Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/34352e3139312e36342e302f32322d3232203d3e20323639363730.roa
File:                     34352e3139312e36342e302f32322d3232203d3e20323639363730.roa (raw, json)
Hash identifier:          HSVVkXkLk1xIRLRaN51MFlfX6i3O0BhnyGrrJ0nq7+c=
Subject key identifier:   0D:BA:A4:3D:01:66:5F:21:BD:AF:40:97:7E:0D:86:EF:6E:67:82:EF
Certificate issuer:       /CN=AE505B420F5CE0415E541045292B0ED46551A4C7
Certificate serial:       1EF2072880819AA18B9C6C075FC978078607289D
Authority key identifier: AE:50:5B:42:0F:5C:E0:41:5E:54:10:45:29:2B:0E:D4:65:51:A4:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE505B420F5CE0415E541045292B0ED46551A4C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/34352e3139312e36342e302f32322d3232203d3e20323639363730.roa
Signing time:             Wed 23 Aug 2023 19:03:58 +0000
ROA not before:           Wed 23 Aug 2023 18:58:58 +0000
ROA not after:            Wed 21 Aug 2024 19:03:58 +0000
asID:                     269670
IP address blocks:        45.191.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f2:07:28:80:81:9a:a1:8b:9c:6c:07:5f:c9:78:07:86:07:28:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE505B420F5CE0415E541045292B0ED46551A4C7
        Validity
            Not Before: Aug 23 18:58:58 2023 GMT
            Not After : Aug 21 19:03:58 2024 GMT
        Subject: CN=0DBAA43D01665F21BDAF40977E0D86EF6E6782EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:8e:38:d9:9a:ae:64:df:eb:cd:dd:47:1e:
                    80:5d:52:93:8a:26:68:de:92:de:a5:b9:82:46:43:
                    6c:fe:19:ed:18:d7:29:be:68:fb:21:fd:f6:a9:39:
                    c8:24:7c:2f:d7:65:22:8e:a2:63:7c:bb:ff:43:b9:
                    54:16:fe:8a:05:57:64:97:44:6d:6f:ba:a8:fb:83:
                    92:e7:cc:e8:16:cc:eb:e9:69:fe:23:12:37:ee:91:
                    d0:ba:ff:5a:dd:df:95:8f:93:b4:ec:f2:0b:be:46:
                    ee:ad:be:c4:a8:74:13:b4:7b:0c:ca:cb:66:b6:86:
                    ec:a2:5e:f5:f8:74:9b:ff:fb:59:98:41:b6:8c:a0:
                    d3:3c:cf:6a:2e:a3:40:dd:aa:22:12:2e:6b:ba:9c:
                    35:b8:3b:67:41:46:42:a9:f4:9b:ab:90:33:79:8d:
                    de:45:b6:1a:7a:a1:d6:75:4e:84:4b:5d:30:e8:f1:
                    79:dd:b3:8e:75:9d:07:d5:48:36:f2:1f:49:54:d7:
                    6f:c8:4c:b8:37:f4:cd:3d:9d:68:bd:d6:17:0a:79:
                    3e:8c:53:b6:bb:1e:12:b4:fb:7d:c2:c7:f2:b6:5d:
                    b8:ca:4f:6f:65:cd:4b:5e:62:5b:03:90:7d:88:61:
                    c1:37:d0:46:98:37:2d:89:45:dd:ce:03:b3:29:ed:
                    8a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BA:A4:3D:01:66:5F:21:BD:AF:40:97:7E:0D:86:EF:6E:67:82:EF
            X509v3 Authority Key Identifier:
                keyid:AE:50:5B:42:0F:5C:E0:41:5E:54:10:45:29:2B:0E:D4:65:51:A4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/AE505B420F5CE0415E541045292B0ED46551A4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE505B420F5CE0415E541045292B0ED46551A4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/34352e3139312e36342e302f32322d3232203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:de:85:1d:2c:27:db:5f:68:4d:9d:86:e3:93:c6:da:04:
         54:ae:92:52:b8:1e:5f:73:78:b0:df:08:8c:f1:3e:38:0c:48:
         5d:c5:fe:f1:99:84:cc:c6:56:78:43:29:dc:9b:b9:86:7b:f2:
         b7:d6:fa:10:94:bf:e4:a9:24:72:be:4f:32:00:ed:a6:44:15:
         41:58:9f:37:30:1e:81:61:72:a2:57:50:6a:f8:bb:08:93:c2:
         37:04:cd:66:6d:7b:ed:22:01:b9:87:ce:c0:76:fd:d9:6e:6e:
         6e:69:36:7d:08:81:ea:5a:ae:4e:67:5f:1d:66:6d:b3:c9:75:
         23:e9:1f:8a:93:78:5a:99:a6:d7:8f:60:cf:3b:8e:b3:8a:00:
         c5:ab:69:1a:66:b9:8e:b9:fb:a9:5c:ac:b4:f8:50:61:df:34:
         a2:de:c7:72:46:c6:12:04:7d:87:7a:5c:c1:80:01:c2:82:4d:
         2e:c0:44:7d:21:59:0f:c2:1f:8d:48:82:0c:5e:af:7e:3a:37:
         76:53:56:ec:1f:67:37:06:fe:52:0c:77:2d:d0:3a:3d:72:43:
         8f:6d:1d:22:41:23:82:62:b1:f3:af:25:34:b7:b3:da:0b:1a:
         09:5f:b7:f9:a3:b5:f4:ce:82:d6:22:09:8f:d0:1e:fd:f0:0e:
         d4:59:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org