Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139322e302f32322d3232203d3e20323637393337.roa
File:                     34352e3136352e3139322e302f32322d3232203d3e20323637393337.roa (raw, json)
Hash identifier:          e9iI3CvA2/TT6nKEy3U11Ok4VFZdC7RYjEOLiFnhzw4=
Subject key identifier:   B1:8D:F5:E0:56:64:85:2C:38:97:57:20:BD:F0:EA:63:0B:FA:E9:EF
Certificate issuer:       /CN=BB2CE81BD94CBC4475D2009984709FB0A6702A8E
Certificate serial:       2B81A07343DC4FC39B02B9316922D99966EA02A2
Authority key identifier: BB:2C:E8:1B:D9:4C:BC:44:75:D2:00:99:84:70:9F:B0:A6:70:2A:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB2CE81BD94CBC4475D2009984709FB0A6702A8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139322e302f32322d3232203d3e20323637393337.roa
Signing time:             Sun 25 Jun 2023 12:22:24 +0000
ROA not before:           Sun 25 Jun 2023 12:17:24 +0000
ROA not after:            Sun 23 Jun 2024 12:22:24 +0000
asID:                     267937
IP address blocks:        45.165.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:81:a0:73:43:dc:4f:c3:9b:02:b9:31:69:22:d9:99:66:ea:02:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB2CE81BD94CBC4475D2009984709FB0A6702A8E
        Validity
            Not Before: Jun 25 12:17:24 2023 GMT
            Not After : Jun 23 12:22:24 2024 GMT
        Subject: CN=B18DF5E05664852C38975720BDF0EA630BFAE9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:8e:64:91:03:b6:01:56:75:2f:69:70:e1:
                    07:d4:ac:d8:a9:db:c8:c9:e3:16:8f:e4:61:b4:64:
                    6f:a6:4d:30:51:49:03:16:26:78:2f:59:bd:17:e3:
                    8e:31:34:19:e7:f3:ae:be:ec:a1:88:3e:0a:cf:13:
                    33:58:7b:d9:1a:37:71:5c:54:1b:39:a0:71:63:18:
                    c8:99:97:ef:1d:87:c9:a0:f6:4e:18:ad:32:c9:e9:
                    08:15:bc:b2:43:b8:93:cb:c9:86:e0:fe:4b:f6:ff:
                    17:ab:e0:51:3a:20:7a:87:80:d1:ad:78:d2:7f:c3:
                    96:d8:53:d6:06:34:2b:3c:2f:c5:7c:50:d7:1e:7f:
                    81:6c:46:42:75:d0:dd:1f:1f:f7:16:12:72:c8:7c:
                    d1:5e:97:05:92:ab:ee:ab:3d:2e:e2:6b:82:36:51:
                    45:33:e0:b8:3f:aa:f8:8c:ee:f6:72:72:58:fe:17:
                    26:04:76:5a:f1:f3:42:18:24:6d:7e:3f:c8:26:b2:
                    fd:ef:27:1d:a9:d3:9f:3a:6e:7e:7a:33:4d:07:53:
                    47:60:66:dd:03:75:00:b3:43:f3:ed:4c:52:af:47:
                    02:46:29:c0:30:24:ac:53:2a:41:a9:64:c2:55:9b:
                    49:3f:01:fc:f6:01:0b:1b:6a:a1:12:d8:b0:99:5e:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:F5:E0:56:64:85:2C:38:97:57:20:BD:F0:EA:63:0B:FA:E9:EF
            X509v3 Authority Key Identifier:
                keyid:BB:2C:E8:1B:D9:4C:BC:44:75:D2:00:99:84:70:9F:B0:A6:70:2A:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/BB2CE81BD94CBC4475D2009984709FB0A6702A8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB2CE81BD94CBC4475D2009984709FB0A6702A8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139322e302f32322d3232203d3e20323637393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:2c:b4:43:78:85:13:63:fb:b1:54:70:9e:1c:8e:a0:65:2f:
         2c:ca:a6:87:06:6e:dd:57:23:3c:59:09:d0:f3:18:51:b7:1c:
         0f:d0:77:c3:bf:39:d4:81:42:d8:01:e0:a2:1f:fa:ea:c4:0a:
         df:04:94:49:fb:b2:8e:f4:3b:c0:ab:ac:69:1e:63:6f:17:d1:
         6a:48:4c:54:08:a9:3a:05:e6:0e:62:1f:b1:33:59:b0:fd:ac:
         9a:98:2c:b2:6d:3b:ce:cd:98:62:25:8c:44:f4:36:fb:d1:e6:
         e6:50:44:60:f2:81:2c:8e:c7:94:36:34:b1:e3:b4:56:f4:79:
         1b:2d:25:4c:d0:44:24:62:f0:6a:eb:3e:80:bf:7b:fe:dc:86:
         58:9e:dd:5e:89:9c:0c:07:2a:85:80:8e:af:96:0c:fc:c2:c2:
         e9:b2:4b:7b:3f:c6:d7:0a:e9:45:70:51:0f:d1:f5:6a:42:44:
         a0:d0:03:00:95:60:54:86:46:40:6a:6a:6c:22:ad:15:e2:82:
         6f:40:e0:30:22:9c:33:e4:1f:11:82:78:fa:8f:c2:68:d6:b2:
         31:53:db:54:5e:f7:d7:da:31:ba:24:05:cc:47:93:cd:ad:be:
         30:4b:5a:fa:a6:a2:bf:fc:12:63:ca:4e:ab:64:c6:59:b0:d3:
         b5:8f:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org