Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32332d3233203d3e20323638373130.roa
File:                     34352e3137302e3232382e302f32332d3233203d3e20323638373130.roa (raw, json)
Hash identifier:          WMSzK6DR/WoeCDuUPQC3PMXRPE9YHiJQ0O/s+mEwhL8=
Subject key identifier:   AC:47:5A:59:4F:77:A6:B6:1D:6B:37:A0:3D:1B:F2:89:04:9D:29:6B
Certificate issuer:       /CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
Certificate serial:       1AC12576BB63AFB95893E84D780DAD0971C0F95F
Authority key identifier: 66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32332d3233203d3e20323638373130.roa
Signing time:             Thu 28 Dec 2023 17:54:19 +0000
ROA not before:           Thu 28 Dec 2023 17:49:19 +0000
ROA not after:            Thu 26 Dec 2024 17:54:19 +0000
asID:                     268710
IP address blocks:        45.170.228.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c1:25:76:bb:63:af:b9:58:93:e8:4d:78:0d:ad:09:71:c0:f9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
        Validity
            Not Before: Dec 28 17:49:19 2023 GMT
            Not After : Dec 26 17:54:19 2024 GMT
        Subject: CN=AC475A594F77A6B61D6B37A03D1BF289049D296B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:d2:30:46:a9:0c:c9:08:0d:5e:92:15:a4:
                    20:38:6c:3f:54:5f:9f:0a:05:1f:9c:73:1c:8a:02:
                    c2:08:92:76:82:d1:f1:23:95:9b:0a:89:44:c7:ec:
                    55:ad:cf:7d:32:20:40:0a:2d:4e:ad:ec:a8:4f:c3:
                    5e:1e:ec:eb:90:e2:b7:2e:72:b5:91:5a:e4:84:ad:
                    4f:93:d3:70:22:3e:45:b4:34:18:a3:eb:49:c1:84:
                    a0:1a:5b:ab:f0:8e:4c:ce:28:c2:58:fe:39:8b:b1:
                    4b:87:50:22:4d:91:f8:83:ca:6e:de:b0:83:09:95:
                    67:f3:fd:6b:84:85:89:3c:96:b5:4b:c1:51:ff:89:
                    0d:64:cf:f0:7b:d4:54:23:61:4b:9b:91:bf:77:9d:
                    dc:93:9a:57:1c:94:fc:96:17:bf:34:19:fd:3f:00:
                    10:54:22:b4:4e:6c:3e:33:84:19:33:e8:c5:27:8c:
                    64:59:57:71:2f:c1:9d:9e:e3:17:f0:c8:a5:a8:38:
                    59:17:fd:9d:00:d2:58:94:4a:7a:58:33:63:e7:e6:
                    61:d4:46:8d:6a:6a:b3:20:6c:b6:f6:b1:28:74:55:
                    e4:47:bb:8d:63:2a:61:4e:f0:dc:e5:b9:17:7c:17:
                    bf:af:c0:c6:90:bc:b8:4a:49:68:86:0a:41:b7:28:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:47:5A:59:4F:77:A6:B6:1D:6B:37:A0:3D:1B:F2:89:04:9D:29:6B
            X509v3 Authority Key Identifier:
                keyid:66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32332d3233203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:d9:cd:be:cf:58:9f:6a:1b:43:ab:47:ea:77:1b:d7:c6:d1:
         94:82:b6:f5:27:27:ae:2a:19:cf:a8:0f:50:a2:79:a5:0b:03:
         37:72:e6:8a:49:03:cb:60:e6:1f:98:7a:7b:f4:3b:ad:8e:c8:
         75:fb:6b:88:f1:ae:77:9e:ef:6e:b3:fe:29:78:0d:5b:be:50:
         a9:f9:4b:14:f2:6c:ef:b0:02:0f:83:5c:f1:2c:31:67:62:ff:
         59:40:98:71:36:87:e5:6a:87:36:3c:fe:61:c0:8f:1e:d7:95:
         35:f2:6e:0b:b5:a2:b7:06:a6:e6:f9:84:84:57:e3:8e:db:c5:
         44:ed:aa:bb:82:e6:3e:02:fe:d2:51:6c:2e:32:94:e5:6f:a1:
         2f:db:84:7b:65:ea:8e:5b:d1:c5:23:2f:5e:c5:1d:2d:30:89:
         1d:d7:01:37:0a:f2:2c:bd:33:2c:c6:8c:39:72:4a:b0:a2:f0:
         64:e9:e8:c9:57:19:26:c4:b2:3e:be:e5:e0:a7:b3:f6:d9:24:
         0d:27:a2:18:03:c9:b5:cc:58:43:6a:91:92:ab:f0:ca:60:70:
         90:09:de:4b:af:46:89:ec:83:03:f1:b4:fb:26:46:db:2e:d2:
         50:f5:19:12:02:22:28:5f:2e:96:a2:04:7a:a0:61:af:b9:92:
         39:8a:6f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org