Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/34352e3136332e3131362e302f32322d3234203d3e20323638353737.roa
File:                     34352e3136332e3131362e302f32322d3234203d3e20323638353737.roa (raw, json)
Hash identifier:          c2Fc1DeJa9/gvKOPugNkI2t0jW/hpinQxBteQXbX2K0=
Subject key identifier:   ED:6A:47:5E:50:D0:53:33:F7:F4:58:B2:D9:E4:8F:6E:4F:E2:3D:01
Certificate issuer:       /CN=220249BB069A7AB17EC9F608DE544573D0214F45
Certificate serial:       76FEDF4162BEC13EF5418F262851DD0ABFCA9817
Authority key identifier: 22:02:49:BB:06:9A:7A:B1:7E:C9:F6:08:DE:54:45:73:D0:21:4F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220249BB069A7AB17EC9F608DE544573D0214F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/34352e3136332e3131362e302f32322d3234203d3e20323638353737.roa
Signing time:             Mon 24 Apr 2023 20:11:34 +0000
ROA not before:           Mon 24 Apr 2023 20:06:34 +0000
ROA not after:            Mon 22 Apr 2024 20:11:34 +0000
asID:                     268577
IP address blocks:        45.163.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fe:df:41:62:be:c1:3e:f5:41:8f:26:28:51:dd:0a:bf:ca:98:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220249BB069A7AB17EC9F608DE544573D0214F45
        Validity
            Not Before: Apr 24 20:06:34 2023 GMT
            Not After : Apr 22 20:11:34 2024 GMT
        Subject: CN=ED6A475E50D05333F7F458B2D9E48F6E4FE23D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:ee:cf:92:6d:0b:64:59:96:51:a9:9b:a7:
                    95:23:79:3b:89:28:a8:43:0d:9a:ce:dd:2e:80:0f:
                    24:22:35:a0:3e:9f:e5:9e:bd:df:df:72:36:36:3f:
                    02:87:ce:a7:19:e3:4f:a3:5f:1e:62:47:3b:1b:4c:
                    c8:b1:f1:f0:d0:5f:33:f7:8f:ac:8b:f0:d5:05:58:
                    39:4b:6d:95:35:c9:90:da:41:3c:89:b0:ee:32:94:
                    06:30:1e:49:c2:76:ef:e4:a5:d8:87:35:77:f4:91:
                    85:5f:32:36:92:83:c6:d4:d7:b2:95:6e:c7:38:57:
                    90:c1:9d:d8:4e:43:ae:90:e5:81:9a:e7:18:d3:a6:
                    b0:6c:8c:69:f5:ee:47:41:92:c5:5f:bc:7b:3a:46:
                    9d:7e:59:c3:1b:39:03:76:d0:4f:2e:c8:a1:96:b6:
                    a9:53:50:09:50:96:0e:5e:1e:5f:1e:fd:0a:06:e5:
                    bc:03:d4:c2:2b:2f:83:7c:03:84:ac:51:8e:66:37:
                    7c:08:c6:12:2e:65:ed:a2:d6:42:45:a8:b8:c2:d7:
                    ba:a8:16:af:dd:af:53:9b:87:0e:28:3a:fb:3a:a3:
                    b7:22:91:0f:34:23:ab:71:cb:a2:81:e0:73:34:1a:
                    b9:e9:51:9b:5a:77:79:e4:d6:22:9f:93:83:48:00:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6A:47:5E:50:D0:53:33:F7:F4:58:B2:D9:E4:8F:6E:4F:E2:3D:01
            X509v3 Authority Key Identifier:
                keyid:22:02:49:BB:06:9A:7A:B1:7E:C9:F6:08:DE:54:45:73:D0:21:4F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/220249BB069A7AB17EC9F608DE544573D0214F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220249BB069A7AB17EC9F608DE544573D0214F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/34352e3136332e3131362e302f32322d3234203d3e20323638353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:90:08:0c:50:9c:b3:be:81:0b:0d:a5:14:04:f3:db:08:7b:
         0a:c9:d4:42:ff:d9:8a:1b:99:06:ab:05:ce:59:46:91:b9:41:
         51:6f:fe:13:6d:9f:66:e5:fc:a9:5b:77:21:e5:c1:34:65:dd:
         2d:85:1b:35:a9:e7:43:c7:cc:da:61:b6:79:e8:5d:a2:78:3a:
         36:05:33:0d:ee:f8:a2:98:d8:41:26:b7:44:58:c3:92:27:a7:
         5c:dd:e0:d8:b0:72:3b:35:3a:7b:69:34:38:6a:92:2e:de:fb:
         0c:c2:85:8b:b4:8e:80:e4:0e:3c:e2:7d:1c:ea:97:50:89:cc:
         d5:c9:6a:67:26:6e:46:d4:27:6c:55:6d:88:fe:99:a6:80:ef:
         de:c7:91:57:e5:fd:44:b0:5c:ed:12:db:55:df:51:30:e7:ab:
         8f:90:b3:06:9a:fd:86:e1:de:05:0d:12:f1:d9:6a:e2:5a:07:
         62:e5:0e:f9:46:24:89:98:71:21:df:ab:9d:5e:21:9d:2c:ae:
         75:98:bf:92:19:17:3f:33:34:0f:fb:9f:d1:f7:61:3a:c5:18:
         89:1b:15:97:61:3d:63:db:d5:4c:9c:7a:a3:1a:bf:59:b2:f2:
         cc:c9:6b:aa:af:6a:da:af:ee:1f:bb:b9:c8:d4:3e:ca:3a:bb:
         0c:ee:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org