Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35352e302f32342d3234203d3e20323638303239.roa
File:                     34352e3136382e35352e302f32342d3234203d3e20323638303239.roa (raw, json)
Hash identifier:          K8rSl+UTQohdZJfNyL5Pm3pIkeeCp9DpK6Aq6E+1z6s=
Subject key identifier:   41:10:12:51:66:3A:A7:B0:6D:BF:39:08:97:D7:93:DA:0B:76:67:4F
Certificate issuer:       /CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
Certificate serial:       0709EA8F7FFDE2E5C8AE411E4B34CED09654E142
Authority key identifier: 5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35352e302f32342d3234203d3e20323638303239.roa
Signing time:             Thu 02 Feb 2023 14:00:03 +0000
ROA not before:           Thu 02 Feb 2023 13:55:03 +0000
ROA not after:            Thu 01 Feb 2024 14:00:03 +0000
asID:                     268029
IP address blocks:        45.168.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:09:ea:8f:7f:fd:e2:e5:c8:ae:41:1e:4b:34:ce:d0:96:54:e1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
        Validity
            Not Before: Feb  2 13:55:03 2023 GMT
            Not After : Feb  1 14:00:03 2024 GMT
        Subject: CN=41101251663AA7B06DBF390897D793DA0B76674F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:84:d9:04:dd:3c:cc:31:8e:a7:61:df:06:
                    0f:b6:a6:d0:44:47:9d:51:98:ec:69:b5:01:8a:2e:
                    b5:14:ec:56:5f:ee:f2:76:bd:fe:e8:ad:e6:4f:f8:
                    ff:10:13:c1:94:ce:8a:46:84:34:03:6e:c7:ca:29:
                    ca:18:aa:42:b2:d9:b5:0c:f1:4e:dd:4b:45:4e:47:
                    18:89:07:f0:40:1f:2c:fa:e9:13:02:ea:a5:25:cf:
                    1a:9f:eb:cb:b2:55:df:b9:99:6a:2a:56:80:96:21:
                    ad:bb:e5:45:0c:cf:1a:db:9b:66:cf:90:2d:af:68:
                    6c:d1:48:c1:c3:f6:29:c6:40:b8:13:13:03:f9:b1:
                    f9:d1:73:76:0c:e8:ca:49:d9:74:50:ee:11:e0:7f:
                    ff:e8:ec:84:a8:cc:0d:d8:37:fa:e9:03:6d:4e:92:
                    60:11:c8:f7:a8:49:6b:1e:d2:01:da:b9:5b:da:1a:
                    eb:49:f8:cd:18:f8:a6:ac:80:1a:2e:d1:67:b0:d3:
                    f2:43:af:a0:e2:99:39:40:77:d1:22:ff:14:e5:fc:
                    90:3e:cf:27:ca:6c:5c:4f:62:f7:7b:13:c4:d3:d4:
                    69:13:9c:a0:8b:5d:44:cc:7b:3b:8c:12:31:55:96:
                    6c:cb:da:87:63:f3:5f:40:aa:55:39:7a:47:e4:51:
                    d3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:12:51:66:3A:A7:B0:6D:BF:39:08:97:D7:93:DA:0B:76:67:4F
            X509v3 Authority Key Identifier:
                keyid:5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35352e302f32342d3234203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:a9:54:1b:a8:72:fe:09:54:68:bd:3a:4b:4f:00:83:c3:
         87:39:0c:73:ac:60:47:4b:af:47:a3:01:01:84:6e:4e:7a:5d:
         3b:eb:0e:c0:0a:e9:35:27:b9:b9:42:b6:a5:4a:c5:a9:c1:02:
         3f:43:93:1e:0b:32:49:e2:94:56:b0:03:bb:39:87:de:be:ee:
         72:d4:47:2f:57:af:85:41:3a:c5:04:93:cc:70:c3:9c:43:46:
         be:bc:71:bb:1c:0f:35:46:25:93:ca:6c:07:c1:9a:6d:60:eb:
         c9:f7:7e:e5:a0:25:97:84:9a:df:09:42:7f:ef:2f:fd:60:28:
         6f:83:66:45:9d:fb:13:c4:7f:63:2a:b3:84:41:0e:fc:9b:e5:
         41:2d:59:c9:1a:4c:5b:1f:fb:e4:cf:53:72:a9:67:79:5c:fc:
         4d:c4:50:1c:6a:e1:d5:69:a3:74:53:d4:68:4e:1e:9e:9f:53:
         2d:21:72:83:b1:61:06:f4:b1:3a:83:ee:c6:fc:f1:5d:0f:c3:
         f4:2b:2e:12:0e:6f:1b:0a:d8:47:8f:92:3a:46:cc:2f:53:18:
         2d:c5:45:4b:1c:b2:20:26:cf:bd:36:83:1c:2b:7e:57:14:bd:
         3e:7f:48:c2:fe:5c:4c:82:f5:43:2b:d3:29:00:78:21:b4:f0:
         94:29:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org