Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/34352e3136342e3135372e302f32342d3234203d3e20323638363332.roa
File:                     34352e3136342e3135372e302f32342d3234203d3e20323638363332.roa (raw, json)
Hash identifier:          tRFltyVcTRvlUQ/jRQ5a8ZIty+GJMuaYe/8KRqCkzbw=
Subject key identifier:   C3:48:C1:7B:63:5F:09:A7:43:69:03:DE:66:0F:73:E3:A0:A2:AA:0E
Certificate issuer:       /CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
Certificate serial:       3162F4D87BCC40ED2530534E1B90219EE0B04C7E
Authority key identifier: E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/34352e3136342e3135372e302f32342d3234203d3e20323638363332.roa
Signing time:             Tue 07 Nov 2023 20:20:03 +0000
ROA not before:           Tue 07 Nov 2023 20:15:03 +0000
ROA not after:            Tue 05 Nov 2024 20:20:03 +0000
asID:                     268632
IP address blocks:        45.164.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:62:f4:d8:7b:cc:40:ed:25:30:53:4e:1b:90:21:9e:e0:b0:4c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
        Validity
            Not Before: Nov  7 20:15:03 2023 GMT
            Not After : Nov  5 20:20:03 2024 GMT
        Subject: CN=C348C17B635F09A7436903DE660F73E3A0A2AA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:18:19:79:8a:57:57:e1:ff:9f:00:a2:78:
                    34:12:1d:13:35:53:7d:e4:ea:94:56:d2:f6:04:59:
                    a6:94:0c:54:d2:b7:61:0e:f7:b7:6e:bb:32:f0:2c:
                    af:c3:0c:62:c7:f4:d7:92:bc:05:49:14:e1:e2:fb:
                    2d:63:91:0c:63:6b:87:59:3b:5a:64:64:89:66:be:
                    35:c7:e1:e9:e5:17:0c:f2:94:cb:43:18:03:40:f6:
                    6a:f5:40:23:87:bb:12:88:84:55:00:4e:fe:88:4c:
                    fd:10:94:a2:3f:79:33:8e:fc:f5:4c:d6:6e:9c:a2:
                    af:68:1d:9f:2e:7d:b0:31:32:1e:fe:ae:99:2a:b1:
                    93:61:bc:94:72:36:f0:10:a8:e4:60:9a:1d:c3:d6:
                    75:aa:22:1c:7e:a1:d8:0e:4c:8a:6f:bb:bc:dd:b5:
                    7b:99:77:15:4b:d5:ca:93:ce:c3:09:8d:74:e5:ed:
                    2e:92:e7:4f:d2:9c:43:f0:d7:5b:29:38:b1:13:68:
                    26:a3:51:a6:5f:e4:01:96:db:e1:b7:5e:eb:3b:e7:
                    cb:9d:c0:87:f6:60:7f:fd:47:eb:35:33:c7:d5:af:
                    c3:70:fd:b3:99:93:86:63:71:75:57:c3:76:4e:7d:
                    e5:da:e6:d0:3b:33:55:8a:93:fb:ab:c3:8d:dd:d8:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:C1:7B:63:5F:09:A7:43:69:03:DE:66:0F:73:E3:A0:A2:AA:0E
            X509v3 Authority Key Identifier:
                keyid:E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/34352e3136342e3135372e302f32342d3234203d3e20323638363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:93:34:0d:2d:b7:fd:26:0a:b8:43:b1:30:b0:cf:1b:c2:99:
         24:8f:fd:51:d2:47:69:ef:a8:d3:b3:91:65:3a:e8:6f:74:37:
         17:72:55:fd:61:60:7d:93:9d:de:09:6d:c6:fb:90:e9:db:4e:
         84:0e:77:d3:04:df:e2:8b:fa:29:99:46:a1:46:ab:10:50:0c:
         c0:35:7b:12:75:e0:37:a9:41:8b:1e:16:95:f5:54:2c:1f:f8:
         06:58:49:95:c7:3b:34:3e:27:df:0e:4c:51:5c:a4:56:9b:f1:
         cb:1c:93:6c:ba:e8:82:bf:41:69:d4:4f:3b:f4:61:46:40:0b:
         83:8f:b8:aa:93:d4:ed:f3:14:6f:db:55:e3:6c:75:6f:c3:cb:
         75:ae:3f:f3:2b:e7:b1:34:28:9d:bf:99:9a:ae:c5:87:bc:f7:
         85:f9:31:94:e9:60:9e:26:04:8d:d4:b5:29:fe:a4:1e:17:41:
         14:de:28:f7:24:79:69:ec:28:05:0a:37:0c:01:a9:8b:2e:06:
         b6:6f:04:30:b8:6f:29:72:a5:e1:ee:22:57:ac:46:77:fb:ba:
         2e:ef:b7:9a:7b:bc:e1:5f:da:2e:30:b2:32:ad:3a:cf:2e:07:
         9e:f9:61:3f:26:6b:af:c0:e1:80:8d:09:b7:31:ce:74:32:f4:
         99:3d:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org