Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa
File:                     34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa (raw, json)
Hash identifier:          uwRwL+uDXWKrmvpFVlLZaniS99GcSeat7SsQN8+UkbI=
Subject key identifier:   D7:46:8E:B5:F1:55:A0:55:30:07:C4:BE:AE:07:94:90:C5:48:4E:0E
Certificate issuer:       /CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
Certificate serial:       5302448EDC824606F47E8EB6BFF9C3C17094F715
Authority key identifier: 66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa
Signing time:             Thu 28 Dec 2023 17:54:17 +0000
ROA not before:           Thu 28 Dec 2023 17:49:17 +0000
ROA not after:            Thu 26 Dec 2024 17:54:17 +0000
asID:                     268710
IP address blocks:        45.170.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:02:44:8e:dc:82:46:06:f4:7e:8e:b6:bf:f9:c3:c1:70:94:f7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
        Validity
            Not Before: Dec 28 17:49:17 2023 GMT
            Not After : Dec 26 17:54:17 2024 GMT
        Subject: CN=D7468EB5F155A0553007C4BEAE079490C5484E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:ce:97:1c:f3:ac:c9:33:a6:ba:c3:2c:c7:
                    7d:92:17:fd:61:aa:ec:3e:22:d4:f0:69:e0:42:9d:
                    5c:98:e3:d2:58:f6:d6:11:05:63:46:6c:c0:8f:b2:
                    de:7b:10:25:e6:c6:e4:90:90:09:d7:26:69:6b:1e:
                    8a:02:aa:5b:b3:79:32:38:27:8a:c0:01:d5:3f:a0:
                    d1:14:96:7e:4f:a5:50:21:22:81:9e:47:51:cd:7b:
                    3a:7b:03:75:15:46:51:cb:52:7b:27:74:29:03:f8:
                    3a:37:47:d3:19:21:94:48:57:94:14:77:16:fc:92:
                    ba:c1:18:9c:95:e1:d5:2b:7a:07:73:47:1a:aa:2a:
                    cf:33:dc:6b:7e:bb:df:9a:17:39:b8:5b:ce:60:94:
                    65:5d:59:52:b5:96:f8:78:90:07:20:0d:9c:7d:03:
                    a1:6b:fc:c0:59:c5:22:50:55:70:4f:39:ff:8a:2e:
                    84:f8:c9:be:8a:b1:5b:f5:97:c0:a5:c6:9e:34:93:
                    3b:3f:2c:a3:87:5c:8a:e8:8a:14:63:64:c2:60:1b:
                    01:51:a4:b7:23:26:11:88:0f:97:a2:20:17:9c:1f:
                    a3:95:5f:15:ff:7b:85:cb:84:af:1a:5e:80:d5:e2:
                    a6:31:ea:82:2d:e0:0e:15:b2:05:e3:2a:86:44:4f:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:46:8E:B5:F1:55:A0:55:30:07:C4:BE:AE:07:94:90:C5:48:4E:0E
            X509v3 Authority Key Identifier:
                keyid:66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:b3:af:74:66:cc:eb:ba:88:70:b7:2a:40:61:b1:00:22:
         51:47:63:10:c0:7f:2c:85:ea:66:2e:5a:93:c8:20:50:ee:8f:
         c1:55:a9:c9:2f:77:e2:5d:a8:e7:2f:87:27:5c:b9:c8:8c:91:
         3a:7c:ea:43:5d:c3:48:96:ae:37:54:ee:b6:30:5e:c4:14:4f:
         96:a7:52:1c:af:04:13:49:4a:79:92:50:91:02:2b:a8:9c:75:
         cc:05:a7:b5:c2:6a:51:64:a0:68:40:d7:5c:e5:af:08:32:68:
         ce:24:01:00:89:f6:30:fb:65:39:96:51:a4:20:0d:d1:ff:fe:
         da:e1:70:44:ed:03:7b:6f:b6:a5:75:0d:c0:8c:a0:d7:39:f2:
         5f:9a:5c:c1:49:83:ed:c4:b6:70:48:41:05:62:58:e0:ab:ee:
         21:28:da:fc:af:98:f1:f4:f9:91:50:e5:90:3d:9f:a1:88:44:
         23:51:5b:ff:e7:71:9a:28:25:20:bb:43:ab:47:10:2c:3f:ba:
         6a:58:b5:e5:b0:03:07:36:2e:1a:34:3f:5d:7b:12:b3:69:50:
         ee:7a:13:52:31:a5:c2:c6:d8:12:35:18:37:db:15:a0:82:2c:
         96:df:31:e8:72:4a:a8:5e:f8:69:1f:b1:48:5b:c1:6a:b1:74:
         73:6f:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org