Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32332d3233203d3e20323636303534.roa
File:                     34352e342e34322e302f32332d3233203d3e20323636303534.roa (raw, json)
Hash identifier:          a9U2v7/i9ftmqmKccJgd1QQdp9Rf65QPSX6Ch0G9K7E=
Subject key identifier:   6B:51:EE:7D:C0:43:49:1E:C4:AC:F0:87:F5:BF:84:8E:98:3B:23:1B
Certificate issuer:       /CN=DBF158771926EFB8CA7EEE542CF98F947B92A763
Certificate serial:       53D6D91DAAB0A64F640A4BE0DBC75A97A228C8F7
Authority key identifier: DB:F1:58:77:19:26:EF:B8:CA:7E:EE:54:2C:F9:8F:94:7B:92:A7:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBF158771926EFB8CA7EEE542CF98F947B92A763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32332d3233203d3e20323636303534.roa
Signing time:             Fri 23 Aug 2024 20:04:39 +0000
ROA not before:           Fri 23 Aug 2024 19:59:39 +0000
ROA not after:            Fri 22 Aug 2025 20:04:39 +0000
asID:                     266054
IP address blocks:        45.4.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:d9:1d:aa:b0:a6:4f:64:0a:4b:e0:db:c7:5a:97:a2:28:c8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBF158771926EFB8CA7EEE542CF98F947B92A763
        Validity
            Not Before: Aug 23 19:59:39 2024 GMT
            Not After : Aug 22 20:04:39 2025 GMT
        Subject: CN=6B51EE7DC043491EC4ACF087F5BF848E983B231B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f8:3d:e3:66:88:06:7a:18:a0:f9:a5:ae:eb:
                    9b:19:9a:5d:57:ed:5f:28:24:38:35:ec:51:fd:f8:
                    04:b6:ee:45:75:52:29:d6:bf:2a:9b:75:1f:91:d1:
                    f1:21:b7:00:31:9b:28:8c:08:0c:ce:f7:58:13:9b:
                    99:fe:fa:dc:bf:81:55:0c:cd:2c:0e:cd:b7:1f:63:
                    71:a8:10:75:2a:5c:2b:4c:d6:1d:83:7f:55:e7:ff:
                    e0:79:a3:87:5a:f3:85:ca:eb:7f:13:4c:f2:26:58:
                    da:59:6b:4a:84:d2:5d:ff:dd:16:7f:99:97:09:d4:
                    7e:58:35:3c:d9:38:d8:a8:7f:95:2d:eb:ea:12:5c:
                    d9:32:f3:73:1a:b2:f4:02:d3:79:f4:9b:cc:22:bc:
                    c1:de:41:2f:6e:54:21:66:b9:3c:04:94:41:a0:40:
                    a0:9e:c2:bd:07:08:86:53:9a:3c:45:9d:3a:cf:9d:
                    61:e2:6d:ab:f9:76:5a:ad:9c:dc:9c:68:d1:42:be:
                    66:ce:12:65:a8:28:d8:a2:fc:23:c7:6a:65:25:9d:
                    c9:46:10:c9:f7:7f:f1:96:5c:9f:1a:cc:19:90:46:
                    b8:8c:06:49:0f:bc:2c:6e:08:ba:c5:77:3f:13:16:
                    a9:56:15:32:e0:8d:8e:43:09:f2:fc:40:41:a4:d6:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:51:EE:7D:C0:43:49:1E:C4:AC:F0:87:F5:BF:84:8E:98:3B:23:1B
            X509v3 Authority Key Identifier:
                keyid:DB:F1:58:77:19:26:EF:B8:CA:7E:EE:54:2C:F9:8F:94:7B:92:A7:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/DBF158771926EFB8CA7EEE542CF98F947B92A763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBF158771926EFB8CA7EEE542CF98F947B92A763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32332d3233203d3e20323636303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:22:f0:a2:f6:79:9e:45:82:ef:7f:e9:21:ab:74:f5:d1:c1:
         d1:f3:b2:15:8e:dd:09:80:9d:82:d1:84:17:4c:cb:49:35:a6:
         f2:49:ef:c9:03:0d:3f:3e:49:a9:f3:77:fc:bb:90:20:88:41:
         8d:d3:4b:1b:0d:28:e6:ac:1c:d0:0b:e3:21:e3:09:ee:8e:4d:
         29:c6:6c:fc:38:cb:eb:68:c7:dd:f6:c4:75:75:ed:d7:af:ce:
         92:57:f7:1d:34:ae:6f:ee:b1:59:cf:a0:c2:b1:4e:1d:c8:38:
         b5:99:31:a3:a5:95:4e:57:c3:27:ba:d5:81:94:a8:69:e1:90:
         72:cc:f6:48:a6:18:ad:cb:92:93:a9:3f:a9:f7:83:81:13:a7:
         43:2c:d2:89:54:70:45:a7:a8:b7:ea:15:dc:ac:b2:81:ff:a7:
         18:81:71:fe:d9:87:76:7a:90:6a:b2:9d:6c:1b:d1:29:eb:db:
         4c:9f:80:f8:30:7a:b7:e2:05:12:d4:6c:97:5f:6b:75:ef:b0:
         3f:d3:a1:78:a6:4f:b1:dd:31:b3:b7:9c:38:03:cd:f0:79:32:
         e6:64:89:dc:08:3a:05:23:63:5a:6a:4c:f7:79:2a:be:04:2d:
         13:20:85:c4:f9:25:ad:db:d8:a7:b0:1a:9d:76:fa:85:d6:7c:
         f6:43:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 23:40:49 2024 by rpki-client on console-ams.rpki-client.org