Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/34352e3136362e3132302e302f32322d3232203d3e20323637393736.roa
File:                     34352e3136362e3132302e302f32322d3232203d3e20323637393736.roa (raw, json)
Hash identifier:          Advs5ynCh1F3UeHoVOD1gN+ZYLg2MiMAkvSNGWa5Pvc=
Subject key identifier:   BD:C2:5C:10:37:04:5E:23:34:BD:01:2C:83:CB:5D:54:69:1C:89:C6
Certificate issuer:       /CN=FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23
Certificate serial:       6C84356086E6ED26B82DD61E791237280DD00B5F
Authority key identifier: FD:B6:3F:9D:B6:01:8A:8F:08:7A:2B:97:EA:59:E0:B3:19:AA:FB:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/34352e3136362e3132302e302f32322d3232203d3e20323637393736.roa
Signing time:             Mon 21 Nov 2022 13:37:41 +0000
ROA not before:           Mon 21 Nov 2022 13:32:41 +0000
ROA not after:            Mon 20 Nov 2023 13:37:41 +0000
asID:                     267976
IP address blocks:        45.166.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:84:35:60:86:e6:ed:26:b8:2d:d6:1e:79:12:37:28:0d:d0:0b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23
        Validity
            Not Before: Nov 21 13:32:41 2022 GMT
            Not After : Nov 20 13:37:41 2023 GMT
        Subject: CN=BDC25C1037045E2334BD012C83CB5D54691C89C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:8b:c9:74:30:0d:e4:f8:4e:7f:03:55:9c:
                    82:28:b5:f6:28:48:2e:23:68:0f:61:ec:f8:1e:cb:
                    43:cf:59:02:b2:2d:04:69:4b:7b:24:c0:22:80:28:
                    a3:2d:89:02:f0:b5:04:60:37:40:af:6f:fe:96:84:
                    cf:70:11:3c:d0:50:76:e0:75:61:26:fb:16:2c:42:
                    10:d7:12:3f:68:80:1b:ac:86:92:83:06:a6:9c:33:
                    87:9a:72:93:c0:87:df:f9:2f:4a:95:9e:58:ae:a7:
                    0b:84:1f:3a:59:e6:78:dc:d6:6e:34:d8:37:1e:01:
                    50:55:e1:3f:b2:e1:e5:1f:78:8b:22:95:78:5a:54:
                    37:53:d3:e3:c4:5b:d9:75:bb:dc:0f:b6:b2:1e:58:
                    6c:2c:d1:ff:d2:90:07:80:68:45:cc:61:90:6d:13:
                    ab:55:c8:04:b9:37:17:83:60:2f:e9:01:8f:ea:12:
                    09:d8:8d:83:96:ae:b1:1b:a5:af:46:19:86:4e:3c:
                    de:03:a6:69:7e:c3:11:c0:2c:bf:37:f9:9b:21:c9:
                    34:56:f7:05:55:15:3f:e2:f1:65:e9:80:a1:fd:a1:
                    dd:6f:ba:f8:2c:a7:05:73:bc:90:93:00:28:a1:cd:
                    20:c2:97:1d:14:e0:fd:07:fc:b0:b9:55:13:c8:19:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C2:5C:10:37:04:5E:23:34:BD:01:2C:83:CB:5D:54:69:1C:89:C6
            X509v3 Authority Key Identifier:
                keyid:FD:B6:3F:9D:B6:01:8A:8F:08:7A:2B:97:EA:59:E0:B3:19:AA:FB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/34352e3136362e3132302e302f32322d3232203d3e20323637393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:94:10:d1:07:79:e2:2f:6c:bc:aa:a5:d4:2f:4c:7c:48:d1:
         58:fe:19:e5:87:ed:a8:eb:19:34:3d:29:15:5a:0f:84:8d:68:
         53:be:4e:a1:e9:09:9e:36:2e:cc:b5:e1:e5:9b:8d:14:8f:9d:
         79:d0:b7:69:1e:f4:92:5e:81:18:1d:c0:6c:89:59:df:b6:22:
         49:1d:c0:61:29:2a:2a:61:69:51:8b:54:46:fc:42:fe:24:ec:
         73:94:0d:8c:da:77:40:ef:b9:80:8c:1e:c2:96:24:27:12:b2:
         ad:4a:b3:fa:2d:d7:1a:f4:b5:ab:e7:41:77:f4:98:66:79:d7:
         83:bf:62:4a:6a:38:af:fd:76:85:f0:df:e3:9a:29:93:3d:1f:
         30:08:1d:07:47:47:53:6d:9b:e7:a0:fe:5f:76:24:1a:a8:22:
         70:6a:62:04:61:59:27:6c:88:86:27:f0:69:74:6d:7a:51:67:
         36:49:5d:cf:63:e5:a4:de:6f:98:57:07:30:87:95:9a:4b:68:
         cd:d7:a3:48:08:ab:48:37:12:ca:2e:32:96:75:df:54:b6:98:
         4c:c0:ed:7b:d6:f4:f4:3e:67:1a:73:59:c4:5b:3e:4c:46:7e:
         4e:14:9e:18:8e:ca:99:63:df:03:18:52:9a:16:d2:4e:70:24:
         d4:8a:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org