db:06:e9:
         9f:d4:30:9f:3a:9d:8d:15:9c:6d:31:52:da:08:08:89:5e:fe:
         f8:91:48:99:c8:be:d1:1f:5a:6e:a4:4a:3c:b8:3b:aa:d4:17:
         33:16:85:40:73:d3:48:42:d9:77:fa:66:c0:e1:ab:9b:3a:f7:
         68:b7:9e:fa:14:48:74:d1:83:b5:f3:db:de:81:d5:23:93:6a:
         ec:55:fb:1a:24:81:1e:01:c4:f9:ac:89:83:f9:1d:24:7e:22:
         05:e8:c8:8d:c7:c5:99:3b:7a:c7:f6:fd:59:c2:b9:54:b1:fc:
         5d:19:31:b6:a6:cb:ab:dd:09:9f:8a:cd:b4:ff:b9:97:81:b3:
         85:d5:5b:41:f4:ae:70:01:07:38:d4:6d:5b:5e:d5:69:11:47:
         82:b3:30:db:01:cb:9c:be:e1:35:73:53:66:b1:bc:54:2c:c3:
         6c:aa:79:25:af:5c:13:0d:77:dd:c8:2c:3a:6c:c9:3d:d7:db:
         a3:0b:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org