Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/34352e3137392e39362e302f32322d3234203d3e20323639303734.roa
File:                     34352e3137392e39362e302f32322d3234203d3e20323639303734.roa (raw, json)
Hash identifier:          5OECUuCByfnv0in0Antbs7/R8PQ6XYk2WSKqBcDMdow=
Subject key identifier:   60:52:5F:49:60:7D:9E:F4:45:15:83:92:09:10:A5:01:80:49:FE:2E
Certificate issuer:       /CN=6DFBBB883729CEDE9404E1D96E38F41C751B4A7F
Certificate serial:       3AC9BBD10E5A2D132F51D31EDA06E9A3FBF368F6
Authority key identifier: 6D:FB:BB:88:37:29:CE:DE:94:04:E1:D9:6E:38:F4:1C:75:1B:4A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DFBBB883729CEDE9404E1D96E38F41C751B4A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/34352e3137392e39362e302f32322d3234203d3e20323639303734.roa
Signing time:             Thu 01 Jun 2023 20:00:00 +0000
ROA not before:           Thu 01 Jun 2023 19:55:00 +0000
ROA not after:            Sat 01 Jun 2024 20:00:00 +0000
asID:                     269074
IP address blocks:        45.179.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c9:bb:d1:0e:5a:2d:13:2f:51:d3:1e:da:06:e9:a3:fb:f3:68:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DFBBB883729CEDE9404E1D96E38F41C751B4A7F
        Validity
            Not Before: Jun  1 19:55:00 2023 GMT
            Not After : Jun  1 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:aa:da:33:60:b7:46:85:9a:1d:3f:1f:8d:
                    52:fe:60:f9:92:06:c8:52:7f:f0:1e:28:06:2c:66:
                    8f:fa:55:0f:58:0d:8e:dd:82:fb:fe:45:90:a9:e6:
                    13:7f:ac:5a:d7:fa:7e:57:f1:01:66:a4:ae:87:6a:
                    20:81:87:6f:d9:47:08:55:96:23:5e:57:80:24:da:
                    58:e6:d7:28:f0:d6:c1:40:34:4a:15:85:c0:5e:17:
                    18:b1:8f:9b:b9:dd:84:5c:70:d8:59:61:69:5c:da:
                    9e:dc:2f:74:c1:c3:7f:81:44:fc:2e:63:c0:5d:e2:
                    08:80:5c:15:bf:27:cf:cd:a8:ad:d2:b8:c1:67:7a:
                    e1:5a:6d:3b:02:20:81:1f:0e:c9:52:37:0e:6d:5d:
                    2e:7b:75:3a:46:30:fa:28:68:5d:d9:56:01:21:15:
                    59:5d:4a:d6:ba:ed:73:26:a5:4c:1e:6d:ee:75:f9:
                    3a:b8:92:3b:0c:31:42:cd:3b:f6:6d:f8:57:47:e8:
                    c6:f2:e9:83:74:a9:ac:5f:9c:2c:50:84:53:a0:0d:
                    8a:c9:ef:c9:1d:47:e9:d6:83:10:19:2d:6d:42:7c:
                    be:82:9c:be:23:4c:82:95:30:0d:99:7b:7d:ad:1b:
                    6f:91:bf:3c:1a:d6:76:e0:ab:8b:ae:64:66:18:d4:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:52:5F:49:60:7D:9E:F4:45:15:83:92:09:10:A5:01:80:49:FE:2E
            X509v3 Authority Key Identifier:
                keyid:6D:FB:BB:88:37:29:CE:DE:94:04:E1:D9:6E:38:F4:1C:75:1B:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/6DFBBB883729CEDE9404E1D96E38F41C751B4A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DFBBB883729CEDE9404E1D96E38F41C751B4A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/34352e3137392e39362e302f32322d3234203d3e20323639303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:e8:e6:bf:2f:fa:7b:08:ad:70:ee:99:35:61:11:12:ec:db:
         32:ac:dd:69:ca:92:09:6f:f1:f4:e0:2d:20:ee:1d:30:f7:cb:
         e7:9f:77:50:5e:37:9e:26:69:ac:7e:ea:09:b3:b7:59:f6:77:
         d4:26:ad:01:46:70:e6:3f:a1:99:d3:24:83:dd:63:86:93:2a:
         01:11:33:39:c3:8e:e8:7f:3f:c8:c0:bf:45:cd:6e:55:aa:d5:
         01:c5:a4:ee:0f:0d:2a:63:5d:c8:1a:eb:41:86:56:50:32:91:
         f4:5a:16:f2:d1:8a:6c:97:21:a2:a7:fe:30:34:77:92:90:d0:
         3b:35:bb:d8:c6:e6:a6:fc:d0:0b:15:c1:39:b3:36:3f:92:80:
         12:14:5f:69:2d:62:90:c8:c4:c9:19:04:9b:fc:56:41:8e:37:
         91:2e:72:12:af:8a:d5:84:4b:db:39:e2:c8:83:49:28:90:4f:
         86:2f:e0:93:dc:ea:1d:f7:06:b2:2f:4a:5d:a6:30:63:78:2f:
         9f:d3:1f:19:bc:ee:88:c1:f0:ec:63:0c:91:5e:ad:34:f0:f5:
         f9:bb:9d:16:e6:ea:8c:e6:17:d4:b3:fe:a0:a5:3a:8f:47:b0:
         6d:c7:2a:31:70:7e:1c:7d:54:c2:8f:f4:4a:ff:b8:13:94:4b:
         94:00:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org