Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/1/34352e3232362e37322e302f32322d3234203d3e20323636393631.roa
File:                     34352e3232362e37322e302f32322d3234203d3e20323636393631.roa (raw, json)
Hash identifier:          beOcIXPzG+D8nUHQF/V4efhno0bTfzmgh+khCFgt3Wo=
Subject key identifier:   01:88:A4:0A:87:0A:96:AF:82:5A:F5:15:52:93:6C:B6:B2:98:17:FE
Certificate issuer:       /CN=B63FF8EA97AE2F9343F525F4249509948A371BC6
Certificate serial:       257FEBE9C808DFAEA95E74DD5B2493CB6B7C2E7B
Authority key identifier: B6:3F:F8:EA:97:AE:2F:93:43:F5:25:F4:24:95:09:94:8A:37:1B:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B63FF8EA97AE2F9343F525F4249509948A371BC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/1/34352e3232362e37322e302f32322d3234203d3e20323636393631.roa
Signing time:             Mon 08 Apr 2024 19:14:29 +0000
ROA not before:           Mon 08 Apr 2024 19:09:29 +0000
ROA not after:            Mon 07 Apr 2025 19:14:29 +0000
asID:                     266961
IP address blocks:        45.226.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7f:eb:e9:c8:08:df:ae:a9:5e:74:dd:5b:24:93:cb:6b:7c:2e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B63FF8EA97AE2F9343F525F4249509948A371BC6
        Validity
            Not Before: Apr  8 19:09:29 2024 GMT
            Not After : Apr  7 19:14:29 2025 GMT
        Subject: CN=0188A40A870A96AF825AF51552936CB6B29817FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:0d:dc:77:bc:e7:4a:fc:c0:05:7b:71:e7:
                    fa:71:77:ad:9e:d2:aa:c6:f0:5f:ce:21:29:06:14:
                    48:d3:21:20:04:40:81:2b:91:04:4e:c5:46:15:a6:
                    3f:f2:d5:30:39:3b:4c:69:0c:74:ad:23:e7:e3:d1:
                    b8:87:ab:aa:34:60:8d:0b:66:09:2d:e0:6c:e3:49:
                    80:45:2a:c3:c9:d8:fe:00:42:c6:ee:f5:80:f4:5c:
                    f0:62:7a:21:e1:f7:f6:e5:44:6b:1b:8e:4d:35:b0:
                    a0:5f:0d:ed:87:c3:d4:1e:80:cb:81:a9:7b:7e:0d:
                    42:b1:3a:c6:56:d8:b0:02:d2:29:62:09:d2:a5:57:
                    2e:3e:8f:7a:dd:a3:5f:26:41:ae:fe:d5:91:8f:7d:
                    a4:d8:c7:0b:0b:cf:d1:25:60:8e:12:14:6d:dd:90:
                    96:55:06:02:62:23:a3:5c:61:a2:2a:05:bd:98:6b:
                    c1:1b:19:ca:69:71:c6:fa:9e:8c:c5:e0:ae:5f:df:
                    d6:9d:e8:32:95:77:64:86:18:b0:51:b7:81:fc:c7:
                    26:c1:28:59:6b:c0:72:4c:fb:69:f1:6c:ff:d0:8d:
                    53:9e:97:44:93:dd:7e:b0:9e:f2:0c:b2:0c:4f:85:
                    87:3b:1c:ba:96:c0:92:d0:ef:bd:ac:9d:5d:ef:03:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:88:A4:0A:87:0A:96:AF:82:5A:F5:15:52:93:6C:B6:B2:98:17:FE
            X509v3 Authority Key Identifier:
                keyid:B6:3F:F8:EA:97:AE:2F:93:43:F5:25:F4:24:95:09:94:8A:37:1B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/1/B63FF8EA97AE2F9343F525F4249509948A371BC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B63FF8EA97AE2F9343F525F4249509948A371BC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/1/34352e3232362e37322e302f32322d3234203d3e20323636393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:ed:3d:2c:92:1f:68:40:f0:db:99:c1:3a:93:8d:0c:a7:
         56:49:b8:fe:c7:ca:95:dc:c7:b9:78:ff:7d:3b:c1:64:d1:3a:
         f9:0b:5d:89:35:03:fe:b6:f1:05:cf:60:f1:ac:f6:89:1d:0f:
         a7:b8:65:f6:b6:09:fd:58:27:78:ae:e7:0b:90:b2:41:6d:08:
         35:5d:6e:98:c2:0f:5f:af:bf:79:ae:88:2e:fa:1c:bb:00:27:
         0e:6d:63:e6:2c:9e:b8:f2:c7:8c:39:4a:99:c8:2b:fc:93:90:
         33:fd:3b:25:fe:9d:05:f8:eb:fd:ee:76:8a:47:47:5a:14:d7:
         c4:41:81:ba:f9:eb:47:9e:b3:a2:f8:c3:11:93:68:c1:20:a0:
         0e:fc:b6:5c:07:d9:8b:36:02:14:62:85:38:26:dc:34:59:3c:
         fe:50:56:4b:77:6a:6f:3a:d5:e7:4f:16:64:ae:9f:6e:9f:e2:
         78:ee:d0:98:87:52:5f:49:20:12:44:54:a5:d6:56:fc:5f:3b:
         31:66:24:3d:13:48:2c:81:54:a4:87:73:47:db:34:6c:3f:c0:
         62:12:14:c0:83:e8:c2:52:c0:84:8f:ce:ec:98:1a:0e:68:54:
         26:d5:43:6e:73:4b:a0:4a:0c:58:91:76:bb:4c:de:b0:7c:d7:
         01:fa:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org