Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/34352e3139312e36342e302f32332d3233203d3e20323639363730.roa
File:                     34352e3139312e36342e302f32332d3233203d3e20323639363730.roa (raw, json)
Hash identifier:          CrgKF4lYGUvKhBMw481WAA9e++QdvB0W8yns3BQ/lK0=
Subject key identifier:   AA:20:C0:BF:2A:55:F7:6B:78:BC:38:15:9A:CF:20:25:A8:A9:54:82
Certificate issuer:       /CN=AE505B420F5CE0415E541045292B0ED46551A4C7
Certificate serial:       5AA51741DCFB6B5CD54F24A6419010D3924EF990
Authority key identifier: AE:50:5B:42:0F:5C:E0:41:5E:54:10:45:29:2B:0E:D4:65:51:A4:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE505B420F5CE0415E541045292B0ED46551A4C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/34352e3139312e36342e302f32332d3233203d3e20323639363730.roa
Signing time:             Wed 23 Aug 2023 19:03:56 +0000
ROA not before:           Wed 23 Aug 2023 18:58:56 +0000
ROA not after:            Wed 21 Aug 2024 19:03:56 +0000
asID:                     269670
IP address blocks:        45.191.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a5:17:41:dc:fb:6b:5c:d5:4f:24:a6:41:90:10:d3:92:4e:f9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE505B420F5CE0415E541045292B0ED46551A4C7
        Validity
            Not Before: Aug 23 18:58:56 2023 GMT
            Not After : Aug 21 19:03:56 2024 GMT
        Subject: CN=AA20C0BF2A55F76B78BC38159ACF2025A8A95482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:1e:00:3c:a1:d3:d6:38:c2:5a:51:35:9a:
                    a3:98:bf:97:41:b9:ea:62:89:04:93:14:c3:9d:26:
                    30:51:48:6d:58:46:f6:49:b1:9b:3b:d3:ea:d9:07:
                    37:78:ca:0e:55:61:6f:0d:3e:3f:08:8c:77:d9:31:
                    a5:e3:73:32:6f:b8:f7:5a:fe:90:a8:50:ce:d0:7c:
                    c5:0a:b7:44:ed:c7:f6:e6:4f:a0:be:6e:e2:66:51:
                    2d:2c:74:51:d8:a5:06:7e:04:6a:89:bf:10:88:f8:
                    76:d2:8e:69:0e:07:28:89:8a:d8:df:55:95:be:30:
                    3a:11:55:b0:93:57:c7:4e:7a:4a:4a:ee:3b:15:f7:
                    d9:03:1e:bf:3b:b6:fb:db:e5:38:27:29:fc:73:e4:
                    7d:2f:e3:8e:81:51:e0:83:e1:5f:4c:0c:d9:9e:e5:
                    5a:67:25:ea:5f:50:06:d9:5c:b5:87:7f:70:ea:b3:
                    9a:8d:d0:31:65:58:99:2a:68:2c:ac:bd:ae:f5:cc:
                    5e:81:31:84:9d:5d:09:3b:57:92:76:59:61:e3:6b:
                    43:8c:6a:de:c1:3a:27:b7:20:f3:53:9b:93:17:e3:
                    29:75:18:08:6f:d0:3a:44:ec:dd:7a:ae:2e:1f:bf:
                    95:a8:af:dd:7f:7e:d2:1e:69:1f:e6:cd:fb:8b:b2:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:20:C0:BF:2A:55:F7:6B:78:BC:38:15:9A:CF:20:25:A8:A9:54:82
            X509v3 Authority Key Identifier:
                keyid:AE:50:5B:42:0F:5C:E0:41:5E:54:10:45:29:2B:0E:D4:65:51:A4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/AE505B420F5CE0415E541045292B0ED46551A4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE505B420F5CE0415E541045292B0ED46551A4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/34352e3139312e36342e302f32332d3233203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:a9:c5:55:69:ec:f9:f2:0e:c8:67:73:4e:c0:27:dd:40:
         a0:f0:dd:86:fa:11:8a:fe:c9:dd:e0:1f:f1:19:0a:c6:d2:33:
         7b:f2:af:79:b5:76:00:3b:ac:69:23:3a:f5:c2:4e:d0:e9:be:
         db:e8:0a:e6:b9:0c:01:b3:b3:f6:0a:0f:63:71:43:94:20:18:
         bf:a6:9f:af:d1:d1:ca:8b:0a:b8:ff:68:7b:47:ae:1a:a1:46:
         81:1e:cc:7a:e5:70:c7:fd:34:85:46:45:89:95:14:67:e2:27:
         cb:df:91:06:10:61:25:c4:6e:e5:74:0c:21:25:65:9c:5b:5f:
         e3:bf:10:1e:94:3a:49:39:b4:64:9f:d7:ec:31:c9:37:67:92:
         7a:ae:f1:10:e3:2e:05:a6:46:13:81:87:08:93:6c:61:6d:9a:
         5c:64:f7:92:5d:e5:a3:81:65:d0:d2:c6:ba:71:4c:8b:11:98:
         c2:4d:62:50:3e:b9:49:db:62:da:1d:0f:48:83:39:3d:e6:3b:
         6b:f4:bb:ba:39:40:09:7f:a1:e3:ad:73:07:d8:38:4a:a6:20:
         aa:6a:2a:96:01:f9:0d:f3:fd:5c:8e:85:64:14:23:4b:bc:db:
         49:20:fd:6d:ab:52:e6:e3:a4:a8:a9:1f:b9:30:75:2f:96:53:
         d5:91:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org