Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3232203d3e20323637333930.roa
File:                     34352e3233352e302e302f32322d3232203d3e20323637333930.roa (raw, json)
Hash identifier:          Hhk69iQ/BU189HHEvcRLGys7xXf8jpujjOworwNG96c=
Subject key identifier:   14:60:2A:EE:CA:EF:4C:53:58:45:89:E0:A0:95:9B:73:23:7F:39:74
Certificate issuer:       /CN=6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3
Certificate serial:       43977395B4687E60E326E3E50FDEF89DA7CC18DE
Authority key identifier: 6E:99:97:71:E1:C5:D8:3D:71:C5:E0:A3:FF:05:BD:7A:0B:F9:31:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3232203d3e20323637333930.roa
Signing time:             Wed 29 Nov 2023 21:18:34 +0000
ROA not before:           Wed 29 Nov 2023 21:13:34 +0000
ROA not after:            Wed 27 Nov 2024 21:18:34 +0000
asID:                     267390
IP address blocks:        45.235.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:97:73:95:b4:68:7e:60:e3:26:e3:e5:0f:de:f8:9d:a7:cc:18:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3
        Validity
            Not Before: Nov 29 21:13:34 2023 GMT
            Not After : Nov 27 21:18:34 2024 GMT
        Subject: CN=14602AEECAEF4C53584589E0A0959B73237F3974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:ac:dd:a9:11:a8:87:27:0b:cd:d4:ba:e7:
                    66:fb:b3:ef:91:32:9b:00:84:3f:ae:9e:8d:9f:77:
                    93:53:c1:ce:15:df:c9:e7:33:45:a8:66:4a:23:4b:
                    9f:26:a0:01:7a:11:a6:f0:34:7d:cf:dd:22:c3:7c:
                    e0:92:c1:5c:ac:c2:75:48:6e:bf:22:a5:7b:6c:2a:
                    f6:91:c2:44:ef:55:7a:d5:e6:5a:72:bb:43:9c:14:
                    af:38:54:4b:c5:b9:f4:03:f0:13:af:a3:d1:cf:23:
                    f1:7c:c7:ff:1e:7a:9f:b8:d8:22:74:01:7f:89:83:
                    cd:d1:8f:d7:6e:e2:1b:65:37:c6:c0:8a:6e:15:d4:
                    66:d1:e6:5e:01:36:66:41:98:88:b4:5c:ff:25:c2:
                    b8:b2:cd:fa:2c:4b:f1:0e:2c:8e:63:53:b5:93:0a:
                    35:2e:2a:98:19:d0:92:4a:9f:7e:89:d0:90:9f:d4:
                    31:cf:b3:44:60:f4:2f:3e:76:83:13:50:4b:85:73:
                    59:8c:57:33:9c:44:0a:ce:31:72:a7:6c:50:c0:5e:
                    6c:58:fd:b0:ac:07:6c:bd:f7:40:c0:0d:f0:e1:ff:
                    c1:7a:bd:f7:51:cd:4b:a5:6b:fa:0f:05:fb:dd:8f:
                    43:c2:43:81:e3:cc:4e:df:f6:96:3f:b3:c1:61:1f:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:60:2A:EE:CA:EF:4C:53:58:45:89:E0:A0:95:9B:73:23:7F:39:74
            X509v3 Authority Key Identifier:
                keyid:6E:99:97:71:E1:C5:D8:3D:71:C5:E0:A3:FF:05:BD:7A:0B:F9:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3232203d3e20323637333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:12:2d:dd:29:6a:8c:08:de:d2:ab:e4:54:ef:4b:5d:46:90:
         78:e0:61:71:5d:52:07:f8:e2:97:c0:13:6d:b3:39:47:aa:e0:
         26:d3:87:a0:00:79:6e:ae:48:7a:76:23:25:18:8a:90:ce:b3:
         45:c6:ed:cd:0b:d0:fa:7f:82:fa:02:18:5b:15:2a:5a:40:95:
         e4:4b:e4:21:a6:bb:03:3c:3c:bd:70:67:04:f8:fb:00:a0:91:
         53:b0:c6:a4:c1:e6:04:1d:cb:f5:a9:f0:12:01:0a:ad:83:ee:
         4f:84:62:5b:fe:a9:3c:a7:eb:e6:4e:98:88:90:f8:97:68:44:
         48:a2:e2:8f:50:ef:23:6c:4a:7b:19:40:7e:83:6f:4b:fe:64:
         68:fb:15:11:01:23:f4:82:5a:38:ce:82:82:02:9f:f5:6c:29:
         2c:06:7d:ee:a5:65:83:98:49:0c:0d:2d:72:28:53:c8:b4:4a:
         7d:78:9e:26:1d:b7:e1:76:11:ae:73:38:b1:1e:bb:af:2b:c4:
         2c:0f:28:98:79:76:5e:d9:12:f6:88:de:be:ac:e0:4e:fa:4b:
         c4:bf:3c:9c:5e:2c:45:f2:4e:91:9f:3f:f4:46:9d:c9:3c:94:
         29:60:df:7f:39:aa:3d:bc:67:85:a5:d9:a2:0c:22:c2:85:4e:
         d5:df:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org